Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/30ed08df-3fd7-3dff-b258-72738a271efe.roa
File:                     30ed08df-3fd7-3dff-b258-72738a271efe.roa (raw, json)
Hash identifier:          4m2+GJj8xWrRAhWytqKSvFEOTSsmJNzCnjn6LVFcDrQ=
Subject key identifier:   EE:74:98:21:5E:14:52:29:E8:44:B3:BA:C7:A3:D3:F5:5B:75:64:C9
Certificate issuer:       /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial:       010D0C9F4328584EDC9249891CB6A5B63C48BD80
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/30ed08df-3fd7-3dff-b258-72738a271efe.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     35430
IP address blocks:        23.188.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:49:89:1c:b6:a5:b6:3c:48:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=751789ae-2536-4fdd-91ad-f8fb8e2bd50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:86:a7:61:13:db:80:63:0b:0b:d3:9c:48:a5:
                    9c:08:94:41:15:60:4c:59:a8:ea:3c:25:82:bc:3a:
                    69:f3:c2:64:97:a3:99:46:83:9f:c0:0c:0e:bf:c8:
                    bb:1f:d7:5d:47:eb:68:57:75:6f:7f:6f:40:91:25:
                    66:74:81:42:c4:cb:dd:8e:1d:03:a9:4e:f4:75:af:
                    36:07:5b:11:bf:f6:af:a9:a4:88:0b:47:33:f0:d1:
                    97:d7:99:d6:e6:53:7f:e4:5c:23:73:77:8c:93:33:
                    d0:90:81:d5:aa:dd:af:9a:5c:ce:54:4b:56:1f:26:
                    fd:21:be:93:c5:3e:8c:66:fb:81:d0:21:20:d9:78:
                    0b:21:d9:74:d2:50:11:12:99:3e:95:d6:99:71:69:
                    db:b7:67:ae:a3:18:3d:1b:2d:70:02:82:74:ea:bf:
                    b1:9c:7f:61:41:77:33:58:bd:98:f2:e1:7f:6e:d0:
                    45:4b:3b:78:4f:08:3d:ae:4f:a1:1c:4b:84:b4:cf:
                    23:2d:4f:8d:be:3a:7e:aa:ab:17:b2:7e:50:bb:fe:
                    21:f8:84:dd:94:ab:50:94:61:f7:5c:ee:50:09:e2:
                    9d:3c:9b:32:e6:c0:0e:0f:54:6e:a2:d3:73:8e:d2:
                    24:9a:42:e4:b7:00:d1:73:67:21:6a:a4:db:49:4b:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:74:98:21:5E:14:52:29:E8:44:B3:BA:C7:A3:D3:F5:5B:75:64:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/30ed08df-3fd7-3dff-b258-72738a271efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl

            X509v3 Authority Key Identifier:
                keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:ee:f3:13:38:ac:3d:65:e0:44:b1:b9:1a:56:f3:10:30:
         5a:3a:42:dd:3e:60:21:b9:ae:c1:16:ed:30:8a:30:20:f9:19:
         eb:f8:8a:a9:84:3f:1d:a7:15:3b:01:d1:1d:17:92:ac:20:9a:
         6a:2e:2e:a1:c3:8e:d0:84:45:11:2d:09:cb:12:2e:c2:72:bd:
         48:3a:c5:66:34:c9:1a:3a:c0:c7:3c:7d:83:b4:c5:dd:82:6d:
         31:58:47:15:48:93:2d:55:64:12:66:a9:af:3a:d1:97:68:78:
         ca:00:be:25:a3:53:3e:ef:ff:ef:64:fa:3b:aa:0c:0f:19:37:
         5b:01:e8:ac:ce:b5:0a:d1:d2:3f:74:48:eb:e9:d5:a3:53:32:
         f3:18:0f:f5:5e:8b:38:56:58:28:16:86:d6:ec:2d:3d:bd:c2:
         a6:20:7f:db:d5:7a:63:8c:4a:a0:a0:d4:24:7e:57:e8:67:29:
         e7:e1:bb:3b:b9:23:6e:0b:ac:8c:34:78:52:30:88:a9:4e:f3:
         eb:bd:b3:05:ed:54:4a:88:f4:7c:48:1b:20:7f:0d:81:88:e8:
         5c:99:b5:4d:62:a2:83:53:e2:a1:cd:66:ad:8f:e6:ff:21:4e:
         e0:d3:c0:9f:cf:07:9a:9b:69:32:6b:b8:f6:35:f3:c8:e4:1a:
         72:8b:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:10:13 2026 by rpki-client