Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/299f2283-5d6e-3b6f-9f77-88f9b8f8f832.roa
File:                     299f2283-5d6e-3b6f-9f77-88f9b8f8f832.roa (raw, json)
Hash identifier:          LLE6SfG87fdv6Dh0arCTEzr9B+4rB73uFgW3wmHDNJY=
Subject key identifier:   4F:20:93:72:1C:AE:14:CE:3D:D6:B6:FA:49:CF:9D:A3:6A:53:2D:1F
Certificate issuer:       /CN=ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0
Certificate serial:       010D0C9F4328584F78E835E8C73F30B5F2987980
Authority key identifier: 2E:7B:FC:DB:33:BB:51:D0:4E:F6:CA:E5:E0:67:53:DD:08:AA:24:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/299f2283-5d6e-3b6f-9f77-88f9b8f8f832.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     174
IP address blocks:        23.151.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:35:e8:c7:3f:30:b5:f2:98:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=023c7b8e-be6f-4382-88f7-294446352778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:94:0f:eb:9c:8b:21:c5:52:0f:b3:14:3c:18:
                    23:1c:a2:e8:f9:e1:be:25:76:64:35:93:76:43:f9:
                    20:18:e6:8c:67:b5:0b:3f:5e:fc:ad:f8:a1:1d:cb:
                    8f:8b:34:8a:58:6e:1c:05:9d:b3:05:7f:87:ba:62:
                    66:c1:8f:88:a4:26:a5:6e:b3:67:3a:7e:df:34:a7:
                    e7:60:44:b4:ca:38:08:16:55:40:69:3f:3d:3e:aa:
                    0d:67:91:fa:25:9f:af:2b:f5:25:42:31:69:e8:c9:
                    00:89:64:ee:57:b7:44:1a:f9:46:b4:3a:18:7d:55:
                    29:af:af:2a:5e:05:5a:56:0d:73:6d:b6:ec:3a:04:
                    63:1f:4f:10:67:52:76:e3:41:d9:1a:08:e8:f3:87:
                    2e:57:cf:ed:8f:ad:ab:48:c5:0a:75:23:dc:13:d5:
                    d9:b2:47:36:0c:db:7e:a7:ac:db:cc:cb:d2:15:dd:
                    b4:83:90:34:0d:2a:c6:dc:0c:ae:60:f1:6a:45:52:
                    48:4c:55:7b:9b:92:c0:3c:b5:b7:f0:9b:9c:fb:27:
                    64:11:9e:ef:84:e5:3b:a7:37:4a:a5:5d:73:6b:96:
                    e2:03:f6:75:b5:28:ca:3b:d9:99:43:2c:2e:b2:d9:
                    b5:02:07:70:1e:3a:08:66:4c:ba:a3:76:c1:cf:c1:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:93:72:1C:AE:14:CE:3D:D6:B6:FA:49:CF:9D:A3:6A:53:2D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/299f2283-5d6e-3b6f-9f77-88f9b8f8f832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:FC:DB:33:BB:51:D0:4E:F6:CA:E5:E0:67:53:DD:08:AA:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:52:a4:b0:6b:c5:cb:f5:09:af:a2:46:11:7c:3e:a6:e9:47:
         bf:a8:e4:ce:3a:d9:5b:e9:4e:e6:42:26:27:23:8f:a8:f6:dd:
         8f:6b:6b:62:16:cf:09:51:23:d6:19:46:13:46:73:7b:0a:5d:
         29:ec:ad:73:66:83:96:59:c7:87:1c:1f:b6:6d:d4:f3:fd:09:
         74:e6:34:7e:17:24:03:c7:f4:c1:79:4e:41:02:3c:7f:e7:97:
         36:fd:32:bb:59:2c:0a:e6:7d:73:6f:88:cf:e3:6d:45:4b:9c:
         47:00:4f:92:fa:7c:55:17:ed:f0:e0:83:51:9c:93:ca:ca:7a:
         a0:47:21:38:29:71:c7:cc:0d:39:59:0e:56:cc:e0:6f:4b:5e:
         24:e9:52:61:8c:14:80:5e:d0:98:c2:18:2a:70:09:94:5e:d8:
         d0:fa:3f:43:93:fd:33:e5:be:8a:39:b6:7f:53:f8:d7:fc:91:
         a3:2a:81:0c:1c:18:cc:c2:e4:05:40:7b:0a:d8:90:6c:05:14:
         63:4d:3a:db:e7:fa:86:73:b0:01:56:1b:f0:38:5d:65:43:91:
         a5:04:eb:a6:64:8f:bc:85:73:a9:a1:20:c4:d5:ad:64:03:bc:
         37:9d:ee:48:d8:5a:27:5d:26:94:87:a5:5e:77:07:b6:f4:a8:
         05:9a:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:12:40 2026 by rpki-client