Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/ce74263f-9787-350b-a673-48f95928a1a6.roa
File:                     ce74263f-9787-350b-a673-48f95928a1a6.roa (raw, json)
Hash identifier:          32YxEcCPrSxUvf3gtuEtEQC2CjGyAqjWwhL6XF44h6M=
Subject key identifier:   27:28:82:3B:7F:C9:18:26:DD:2E:34:25:FD:22:8E:C3:89:A1:FE:CA
Certificate issuer:       /CN=cb465e3e-2777-4f45-8f30-b7f465c4e515
Certificate serial:       010D0C9F4328584F979DC108F395F93511A6D700
Authority key identifier: CB:02:39:AA:E1:5A:68:D7:B3:8F:72:73:9C:E1:7C:BB:2E:E4:2A:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/ce74263f-9787-350b-a673-48f95928a1a6.roa
Signing time:             Fri 23 Oct 2026 01:00:12 +0000
ROA not before:           Fri 23 Oct 2026 01:00:12 +0000
ROA not after:            Thu 21 Jan 2027 02:00:12 +0000
asID:                     214483
IP address blocks:        23.149.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/cb465e3e-2777-4f45-8f30-b7f465c4e515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/cb465e3e-2777-4f45-8f30-b7f465c4e515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:97:9d:c1:08:f3:95:f9:35:11:a6:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb465e3e-2777-4f45-8f30-b7f465c4e515
        Validity
            Not Before: Oct 23 01:00:12 2026 GMT
            Not After : Jan 21 02:00:12 2027 GMT
        Subject: CN=2465e75b-1cc1-4ef8-9c55-239370cd3a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:70:5c:88:be:19:f4:f1:43:0b:e8:f4:37:
                    41:06:6c:44:5b:57:80:57:e6:9e:20:d9:1a:a7:53:
                    fb:05:b1:c8:b8:9e:6b:91:56:a7:0e:27:86:cc:5f:
                    78:2d:30:a3:33:e7:62:04:26:49:36:ae:a1:a9:93:
                    f6:3f:ce:7c:11:0b:9c:67:32:89:7d:fe:64:05:2f:
                    01:25:76:44:a4:ad:54:f3:8a:4b:fd:d1:57:31:85:
                    73:0b:58:03:f7:da:f4:70:f8:b3:25:9b:81:35:62:
                    e5:df:65:7d:ba:99:93:e2:86:64:42:33:3b:48:3c:
                    f2:57:60:24:12:1e:a9:46:20:32:d6:8d:e2:88:f8:
                    89:27:ea:38:45:ca:fa:58:ab:ca:9b:7b:d8:81:a3:
                    b9:8c:6e:e4:80:35:ca:b2:b1:03:e7:15:e4:85:44:
                    0d:56:76:10:bc:ca:53:ab:94:5c:ab:6c:0f:e9:62:
                    6b:8f:95:08:46:a2:dd:b1:73:a2:a5:0d:47:bc:0c:
                    73:2a:56:25:b7:3e:d7:1e:5d:3a:be:8c:ec:1e:10:
                    96:a6:1a:44:39:b6:c0:8f:12:49:ec:a1:54:54:dc:
                    47:df:c8:7d:66:01:f0:50:60:fb:f6:fb:5d:91:15:
                    56:a7:9f:ec:c1:c7:de:8e:36:12:a7:44:c1:a5:17:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:28:82:3B:7F:C9:18:26:DD:2E:34:25:FD:22:8E:C3:89:A1:FE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/ce74263f-9787-350b-a673-48f95928a1a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/cb465e3e-2777-4f45-8f30-b7f465c4e515.crl

            X509v3 Authority Key Identifier:
                keyid:CB:02:39:AA:E1:5A:68:D7:B3:8F:72:73:9C:E1:7C:BB:2E:E4:2A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:20:31:75:42:d9:2c:31:7b:f7:19:cb:81:f2:c4:a2:3a:a6:
         91:2b:41:9d:38:3a:55:6c:7b:3e:74:cd:5d:1f:68:f1:5c:5e:
         20:c3:19:c3:32:eb:e1:ef:7b:2f:55:81:5c:c8:8c:49:c8:16:
         00:a7:5b:57:3c:1b:23:8e:f5:03:3d:53:90:69:f5:46:e7:66:
         f1:62:7c:a0:82:10:45:41:92:0b:52:1d:d3:87:19:cd:47:ca:
         de:bc:a6:e1:48:38:73:3e:23:d0:8a:9e:8e:db:a1:78:4a:fe:
         92:f4:9d:63:08:0f:de:80:23:d5:79:32:8d:c3:8a:63:29:39:
         b5:87:f8:81:77:cd:ae:41:8b:1f:b5:de:47:3d:14:53:50:cf:
         25:5d:c2:1b:7f:24:ff:1f:47:ec:32:13:d8:aa:4c:e3:be:da:
         66:0c:cf:2b:3d:47:9b:90:af:5d:91:69:13:af:0f:f4:ed:31:
         8c:88:fd:bf:e2:d7:54:b8:a0:d6:01:9e:49:fe:8a:4d:f2:ad:
         1b:26:eb:45:41:de:4b:5b:31:31:81:75:0c:01:57:35:43:da:
         d0:b7:0f:83:ea:82:e0:e9:b4:8c:b6:e8:31:93:76:a8:4e:66:
         8c:2b:d8:c6:be:19:68:5c:c8:42:57:8f:86:79:67:cc:41:76:
         88:b4:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:55:29 2026 by rpki-client