Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/b5e0e9f9-6f43-378f-9fe5-17dba06bedc0.roa
File:                     b5e0e9f9-6f43-378f-9fe5-17dba06bedc0.roa (raw, json)
Hash identifier:          4vfsT/hsZYnGDxj++d7Rt4+cWJzgNrK2RlTw7HjUZyM=
Subject key identifier:   A8:19:95:4B:19:43:32:3F:9C:32:10:F0:6F:09:95:B0:E6:C0:4E:B6
Certificate issuer:       /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
Certificate serial:       010D0C9F4328584F708820FCA6254847C82F1DDA
Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/b5e0e9f9-6f43-378f-9fe5-17dba06bedc0.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     11761
IP address blocks:        23.148.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:20:fc:a6:25:48:47:c8:2f:1d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=cabf3ff6-23ba-40f4-8de7-6811ad68d572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:67:a4:49:86:66:37:55:7b:43:c3:b2:ff:
                    37:a3:e0:10:91:60:e8:53:5b:8f:6b:45:c3:b8:d6:
                    be:fe:ee:b5:e4:f5:2d:e8:a8:2a:7d:eb:76:5f:b8:
                    0f:ed:73:5d:50:f7:28:4f:16:84:c7:d2:95:7e:41:
                    08:70:d5:3b:e4:84:79:4e:a1:19:4e:7a:a9:43:bd:
                    11:e5:0b:ea:11:9b:79:91:0c:36:c2:de:53:8a:36:
                    cd:7e:d7:25:fc:d8:1d:92:3a:a8:dd:7c:06:97:aa:
                    ad:4d:27:cd:4d:18:9a:a6:b2:e1:61:5d:e9:99:01:
                    f0:f0:f4:54:35:ac:77:e9:29:fe:ca:05:8e:cd:ff:
                    82:35:97:14:c5:0d:83:17:12:42:0e:71:69:72:dc:
                    2a:c6:14:e2:bf:6a:e7:ed:a8:7a:d3:a9:e3:37:d3:
                    6b:8d:ae:ff:b8:1d:ed:c1:8b:b4:65:93:c5:2b:0d:
                    8d:10:ce:4e:a0:78:98:1d:cf:71:69:52:04:a9:9c:
                    f1:cc:43:87:6e:ae:2f:17:eb:f5:e3:69:b0:fc:6e:
                    73:6f:e7:6b:ad:20:72:78:4e:35:a9:b9:c3:a1:7b:
                    2d:be:63:05:b4:c7:ba:df:66:6a:b1:7e:9a:62:93:
                    6a:26:4a:fc:05:b5:1b:b8:cf:67:8b:dc:ef:11:29:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:19:95:4B:19:43:32:3F:9C:32:10:F0:6F:09:95:B0:E6:C0:4E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/b5e0e9f9-6f43-378f-9fe5-17dba06bedc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl

            X509v3 Authority Key Identifier:
                keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:f1:c1:83:ee:c2:f2:32:54:60:c0:44:17:c8:4e:96:93:
         a2:26:6a:74:dc:94:60:83:02:f0:3a:39:81:62:ec:2b:e4:de:
         cd:fa:99:2a:ab:1a:f4:c1:20:4c:3b:74:10:b8:5e:e8:9b:63:
         ec:5c:d4:72:a5:73:9d:4f:39:ee:56:28:94:a0:01:da:ac:e3:
         94:31:be:23:ef:ab:30:5e:dd:28:f4:01:9e:17:ec:a2:ce:ec:
         8d:47:db:ac:23:8c:e9:bd:f2:1c:2b:19:57:a4:66:fc:f1:5b:
         ab:b6:90:25:a2:28:e0:c2:13:5c:23:ec:1c:c5:c3:58:55:9f:
         f3:cb:76:4d:4f:ab:25:65:83:db:cc:55:a7:9b:3e:e9:bf:99:
         c7:a0:fc:8f:f0:33:5f:fd:4a:d6:90:56:a6:c4:e5:04:67:2e:
         68:59:69:52:56:7b:ae:09:a5:9c:13:77:17:64:e0:c1:e3:11:
         4e:8e:19:09:3f:83:77:61:ca:8a:72:f6:6d:79:6b:6c:f2:bc:
         ab:da:f5:9b:c7:47:3c:53:40:2b:3d:a6:ce:8b:b3:74:83:ff:
         00:a3:95:b6:18:77:6c:51:e8:2c:95:fe:db:bf:a8:e1:e6:eb:
         5c:bb:1f:5e:a1:26:a6:99:99:89:c7:4a:b0:91:0e:e6:89:9c:
         1f:93:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:27:01 2026 by rpki-client