Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
File:                     3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa (raw, json)
Hash identifier:          HYXXg1II4asFdW1j/TP1nCnx4ZOmB/0I1lcYe4wlWd4=
Subject key identifier:   93:F8:FE:5F:C3:1A:30:FD:4C:32:19:24:A0:DE:1E:09:F6:70:40:C6
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F4328584F94D34F98559A85FBE7380F00
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     149020
IP address blocks:        23.131.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:4f:98:55:9a:85:fb:e7:38:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=86534cf4-2146-4653-98bc-3575fc951233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e2:40:47:d1:b7:a5:78:ab:bd:68:e1:c9:49:
                    8d:02:74:ca:d2:bd:7b:17:c4:aa:04:a5:68:4f:d8:
                    f8:51:8e:27:0e:a2:90:dc:c2:19:7d:14:d2:61:19:
                    97:b6:42:21:f5:47:56:8a:50:5d:26:d4:b1:09:e3:
                    90:f4:2e:64:4f:51:0b:81:8e:f3:37:3e:8b:2e:17:
                    54:51:65:00:fa:8c:6e:db:62:47:19:20:f1:fa:4f:
                    66:a3:41:34:00:85:31:cf:95:fb:31:d9:e8:dd:3f:
                    cb:02:96:c1:f2:99:1b:9b:aa:42:8a:b3:73:59:d2:
                    9e:24:b3:4c:1a:0b:4d:fc:0e:a3:4f:32:34:9d:f9:
                    94:06:d1:c3:52:c5:72:30:8f:76:a8:18:d3:d2:06:
                    0c:80:ae:8c:a7:48:1c:c9:61:cd:04:3c:b5:ab:94:
                    61:75:a8:95:10:0c:ab:1c:46:3e:23:4e:09:62:58:
                    2f:84:58:26:a0:2e:b3:b5:0c:e6:f5:7e:71:a2:2b:
                    0d:b9:50:65:b2:76:a6:12:fc:73:aa:6f:5e:29:9d:
                    47:d0:2c:ba:7f:5c:16:62:df:41:63:b4:55:7e:27:
                    31:f7:b3:e4:fb:05:59:a2:69:37:35:84:be:b8:87:
                    0a:4c:af:51:e1:b0:5d:cf:c5:67:d4:32:31:02:dc:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:FE:5F:C3:1A:30:FD:4C:32:19:24:A0:DE:1E:09:F6:70:40:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:31:54:3e:a0:4a:18:f1:bf:8a:7f:c3:5e:00:6d:d8:09:b6:
         db:70:a8:f8:f6:71:3a:67:9f:44:4f:8a:11:2f:a1:00:e4:f6:
         e2:e5:85:f2:a6:9e:83:01:87:88:be:a8:5e:5a:38:7f:09:f9:
         da:4f:dd:f5:98:93:0a:a7:f7:de:e6:ec:b0:b4:8e:7f:1a:c2:
         fd:97:89:4a:8b:15:fa:4b:9d:ce:3e:44:9e:15:6d:49:73:f4:
         9b:48:91:23:0f:bc:9d:8a:45:da:88:a7:01:6c:ea:e4:03:83:
         29:e8:af:84:64:33:c1:df:6f:5a:c2:53:4a:c2:99:2e:a3:02:
         8e:21:0e:2c:96:de:96:c5:c1:1b:ca:93:d0:0d:be:59:c7:70:
         83:7c:8f:43:63:09:79:ba:c4:e9:84:97:3d:8d:61:c2:02:4c:
         3b:58:0e:f2:e7:f1:64:09:5e:92:54:1c:ee:d6:9c:de:a0:60:
         ab:da:5f:9f:d4:a8:45:7e:99:0e:b8:e6:cf:90:3c:06:ce:ff:
         f7:70:c7:d6:f3:84:d4:6b:d4:f3:cd:6d:46:ad:ea:d2:fd:c7:
         5f:15:b5:50:eb:89:7d:67:ff:df:72:ce:4e:e7:90:3c:81:2a:
         16:8b:56:49:36:ff:85:95:19:c6:43:ca:ec:71:55:31:68:c4:
         d8:0d:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:41:45 2026 by rpki-client