Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f/67be691f-9b07-34cc-ba2a-6b6ec1cb283b.roa
File:                     67be691f-9b07-34cc-ba2a-6b6ec1cb283b.roa (raw, json)
Hash identifier:          yk68b5uRwRdyLeP+H6PatCREM6XzgYXyV2KLT6Km2Es=
Subject key identifier:   5A:42:E4:9D:E1:E4:71:C9:8C:38:B0:70:51:26:55:A6:39:78:19:04
Certificate issuer:       /CN=700d1f3e-34f2-4758-b210-264dc1672d5f
Certificate serial:       010D0C9F4328584F5767F6190865FD434AEB5BB0
Authority key identifier: DE:FD:55:D2:F0:C0:2F:C6:19:C2:B1:47:4F:7D:79:76:5F:92:7B:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f/67be691f-9b07-34cc-ba2a-6b6ec1cb283b.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     401376
IP address blocks:        23.151.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f/700d1f3e-34f2-4758-b210-264dc1672d5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f/700d1f3e-34f2-4758-b210-264dc1672d5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:f6:19:08:65:fd:43:4a:eb:5b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700d1f3e-34f2-4758-b210-264dc1672d5f
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=c6562575-cdbe-429c-b604-39b429a67c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:6d:a9:66:76:9d:03:c1:23:d1:33:c7:8b:
                    5a:27:15:76:52:fc:2b:42:15:4f:fc:9d:6e:87:4e:
                    83:94:e3:70:05:e5:93:54:02:c5:36:8e:eb:84:7c:
                    d6:fa:d6:60:7c:35:a7:ec:31:73:58:53:f0:86:52:
                    27:ee:a8:c6:2d:4d:25:51:3e:e2:02:72:c3:e5:f7:
                    cd:ad:c4:96:05:cb:30:10:7b:71:cf:e6:27:8e:e2:
                    1f:54:2b:90:49:0f:44:2c:74:e3:3e:ad:99:ab:a8:
                    02:fa:09:40:8f:5b:3c:13:20:a6:83:78:21:c1:9f:
                    fe:e5:1c:96:59:36:68:2a:e7:36:b3:71:00:f3:37:
                    9d:a1:2b:36:bf:0f:4e:dc:08:76:da:60:e7:d2:22:
                    f7:d7:0c:5b:9e:e6:f5:51:19:8c:b9:94:b1:b6:8e:
                    d3:32:34:5c:11:2d:57:c2:96:5a:8c:cf:b9:43:42:
                    b1:76:b3:54:da:0f:5b:32:e9:9e:b0:92:50:04:83:
                    05:c2:c6:2b:91:62:3b:8a:57:46:f4:66:34:0d:6f:
                    cb:7f:75:ad:be:b5:01:00:6a:26:b2:af:f3:19:5e:
                    94:f7:36:a9:0a:42:14:20:e0:69:c2:9e:e6:94:3e:
                    56:59:d2:b7:a0:5a:1a:3a:ce:4c:57:9b:85:10:1e:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:42:E4:9D:E1:E4:71:C9:8C:38:B0:70:51:26:55:A6:39:78:19:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f/67be691f-9b07-34cc-ba2a-6b6ec1cb283b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f/700d1f3e-34f2-4758-b210-264dc1672d5f.crl

            X509v3 Authority Key Identifier:
                keyid:DE:FD:55:D2:F0:C0:2F:C6:19:C2:B1:47:4F:7D:79:76:5F:92:7B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/700d1f3e-34f2-4758-b210-264dc1672d5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:3e:49:08:40:85:39:2e:f9:a1:70:01:44:c5:39:04:7e:0c:
         ae:89:03:3d:38:a2:72:fd:bc:e6:76:7b:72:9b:b9:97:47:68:
         85:e2:3c:ae:b0:12:eb:5f:e7:55:5c:23:b3:2c:f7:a7:bc:51:
         19:33:a1:2e:f0:c8:be:c5:8f:21:09:f4:3c:2a:a1:7d:56:3b:
         92:42:5d:d7:0f:1a:db:6a:ea:6f:f8:56:83:7a:91:af:a8:a9:
         30:ee:d3:20:5c:76:2d:6c:5c:ca:a9:a9:55:c9:a0:5e:e9:42:
         2d:c8:db:fb:57:39:82:72:68:4b:df:ae:cc:f3:cb:51:53:7b:
         18:4c:da:b9:4c:b2:8a:30:4b:ce:69:14:84:33:b5:2b:3e:c8:
         07:77:3e:34:24:0b:05:bf:06:dc:d9:5b:ab:48:6e:b7:54:bd:
         ab:d3:b6:ba:98:19:af:0f:4c:c1:97:51:0c:d1:b3:a0:8b:3f:
         0f:f9:3d:5b:36:ad:3b:57:c2:94:a3:bc:02:3b:f4:e1:29:92:
         4e:08:fc:54:5b:36:a5:39:0a:e0:42:d2:85:f9:af:e7:57:70:
         98:39:75:3c:e6:89:0e:5a:d7:7e:c6:02:20:9e:4b:c3:09:bd:
         20:1a:b3:fb:26:90:ac:7e:0b:d2:ed:91:20:0e:eb:8c:70:e2:
         43:f3:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:56:45 2026 by rpki-client