Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/d9099165-8c7b-3785-b1cb-635dae2ff14d.roa
File:                     d9099165-8c7b-3785-b1cb-635dae2ff14d.roa (raw, json)
Hash identifier:          59Mu5PI/BZPCfZ+X3ayiytbU1Mh265qEfoCTAVW9zks=
Subject key identifier:   F3:C8:A1:8F:74:88:1F:DF:5A:80:35:3F:27:7C:99:8C:21:0C:2F:A7
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584F02421FF62ED7A251B8D92E00
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/d9099165-8c7b-3785-b1cb-635dae2ff14d.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     3257
IP address blocks:        23.184.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:1f:f6:2e:d7:a2:51:b8:d9:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=65bdc6dd-8087-4389-9400-08f5623c6d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:be:3b:d6:c1:9c:90:77:72:6f:c6:47:c5:
                    65:26:15:dc:8b:51:2f:48:3f:ce:45:6b:0b:2a:ff:
                    16:a9:00:4f:d9:54:02:bc:7e:9c:b0:17:95:e1:2d:
                    ad:85:71:e6:b7:4e:38:74:7b:eb:80:8c:ee:95:b0:
                    f2:67:75:7b:a3:9b:bf:18:95:69:00:89:fb:c9:10:
                    e9:ce:c0:20:58:09:79:26:0b:ab:70:d0:d7:e4:7e:
                    16:61:1d:a1:5b:be:90:31:d1:33:0b:5d:33:cc:b0:
                    aa:a8:e2:0a:fc:99:59:73:0b:b9:41:1c:a1:fb:fa:
                    8e:dd:1b:d0:98:73:f5:f4:95:6f:ba:48:02:52:36:
                    cd:79:b5:df:9a:56:7b:5b:0c:ce:b8:cd:8b:65:2c:
                    19:89:04:b4:98:72:e5:73:f9:c4:d6:4a:97:74:04:
                    90:73:d7:f7:53:ca:bd:1a:05:26:ec:ac:b7:26:b9:
                    cb:ac:45:21:f8:1f:4a:f3:2e:7d:c1:d6:1f:a6:31:
                    30:9f:64:08:aa:45:b0:b2:f6:fd:42:82:07:52:19:
                    11:15:03:ca:49:40:d1:cb:85:06:9f:29:ff:0e:bd:
                    48:db:3f:9d:c3:66:f8:99:73:a8:87:32:d9:aa:76:
                    a0:67:7f:b5:97:b6:72:08:83:fb:b7:f2:76:ed:20:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:A1:8F:74:88:1F:DF:5A:80:35:3F:27:7C:99:8C:21:0C:2F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/d9099165-8c7b-3785-b1cb-635dae2ff14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:46:be:30:7c:f7:16:3b:2e:a3:e5:c4:1f:40:9f:c2:03:5f:
         53:53:2a:e9:73:74:1c:b6:2c:fd:50:a4:b9:2b:e0:6c:47:c0:
         69:fe:8d:f9:ff:cb:77:c6:ce:42:9c:0d:c6:8b:0d:5f:e4:01:
         8b:fd:e0:23:0d:21:69:cb:2e:2a:22:91:10:e5:e8:d3:62:5f:
         49:56:fa:1b:59:a8:30:36:41:59:99:50:b2:bd:0c:8e:c7:60:
         5a:c6:4d:93:22:f7:32:c8:a6:40:52:39:2d:48:11:c1:15:2a:
         8a:28:46:34:f4:6c:a5:75:2e:6a:de:29:49:52:7a:b8:a1:68:
         a5:07:07:06:9a:c0:21:58:30:ca:8e:38:d9:59:55:47:de:30:
         76:57:d0:b1:3d:ec:c8:6f:a9:8c:01:46:a5:72:f7:5c:a2:c0:
         62:65:34:0e:6a:21:13:1d:30:eb:b8:ac:cb:ab:8c:54:6f:e1:
         38:ed:97:26:92:1f:63:52:60:e5:04:c4:a5:e1:25:ae:73:3c:
         07:9e:18:72:c6:73:3c:83:c9:5f:2c:f0:b6:35:0b:73:1f:44:
         20:9c:a7:e4:3e:7b:f5:b3:96:c8:af:9c:31:55:41:45:40:2c:
         6e:79:0a:78:50:53:76:61:54:fb:0a:a6:6b:42:9e:85:3a:95:
         e6:36:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:55:02 2026 by rpki-client