Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f/3b126aaa-18c9-3b13-89c8-fc49eecb9182.roa
File:                     3b126aaa-18c9-3b13-89c8-fc49eecb9182.roa (raw, json)
Hash identifier:          9y197cn4VK5WwgDXcHov8m+3XxLqUhWQUJaeyHck0QE=
Subject key identifier:   85:E9:12:CA:F7:0D:A4:81:10:A8:B7:AB:45:79:3B:27:25:BD:8C:EB
Certificate issuer:       /CN=45d076cc-6153-4e47-a3ce-8545bef62a7f
Certificate serial:       010D0C9F4328584EA78F724EA07993AAE922A080
Authority key identifier: 59:3B:99:75:81:E3:81:41:F6:7D:5C:BE:7E:55:5B:3F:BD:65:10:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f/3b126aaa-18c9-3b13-89c8-fc49eecb9182.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62563
IP address blocks:        23.162.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f/45d076cc-6153-4e47-a3ce-8545bef62a7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f/45d076cc-6153-4e47-a3ce-8545bef62a7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:72:4e:a0:79:93:aa:e9:22:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d076cc-6153-4e47-a3ce-8545bef62a7f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aa3ec519-ab3f-40e3-8d01-a4ab3b70ced4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:c1:47:bc:60:26:5c:38:59:69:6e:eb:4c:
                    ef:cc:87:1c:a4:ce:ed:53:e6:5f:e0:5e:4d:3c:28:
                    4a:9a:84:bd:25:01:82:74:ad:ba:47:8e:e7:25:8c:
                    e8:5f:4c:50:4e:8b:70:2c:fe:94:35:f8:ac:f2:54:
                    d7:ad:db:6f:1d:03:9d:35:51:79:54:ea:92:5f:e3:
                    50:05:0a:a8:43:f4:6c:94:26:2a:a8:7c:0d:f5:16:
                    9c:ca:15:c6:67:dc:5f:04:9f:0f:6b:2a:82:28:b4:
                    6d:79:63:28:58:c0:af:e3:0e:dc:c5:e7:3a:ba:5d:
                    75:53:3a:b3:99:19:f5:19:10:19:e5:96:e4:5d:2a:
                    f3:dc:fd:2e:2c:e2:c5:ef:08:15:43:6c:fb:6a:25:
                    29:53:04:d9:f7:34:e0:c1:65:68:98:b5:55:52:0e:
                    64:cd:3d:8d:e8:97:95:d1:ac:88:5f:50:3a:82:20:
                    8a:bc:e9:31:b9:23:d9:e9:3e:ad:36:cc:a6:8c:ae:
                    af:29:db:b1:93:47:e8:41:31:cd:da:3b:be:71:91:
                    9e:ad:0e:59:f5:a5:c7:71:ff:c7:5c:52:cf:88:a1:
                    d9:5b:29:76:ff:c5:30:c5:63:17:0e:ff:a9:1d:4e:
                    28:a9:73:bd:36:ed:62:d6:ac:2b:e6:cb:b5:43:83:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E9:12:CA:F7:0D:A4:81:10:A8:B7:AB:45:79:3B:27:25:BD:8C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f/3b126aaa-18c9-3b13-89c8-fc49eecb9182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f/45d076cc-6153-4e47-a3ce-8545bef62a7f.crl

            X509v3 Authority Key Identifier:
                keyid:59:3B:99:75:81:E3:81:41:F6:7D:5C:BE:7E:55:5B:3F:BD:65:10:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/45d076cc-6153-4e47-a3ce-8545bef62a7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2f:bf:f7:5c:15:15:5c:2e:91:6c:fc:90:bf:da:86:88:b3:
         7d:b4:d5:8d:96:8c:b1:43:93:83:53:e2:ab:f5:67:6e:81:6b:
         a7:7c:35:dc:f4:9f:4d:65:ff:a6:90:00:a8:13:d1:64:a2:5e:
         9e:07:e7:c7:0b:a2:8c:70:73:19:97:f2:b4:47:89:ab:ee:d9:
         f8:48:de:09:d0:27:81:5d:0b:cf:26:86:16:e0:d3:7a:fa:e7:
         d4:a9:d3:cb:8f:15:69:5d:52:f2:1c:96:19:39:47:bb:0e:da:
         a6:a3:3f:80:dd:02:2b:74:af:48:9e:93:2b:ac:41:58:a8:3f:
         55:c7:bf:43:6c:0c:dc:03:c4:e1:4a:8c:12:ad:df:88:66:5c:
         de:92:ab:1e:76:3f:d0:5d:d7:14:68:8e:0d:9f:bd:26:d4:3d:
         0d:d9:18:11:3e:ee:71:e6:23:87:cb:2a:80:cd:e2:c8:87:15:
         fc:82:76:78:b6:2f:15:94:e0:d7:7d:ac:27:69:d8:2c:d8:94:
         5d:66:45:af:ad:ab:b0:2a:74:4b:a0:df:10:93:d1:74:0e:a4:
         0d:a0:9a:2f:64:45:d7:2c:7d:6e:7c:2e:30:5e:f1:d9:3c:a6:
         af:ec:4c:22:2a:7f:51:47:b0:f0:56:b1:ba:65:46:08:df:52:
         46:b5:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:15 2026 by rpki-client