Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0db0e655-ac41-3221-be15-0870b8c6a5af.roa
File:                     0db0e655-ac41-3221-be15-0870b8c6a5af.roa (raw, json)
Hash identifier:          jOJvzuS8WJpubyk96JnS+emt2Ox4FgT7tVWX8RcHuN0=
Subject key identifier:   B9:E5:A8:15:19:78:CA:65:E4:8F:7B:D2:8C:48:B4:58:13:8F:4C:DC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292FC4C726368CEE7951700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0db0e655-ac41-3221-be15-0870b8c6a5af.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        23.84.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:fc:4c:72:63:68:ce:e7:95:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=44fd2b24-f44a-43cf-9c40-0e7b55ee2b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:d2:01:61:7c:4c:50:a6:4c:21:73:3c:11:
                    14:61:b6:57:4b:c3:91:57:91:e6:68:79:b8:ec:6b:
                    28:f1:ed:55:20:fc:fa:44:ea:4c:76:81:22:76:be:
                    2d:b1:22:ad:9e:ac:69:e2:59:4d:20:64:43:c2:fe:
                    fd:42:63:b1:95:ac:80:95:a4:05:d6:40:dd:f9:9a:
                    d1:43:63:51:af:38:c6:0f:a7:1d:b3:eb:1c:31:ba:
                    9b:89:82:df:4a:73:a6:4f:23:7d:75:ca:23:cc:c8:
                    ca:84:1a:82:0b:3b:d1:19:38:43:4b:aa:bc:c0:b5:
                    3a:6d:71:ab:bd:26:60:a5:14:4b:61:cf:02:45:bd:
                    62:ca:66:e2:b1:86:ca:87:4e:76:a1:3f:fd:32:c1:
                    c1:f0:33:aa:f6:8a:9b:99:2f:d7:78:0c:f5:31:11:
                    9e:79:f5:83:1f:e5:c7:64:cf:98:76:fb:9a:ca:35:
                    69:3a:dc:c6:12:f3:da:3c:f4:f2:d0:88:6e:06:51:
                    f6:0d:15:f7:6d:34:18:43:fc:53:f4:e8:f7:7c:73:
                    85:ec:58:d6:5a:20:6b:d2:56:02:20:13:8e:fd:c8:
                    bf:89:ea:44:a4:1a:c4:4d:b2:42:66:6c:4e:ea:c7:
                    8c:04:de:1a:8f:e1:45:31:57:ac:ce:8a:85:75:53:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:A8:15:19:78:CA:65:E4:8F:7B:D2:8C:48:B4:58:13:8F:4C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0db0e655-ac41-3221-be15-0870b8c6a5af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:3f:ea:21:c9:e0:ef:cd:af:ad:52:2e:8d:3b:2e:7f:bb:
         3b:3b:f1:97:08:b1:74:38:43:12:9c:90:0b:d1:49:63:2b:0b:
         77:12:f2:46:44:56:32:18:e1:e7:d2:45:f3:e5:47:d2:49:e2:
         c6:e2:46:8e:92:b6:b1:33:3e:a8:89:f5:b1:2e:a0:82:29:37:
         b5:d0:e9:c4:b2:51:d3:9f:3b:63:d8:85:dc:f7:52:0d:91:13:
         9d:44:fb:ae:b5:50:0e:2d:2a:05:f0:65:ae:19:1d:31:01:65:
         96:98:76:2e:05:9c:cb:39:79:81:cd:bd:6e:60:81:17:aa:c8:
         a6:44:b0:a2:d6:cc:24:bc:2a:63:a7:78:85:08:57:e3:e4:66:
         87:16:50:36:87:26:2e:55:b8:a8:d7:b2:61:ac:27:5f:72:ee:
         8b:b1:ce:18:0b:16:db:04:4a:f9:b3:3e:d0:d5:25:6a:ba:a6:
         0f:8f:bd:a1:74:64:2c:fa:67:89:63:97:de:0c:1b:b3:ce:1f:
         61:45:52:47:b3:7f:03:9f:55:f0:90:bd:2f:0d:fb:33:b2:99:
         15:c2:18:05:13:fc:67:62:17:5f:e9:1c:42:4c:38:fc:a4:88:
         01:bd:3f:77:c3:3c:cc:d3:be:27:bb:ef:93:1a:61:64:b6:c0:
         44:aa:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:51:07 2026 by rpki-client