Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa
File:                     9195e538-fa0d-39e7-ade2-e40801552963.roa (raw, json)
Hash identifier:          PwWZQz2rpSwS5YByU2pFybtvm7H0vWzmbEo9KnMvXRI=
Subject key identifier:   07:67:99:28:CA:72:5F:86:D2:94:FC:B4:B8:61:0A:7E:2B:02:B5:5B
Certificate issuer:       /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial:       010D0C9F4328584F1CC7A97ACC8D4F9E3E4C3EC0
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     398020
IP address blocks:        23.133.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a9:7a:cc:8d:4f:9e:3e:4c:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=bf29e923-ae22-405d-a9fb-4e48daccf4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6b:41:b4:36:70:1a:81:95:ad:f9:3f:0d:dc:
                    87:f8:2e:fd:97:3e:bb:64:e2:bf:8e:5a:52:f0:74:
                    8f:7d:cf:04:34:0f:c0:e3:cd:f1:85:b4:61:e1:41:
                    24:aa:75:62:d1:36:ec:24:48:21:17:83:40:92:d2:
                    10:e7:e2:c8:fc:7e:92:81:3d:09:cf:df:ad:97:ad:
                    9e:dc:7c:ec:5e:85:e5:5c:46:60:26:50:57:7a:b2:
                    e9:72:6a:22:80:24:21:fc:10:68:65:c2:96:45:42:
                    f0:7f:c8:3b:c2:98:e9:a7:ae:f0:f5:f0:a6:97:29:
                    b5:22:8d:b8:f3:a5:fd:73:6b:13:89:a7:e5:0b:d6:
                    ae:3a:83:09:28:65:27:01:2f:e2:bf:8f:16:34:a4:
                    85:60:ab:7e:80:6f:92:0e:a8:e6:82:81:b2:d0:6b:
                    76:a8:11:45:90:fa:71:3c:25:11:17:3d:41:8a:48:
                    28:2b:48:c6:13:7e:ee:3d:39:e4:bf:e7:a4:cb:69:
                    8a:fb:30:f5:61:af:76:27:87:3c:01:29:cb:58:60:
                    a6:35:cd:be:99:f8:ca:58:dd:d4:27:e0:6b:1a:5f:
                    e0:75:68:4d:70:40:26:09:14:ac:8f:2e:0a:09:17:
                    34:f8:f2:ca:b7:c5:54:64:52:e6:0c:30:f3:92:b7:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:99:28:CA:72:5F:86:D2:94:FC:B4:B8:61:0A:7E:2B:02:B5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl

            X509v3 Authority Key Identifier:
                keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:29:33:34:6c:4d:5d:3d:64:67:b3:d9:07:1e:bb:8e:4e:40:
         e9:99:66:de:e1:1b:03:3a:d2:d8:2f:92:5c:9f:d4:a2:19:04:
         95:c4:93:df:79:73:08:6b:21:9f:b2:50:47:85:98:39:71:91:
         de:f4:ad:83:6a:9b:b9:86:f1:19:53:3e:39:d4:ed:ae:c4:15:
         0d:76:4f:ed:0f:37:86:1b:83:6e:bb:bc:b4:17:9f:9f:ad:81:
         40:06:36:99:1e:4f:0d:a7:4b:e0:fc:89:b4:ce:6c:df:4a:09:
         3b:b9:0a:d4:11:34:f9:38:ab:3c:7a:b8:a8:57:92:93:bd:14:
         69:f9:b1:86:4d:fb:be:47:bd:bc:46:35:d2:9f:c2:9a:ef:ad:
         ec:a8:02:72:00:54:02:0e:38:96:54:b6:f2:5c:20:51:2b:f2:
         db:f4:02:4c:0d:fb:a0:65:a5:5e:c8:ed:85:05:fa:a1:39:71:
         d1:c0:25:c9:17:1d:ce:c9:42:d3:42:2a:5a:f1:b0:9a:5a:7e:
         26:9a:95:c3:e0:84:d0:be:e8:a6:1b:bc:03:9a:b2:b3:75:66:
         e6:61:dd:80:0e:22:da:ef:fe:1a:90:58:fc:6b:e5:64:7d:12:
         0c:9a:9a:4e:52:03:11:cd:96:fe:ad:21:f9:f0:cc:c3:5d:44:
         c5:fb:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:11:51 2026 by rpki-client