Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa
File:                     bfa7d67a-952c-3905-85f8-44a66117cd46.roa (raw, json)
Hash identifier:          ESOxOI98jV4XwAuiJLEOQbqmCo6bKvOQEMJkckk0FE0=
Subject key identifier:   67:37:83:54:8C:0C:B7:38:F0:79:5C:14:55:38:14:0A:3C:13:3C:35
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA788D9A9843E03FE720B4280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     64267
IP address blocks:        23.157.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d9:a9:84:3e:03:fe:72:0b:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=94cddfa1-9fbc-4a84-925f-8f30e4d8cedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:c4:62:b7:24:65:84:2d:80:40:79:15:19:
                    e2:75:2f:d4:29:ac:cf:81:8d:46:33:22:79:e5:90:
                    20:51:40:0e:4f:78:35:64:63:d4:40:cf:c6:89:f9:
                    7c:a9:fc:47:da:de:fd:9a:ff:e9:11:33:0b:97:f5:
                    35:6c:7d:62:7f:4f:4d:0e:7b:a0:ae:f1:cf:a2:6c:
                    fd:25:4a:38:d4:8d:8b:e4:a6:42:a0:6f:43:c3:e4:
                    53:af:bd:c3:1a:e9:a8:41:db:26:1f:00:34:ff:0c:
                    0f:ec:17:0a:17:2f:a9:02:55:8c:2c:8b:10:d0:c1:
                    ef:bb:fc:17:23:49:62:6f:65:86:dd:32:74:d3:22:
                    1d:ff:36:6e:b0:9c:fe:e1:94:bc:b8:d0:a4:17:27:
                    8c:86:eb:a8:ff:c6:02:b3:9f:84:97:26:18:84:11:
                    b0:08:11:b7:53:58:d2:98:db:51:27:6c:90:09:1c:
                    ff:2c:ae:e3:92:a8:eb:a0:79:30:70:f8:85:c5:69:
                    3f:4c:fd:2f:b4:5a:d5:99:12:e2:56:28:83:cd:95:
                    f7:a8:ca:da:ae:c4:c0:05:2b:3b:7d:2b:7b:fe:1f:
                    6d:1f:1c:d7:34:af:1a:58:5a:ea:95:f8:da:1e:af:
                    be:41:dd:6e:94:1c:0d:99:bc:38:e4:2b:26:ac:b6:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:37:83:54:8C:0C:B7:38:F0:79:5C:14:55:38:14:0A:3C:13:3C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:3b:4d:db:94:8a:ff:9c:89:35:fd:68:2c:3e:7a:c5:a2:6a:
         9e:31:98:f9:b7:a9:a9:1d:ee:6c:66:aa:a3:f4:d5:c4:20:e4:
         87:11:db:15:4d:2b:1a:db:30:ef:f7:45:f5:cf:e5:fa:a5:c4:
         42:ec:a5:7f:6d:a4:91:20:2b:c9:07:57:b4:51:60:35:a3:32:
         42:71:7e:07:c5:b3:9b:74:c7:97:01:73:9d:65:52:d6:88:f9:
         23:5d:9a:75:34:b4:20:45:35:34:5b:29:e0:e2:5a:21:01:9f:
         ab:b1:7e:d1:d4:80:46:09:19:5d:1e:f3:5c:cf:76:dd:85:85:
         8b:41:f4:aa:b0:51:12:32:4a:be:ce:1d:94:7d:16:01:21:ed:
         78:8e:bc:ee:db:38:fd:bb:3e:90:97:72:96:d2:30:a1:55:dc:
         5f:f4:4f:35:ac:bc:7c:c7:a2:69:cf:45:97:37:8d:3e:18:28:
         3c:7f:fe:66:e2:69:1c:98:a0:66:d4:da:a6:2e:74:8b:64:b0:
         9d:1b:e1:c7:a3:47:96:ca:46:69:a9:48:eb:5c:65:1b:36:22:
         3e:7a:7f:a8:17:2b:c6:64:ae:d6:bb:69:25:c9:9b:6f:a0:bb:
         8f:46:1d:a8:7c:25:db:f6:7a:e5:5e:fa:7a:88:8a:59:98:a1:
         7e:12:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:46:56 2026 by rpki-client