Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa
File:                     95f72258-e028-38f3-9aa4-eb809a802750.roa (raw, json)
Hash identifier:          1wMgj6q5sGkTTHcXdpJIhrAp5HEJOFyIf8P2C+qV9Ls=
Subject key identifier:   8D:16:F7:DE:B8:BD:CB:32:26:3C:C3:F1:01:BA:D0:03:20:D1:EE:30
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584F1BB2C8FAA65459E71D963F80
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa
Signing time:             Tue 08 Sep 2026 15:42:30 +0000
ROA not before:           Tue 08 Sep 2026 15:42:30 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     32217
IP address blocks:        23.156.192.0/24 maxlen: 24
                          23.174.112.0/24 maxlen: 24
                          142.202.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:b2:c8:fa:a6:54:59:e7:1d:96:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Sep  8 15:42:30 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=030a5257-b968-4d81-9d20-b7a3af181d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:45:b1:f1:5d:b9:71:b0:a9:ca:f1:3e:d4:
                    8d:da:8d:a1:e8:5a:0a:2b:ef:92:98:2e:ee:aa:93:
                    b3:7a:ab:d5:6c:71:d9:0c:1c:11:e0:97:aa:9f:4d:
                    0e:88:96:42:b6:ef:7a:40:b3:68:6a:09:58:b2:65:
                    c2:f3:3e:18:13:33:a9:a5:c3:30:b7:bc:2a:bd:2d:
                    b4:68:63:8c:b5:3d:d1:3f:07:a7:43:f7:ad:10:d0:
                    13:8d:fb:fd:f3:70:44:e0:4b:2c:5e:92:79:95:62:
                    fd:5f:88:d4:fb:f7:f7:3f:fa:9b:08:c1:5a:82:ff:
                    cf:fe:32:62:8c:4e:a8:37:f1:53:b0:0e:40:d5:8c:
                    a0:38:80:5c:e4:f4:2b:e9:a5:89:6c:1f:05:ed:d4:
                    09:fc:e4:1b:2d:58:a6:c2:2a:bb:82:cf:eb:e8:16:
                    f7:98:70:10:90:f2:93:c6:ca:b0:7a:29:84:bb:dc:
                    ff:43:8d:f6:46:fa:99:1d:3f:cf:b3:51:4a:77:b7:
                    34:a8:a2:05:4a:51:e6:3f:ea:ea:58:4a:4e:3e:5d:
                    c4:ab:e2:6f:f9:6d:1c:e6:22:98:7d:85:0a:9f:1a:
                    f7:dc:e4:7c:82:65:c2:5b:7b:14:9e:f6:b3:00:d5:
                    3a:d2:1c:e9:8e:01:24:4a:ca:c4:a3:d3:70:c7:4a:
                    00:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:16:F7:DE:B8:BD:CB:32:26:3C:C3:F1:01:BA:D0:03:20:D1:EE:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/95f72258-e028-38f3-9aa4-eb809a802750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.192.0/24
                  23.174.112.0/24
                  142.202.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:c6:e2:fe:c8:6c:dd:dc:d4:f3:28:0f:c6:52:0d:c7:8a:
         63:f0:cf:12:35:8f:73:8c:47:15:e3:65:e2:16:cf:07:77:a4:
         11:6e:89:ea:d0:d2:e7:39:b4:58:4e:6c:2c:0b:20:47:fd:3f:
         21:0f:d1:7a:80:82:c8:c9:cb:4f:e3:52:ee:0d:87:3e:ca:bb:
         a0:cd:0f:f0:d3:f1:1d:79:e8:a4:94:c3:cd:71:98:70:2d:90:
         16:4e:f0:d7:ba:5d:82:e3:9e:cd:5d:ec:be:8a:16:5f:c0:05:
         bd:cd:de:cf:33:b3:80:bf:97:a4:a1:31:d0:99:c5:db:b2:27:
         40:c8:9a:54:c5:ef:8d:69:56:dd:75:70:b9:35:4c:38:91:63:
         d0:54:d7:69:6f:0a:07:94:da:22:a2:27:4a:cd:48:de:48:60:
         03:1d:2d:57:ea:17:81:d5:3d:a2:f3:00:1a:19:07:99:ac:17:
         05:65:86:3c:e0:f2:9c:29:cf:92:7d:83:fb:8f:f0:40:72:2f:
         1d:b0:a3:5c:b0:18:dc:dc:97:c4:29:46:cd:70:b1:ba:78:15:
         18:d1:9e:94:66:c0:a4:ee:ae:21:29:8f:44:ab:36:b0:ec:66:
         37:1d:54:76:af:ed:46:d6:69:3a:a4:92:eb:41:31:23:48:c0:
         a1:2b:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:44:53 2026 by rpki-client