Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/d9f4fe13-12d9-3a1f-b839-74d01ea900d2.roa
File:                     d9f4fe13-12d9-3a1f-b839-74d01ea900d2.roa (raw, json)
Hash identifier:          48KcCnjxBbvM5IW995l+7EHzERKGhsWWk3GTBkGf3NQ=
Subject key identifier:   89:EE:E9:56:8C:8D:D2:6A:5A:FB:5B:E3:DC:8B:8B:4F:6E:C7:46:58
Certificate issuer:       /CN=17ba49ac-37d6-4b90-b973-bee8a685e116
Certificate serial:       010D0C9F4328584F609785B49AF74BFBC27FC280
Authority key identifier: 24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/d9f4fe13-12d9-3a1f-b839-74d01ea900d2.roa
Signing time:             Sat 03 Oct 2026 07:58:21 +0000
ROA not before:           Sat 03 Oct 2026 07:58:21 +0000
ROA not after:            Fri 01 Jan 2027 08:58:21 +0000
asID:                     25618
IP address blocks:        23.147.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:60:97:85:b4:9a:f7:4b:fb:c2:7f:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ba49ac-37d6-4b90-b973-bee8a685e116
        Validity
            Not Before: Oct  3 07:58:21 2026 GMT
            Not After : Jan  1 08:58:21 2027 GMT
        Subject: CN=6a686add-b1e7-4f0c-8e18-34add0e62463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:37:9f:5d:31:e5:96:6e:0c:04:c9:59:fe:
                    ec:0a:f7:de:25:5d:a3:5d:29:c5:f5:3f:57:78:9e:
                    42:8c:3f:a3:95:86:e6:cc:79:df:f0:f3:96:86:bc:
                    2f:da:65:23:24:f0:81:74:8e:f0:c1:b8:c2:f0:54:
                    ca:60:93:20:4b:8f:79:71:c6:5e:2b:02:3a:47:61:
                    73:fc:2f:d9:96:f0:be:ae:08:e7:65:27:5d:ae:34:
                    28:c3:5a:11:19:c7:9f:02:6d:88:fb:05:15:bd:d3:
                    33:9e:57:54:ea:40:26:7c:5e:a2:a2:d7:0e:a0:12:
                    32:3e:77:88:d2:dc:82:7c:95:7d:16:3e:20:cc:89:
                    7c:09:36:72:b9:ab:3d:38:cd:57:64:4b:6f:d3:1f:
                    43:7e:18:9c:98:19:40:c9:2f:cb:7c:61:d8:ea:8b:
                    c9:18:25:e5:3d:a8:c5:87:46:4f:d4:fe:65:5f:d8:
                    95:5f:c3:7a:d5:53:99:e2:9a:f0:35:74:44:0d:30:
                    cf:cb:93:4a:50:9e:c8:5b:bb:1f:08:97:f3:de:57:
                    4a:93:91:9c:76:f5:77:de:7f:71:21:f8:15:3e:07:
                    f7:3c:f8:50:3b:a1:38:f4:4f:cb:e8:fc:73:8c:06:
                    73:83:f7:8f:ed:77:71:35:fe:1f:05:3b:87:66:90:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EE:E9:56:8C:8D:D2:6A:5A:FB:5B:E3:DC:8B:8B:4F:6E:C7:46:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/d9f4fe13-12d9-3a1f-b839-74d01ea900d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:6d:2f:c7:36:ad:13:b1:64:ce:cd:90:8f:30:87:5f:ec:
         f1:66:01:2c:8a:32:70:b4:af:df:c1:aa:a0:53:a8:a1:ad:3e:
         d8:f1:4d:63:0d:2e:60:d9:b3:d3:a8:96:a7:94:51:c0:82:49:
         6e:68:a1:dc:21:36:6a:70:21:a0:3d:94:3c:08:63:af:f8:b6:
         22:16:87:6c:97:24:46:81:64:ef:99:f5:33:c2:3b:c5:0b:52:
         0f:e4:c6:8c:ca:59:d0:fb:7b:25:30:3c:89:f0:9a:76:ae:18:
         8c:08:c8:40:ee:57:a2:14:fa:b9:72:9d:3d:19:f6:4b:32:50:
         cc:38:64:7a:4a:6c:0d:ab:42:e6:9f:d3:a8:d7:82:5e:43:d6:
         56:e7:07:8c:c0:24:4b:70:73:c6:0b:3d:a3:41:0e:8e:5f:9d:
         94:d4:b6:3b:b1:9f:b0:ee:62:2c:42:14:bf:27:5a:2a:05:58:
         8a:67:d0:33:69:b4:58:f1:7a:1c:a7:7a:21:e4:91:e3:51:f6:
         d4:5d:b9:b3:9b:a8:0d:8d:de:42:ff:f4:69:d3:8c:08:9a:c1:
         a9:0d:b4:f5:33:13:56:3d:fc:76:ea:84:33:5e:81:ba:7c:36:
         8c:cd:32:f0:4a:1f:2f:c2:bb:0c:ab:65:81:0c:b0:95:92:71:
         70:11:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:44 2026 by rpki-client