Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/2323b097-5327-3584-a8a6-0b50b510bd46.roa
File:                     2323b097-5327-3584-a8a6-0b50b510bd46.roa (raw, json)
Hash identifier:          izrgLvhHuqiL5IH5S+qZAo2roykAPDXwC8zZVIMJ1Hs=
Subject key identifier:   55:CD:07:2A:6C:D5:E2:46:2F:10:2D:D6:BD:AC:A2:7C:74:9B:B5:FC
Certificate issuer:       /CN=8b3000e8-1e0f-482a-991d-e2358c249593
Certificate serial:       010D0C9F4328584F9D3313AC18FE89AB449A4B80
Authority key identifier: 78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/2323b097-5327-3584-a8a6-0b50b510bd46.roa
Signing time:             Sun 25 Oct 2026 01:00:13 +0000
ROA not before:           Sun 25 Oct 2026 01:00:13 +0000
ROA not after:            Sat 23 Jan 2027 02:00:13 +0000
asID:                     216475
IP address blocks:        192.67.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9d:33:13:ac:18:fe:89:ab:44:9a:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b3000e8-1e0f-482a-991d-e2358c249593
        Validity
            Not Before: Oct 25 01:00:13 2026 GMT
            Not After : Jan 23 02:00:13 2027 GMT
        Subject: CN=2d40e8d6-46e4-4b4f-8298-6f09ff126dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:01:00:c4:0c:96:75:f6:10:4b:62:c9:75:
                    27:2b:cb:34:4f:a4:a4:12:0a:61:eb:db:e1:a5:8b:
                    90:95:7c:e1:df:bc:4e:18:cb:a4:fa:32:1e:a6:3a:
                    10:dd:f3:8e:d9:42:3a:40:4f:dd:d5:e6:82:44:db:
                    a8:34:bc:dc:12:ee:1c:63:c0:8b:a3:7d:9f:a2:49:
                    5f:09:6a:57:a9:ab:cc:e3:7b:0b:52:a0:b0:ed:40:
                    0d:3d:8a:c3:ac:e1:cf:93:db:d1:65:ca:35:31:2a:
                    2f:db:b7:6f:01:94:b4:10:84:1d:af:bd:b2:4e:b8:
                    7c:d0:3b:43:94:c2:c6:56:37:81:af:8d:cf:71:5b:
                    9c:60:6a:f8:5b:69:ab:0f:2a:98:58:0f:66:8e:21:
                    7a:af:66:60:90:f4:b8:f8:24:a4:3c:7f:e8:62:21:
                    95:3a:90:6c:8e:3e:11:03:7d:93:c9:8c:3f:57:cb:
                    03:14:3e:2d:4d:5b:02:f6:19:05:1f:b6:4b:a7:cd:
                    0e:a4:ef:37:b5:1e:19:86:f2:ba:57:0a:a3:bd:b3:
                    ae:0d:9f:59:e5:ef:1d:67:85:be:98:8b:a8:96:14:
                    0c:80:87:1a:5e:2f:91:60:b5:f0:81:cb:20:02:8e:
                    09:cc:90:9f:16:bb:1c:9e:70:71:f2:8b:41:3c:74:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CD:07:2A:6C:D5:E2:46:2F:10:2D:D6:BD:AC:A2:7C:74:9B:B5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/2323b097-5327-3584-a8a6-0b50b510bd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl

            X509v3 Authority Key Identifier:
                keyid:78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:41:42:c3:ef:06:1b:8b:6b:a7:64:d8:9e:b0:bb:05:7f:87:
         be:4e:52:72:27:77:ee:e7:d5:2e:61:41:58:a5:4b:32:8f:ba:
         33:09:cf:ba:4a:be:6e:27:d1:97:2d:1b:c2:e7:90:ca:a4:85:
         bb:45:19:c4:b1:55:09:56:56:a3:f5:6e:a3:c6:d9:d0:3b:aa:
         9e:6f:1e:9e:7f:61:a3:50:46:50:87:a9:c2:02:ab:1d:1b:c5:
         02:70:00:29:93:01:13:50:1f:6d:4a:98:70:0f:1b:31:6a:b5:
         de:ab:b5:65:fe:e7:c8:eb:18:9f:7e:ec:ba:e5:f9:5a:43:d7:
         e9:d7:06:99:ba:67:ed:e0:8c:93:58:6d:ab:89:c0:b4:ce:d1:
         87:1b:be:fc:5d:23:d4:44:ca:c3:f3:ca:ab:99:6c:04:2e:b0:
         6b:6d:16:61:bd:94:25:39:0c:e6:31:f7:73:c1:ce:e1:87:b5:
         15:5b:e3:0f:db:df:0b:16:6b:97:f7:b0:73:a0:b1:d9:91:5b:
         80:a7:4c:eb:64:28:7f:c5:e5:16:7e:02:02:77:33:90:c8:2e:
         29:84:33:93:24:3d:24:8e:28:0c:e5:b8:60:4e:86:2c:25:46:
         73:57:5c:4e:36:fb:58:d4:44:37:e6:5c:d0:b8:34:55:3a:ab:
         66:d0:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:30:21 2026 by rpki-client