Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/ce74263f-9787-350b-a673-48f95928a1a6.roa
File:                     ce74263f-9787-350b-a673-48f95928a1a6.roa (raw, json)
Hash identifier:          XDvGNkaIxfOu2JFgsBqtaVJn0ycXmq9WjvrrT2ldLjU=
Subject key identifier:   5A:FA:23:AF:06:05:73:82:3B:B9:C3:7B:49:71:EB:08:1B:63:43:DB
Certificate issuer:       /CN=cb465e3e-2777-4f45-8f30-b7f465c4e515
Certificate serial:       010D0C9F4328584EF5B20B07D5649F5351A4E300
Authority key identifier: CB:02:39:AA:E1:5A:68:D7:B3:8F:72:73:9C:E1:7C:BB:2E:E4:2A:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/ce74263f-9787-350b-a673-48f95928a1a6.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     214483
IP address blocks:        23.149.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/cb465e3e-2777-4f45-8f30-b7f465c4e515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/cb465e3e-2777-4f45-8f30-b7f465c4e515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:0b:07:d5:64:9f:53:51:a4:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb465e3e-2777-4f45-8f30-b7f465c4e515
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=1227c234-14d6-4b2d-9096-d732171d4d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:de:3f:72:c5:be:10:94:fb:10:db:fc:b8:
                    4e:ea:a7:85:e8:99:c5:0e:d7:1d:76:cf:ba:90:6e:
                    c3:09:79:91:b6:51:8c:84:8c:c7:fe:99:9c:38:f4:
                    05:98:42:b7:95:1c:a9:c8:82:50:05:c9:89:8c:f9:
                    88:c1:5d:4d:a1:16:77:41:a8:46:f1:c0:61:71:ca:
                    7d:82:d1:ae:1a:aa:4e:0e:8a:65:54:53:3c:f1:e0:
                    a4:b7:f6:92:00:a9:f3:07:88:36:84:e5:09:11:55:
                    59:72:f2:16:cf:1a:b2:c2:55:6d:9f:94:66:ec:d5:
                    cf:53:29:62:f8:dc:ff:ee:b8:06:3a:16:c5:a3:81:
                    fc:09:6e:21:1b:2f:eb:11:3c:03:08:ea:50:7e:78:
                    39:92:d4:58:44:6e:56:e3:2e:49:c0:0b:98:86:10:
                    ed:c9:49:c7:49:d0:61:22:e9:7e:7e:6b:3c:15:db:
                    bd:e7:75:b9:05:ff:1b:13:77:da:9a:60:31:61:40:
                    7a:a1:5d:ba:f2:e7:02:93:f6:0d:2a:76:ed:3e:73:
                    11:4f:30:1d:05:2e:fe:69:93:2a:61:3f:f4:6a:17:
                    b9:d1:5a:bd:44:1a:f4:f6:a8:0c:f5:d2:a8:7d:96:
                    10:31:64:5e:f8:e8:55:81:11:e3:19:32:5f:27:9b:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FA:23:AF:06:05:73:82:3B:B9:C3:7B:49:71:EB:08:1B:63:43:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/ce74263f-9787-350b-a673-48f95928a1a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515/cb465e3e-2777-4f45-8f30-b7f465c4e515.crl

            X509v3 Authority Key Identifier:
                keyid:CB:02:39:AA:E1:5A:68:D7:B3:8F:72:73:9C:E1:7C:BB:2E:E4:2A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb465e3e-2777-4f45-8f30-b7f465c4e515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:b6:77:9f:3f:48:35:b2:56:60:6c:38:08:28:57:07:1a:86:
         e9:eb:6f:91:2b:82:8b:d6:19:9c:45:c0:53:f7:a9:fd:c9:c4:
         44:b2:26:4a:18:8d:5e:8a:d0:c3:ca:76:52:78:bb:34:7f:e9:
         28:4a:a6:6f:71:9b:18:bd:6e:71:5b:b3:ba:0a:2e:2e:fe:7c:
         ba:9b:bc:33:24:2a:c8:39:ba:7e:c9:1a:12:04:d3:35:b5:28:
         99:57:41:27:8d:ed:ce:bd:2d:33:81:3d:64:5b:db:4c:1a:f7:
         91:16:65:56:2c:bf:8b:d4:a9:05:2d:4e:c9:59:47:6d:26:42:
         89:54:43:89:ab:88:66:cc:b6:c6:02:66:1b:24:93:03:a3:1f:
         14:5d:d7:9a:df:c9:18:53:a9:57:47:d1:a3:4e:64:7a:16:3c:
         9b:a1:fa:40:3e:5f:3f:cb:4a:ed:1e:68:56:ea:88:00:69:30:
         45:47:99:06:c2:60:89:36:c9:73:1b:ad:69:64:ab:79:12:b8:
         0c:6e:bc:83:01:d4:f7:ce:25:0d:27:6e:b7:3a:ad:ba:96:6c:
         87:3e:90:ac:a0:e4:24:0e:80:f9:77:35:70:be:fa:a4:b0:f0:
         83:85:9a:30:11:3c:16:09:02:60:35:08:34:69:89:cd:db:bd:
         18:30:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:32:42 2026 by rpki-client