Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/7ad54727-b676-3fe3-9d60-5a838f7b7b88.roa
File:                     7ad54727-b676-3fe3-9d60-5a838f7b7b88.roa (raw, json)
Hash identifier:          IPTky3ijADZNCDkbg2+qZd15WyJ/B4XRgCy9EehPP+4=
Subject key identifier:   75:F9:A2:AE:4E:0F:7D:2D:32:8F:F8:E8:00:3E:BA:89:2A:34:9C:14
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328584EF87CCF7E955152723DC38F20
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/7ad54727-b676-3fe3-9d60-5a838f7b7b88.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     398143
IP address blocks:        23.154.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:cf:7e:95:51:52:72:3d:c3:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=c2298f48-dd24-4429-8558-25a894b9a474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:de:93:4f:fa:c4:94:c8:10:8c:de:24:04:8f:
                    65:be:02:15:df:1b:3c:c7:eb:ce:15:ba:d0:7c:42:
                    43:c9:3c:33:7b:01:42:d9:5e:a0:23:de:62:bf:8c:
                    09:ee:73:01:ea:f1:54:fc:cc:97:ac:7e:db:76:16:
                    68:67:28:03:34:f0:36:b2:c5:cd:83:ce:ce:c9:e9:
                    79:c8:33:47:56:6a:d0:3b:17:87:c2:1a:fd:35:c8:
                    31:bc:8d:da:df:e9:db:36:5e:fa:11:51:be:e7:d2:
                    98:83:09:85:3e:ce:a7:70:31:05:88:99:11:b8:b4:
                    7f:a8:83:11:21:2f:10:86:d5:07:c7:a8:9a:c4:14:
                    89:6d:a2:cf:59:f7:6d:0a:21:e7:b5:a4:81:4c:09:
                    b0:6c:81:74:d3:23:bd:2f:df:3c:60:43:07:5c:ab:
                    db:38:19:d2:20:d4:53:10:dd:70:8e:d8:63:39:5b:
                    0d:69:33:b1:da:bd:2f:47:8b:3e:d0:e8:0b:79:27:
                    bc:b4:06:d1:6f:5f:15:bc:df:6d:9a:bf:05:af:d8:
                    68:bc:b3:51:c1:84:32:e4:3b:33:1e:26:d8:d7:72:
                    eb:5d:e2:e6:8f:0d:ce:69:52:97:90:8f:31:4d:c2:
                    6b:e8:a6:70:a8:8a:89:2c:c9:c0:25:1b:f6:d6:8e:
                    c6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F9:A2:AE:4E:0F:7D:2D:32:8F:F8:E8:00:3E:BA:89:2A:34:9C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/7ad54727-b676-3fe3-9d60-5a838f7b7b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:74:aa:25:f4:bf:79:99:66:d1:90:4f:d4:77:f0:89:dc:5c:
         d2:c3:65:92:24:3f:5a:b3:b8:9d:86:83:17:d0:05:9b:2c:35:
         8a:7b:30:de:61:87:0c:db:77:34:1d:bf:73:5c:cc:40:d1:eb:
         2e:d4:b7:c7:df:8f:34:0a:e9:ee:72:cb:e5:e6:f5:4b:fe:87:
         29:40:90:91:cf:eb:5c:c2:0e:50:b4:35:e4:28:19:35:7e:15:
         ed:2f:e2:ba:40:09:75:52:42:00:66:4b:65:a4:de:2d:89:05:
         b5:ee:77:d1:47:4f:8b:2c:1d:bc:24:32:33:51:e4:1f:33:58:
         ca:b3:42:d7:9e:8c:61:67:75:da:d5:07:1e:67:96:08:d8:b3:
         1d:77:05:95:55:1f:e1:7f:4f:1c:42:93:7e:c7:c8:25:cf:71:
         29:7d:bc:90:4c:32:10:e0:a2:c3:dc:e1:5a:17:8d:9e:3a:f2:
         0c:2d:f3:60:af:50:97:ac:51:d5:0a:6e:4f:01:cb:2e:e2:99:
         fc:d3:b3:0d:09:f5:85:8a:f1:81:bf:f5:be:a0:33:80:d5:9c:
         cd:39:70:ea:b8:d0:be:cb:69:1f:5f:f0:26:cb:74:e5:9d:1a:
         04:3b:bf:6a:17:88:de:76:5a:8f:34:cb:52:71:4b:17:e9:06:
         4c:c6:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:10:13 2026 by rpki-client