Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
File:                     38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa (raw, json)
Hash identifier:          rXh6d++11NbxQ6D1ATDgzoYoAuQuFWJDTkVKjRu4PKQ=
Subject key identifier:   3D:CF:A8:67:C7:D7:64:6E:3E:AF:8F:A0:EB:13:69:7F:D5:3B:F6:FF
Certificate issuer:       /CN=68de9da0-8f7e-4231-9340-c37abafc3714
Certificate serial:       010D0C9F4328584F63F8207D11C5B47F1BB00380
Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     1030
IP address blocks:        23.166.200.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:20:7d:11:c5:b4:7f:1b:b0:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=dde47fc2-e707-4fb4-9d44-e880528dddb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:04:df:ad:2a:9f:66:16:f5:2c:3a:b4:a3:40:
                    4b:1a:35:ea:55:7c:3d:8c:01:77:22:56:13:69:18:
                    e7:89:af:7c:c2:3f:0b:07:91:09:ea:e2:5f:f2:a1:
                    d8:a3:9b:a7:a5:72:5e:d1:07:c7:60:10:87:d1:d6:
                    1e:96:89:d0:24:a3:0a:8d:6a:0b:67:a9:fd:72:43:
                    3e:59:39:13:80:83:48:96:a7:ec:fc:90:38:3e:cd:
                    33:d0:05:b7:15:08:81:e8:b5:6b:bb:8d:79:e2:e8:
                    ec:ad:7b:ed:2d:b9:a1:4f:38:1d:72:40:23:37:5c:
                    66:71:20:7c:3c:25:89:06:f8:f6:39:ed:33:1e:fa:
                    0d:d4:63:ef:47:1b:1a:d4:8e:eb:5b:75:2a:b3:68:
                    cb:7a:f7:77:9e:a7:d0:ed:40:75:60:51:ba:f9:6d:
                    3e:79:39:4b:68:61:ec:55:52:c5:92:e5:eb:b6:f8:
                    57:22:ab:c2:63:10:c9:7d:93:ce:8b:76:1b:df:49:
                    7f:a2:7a:a9:70:56:8f:d3:25:3e:5c:b5:43:39:e5:
                    05:b9:74:8d:67:63:7d:5e:4c:8f:9b:76:05:26:40:
                    d4:8f:66:2a:1f:e5:c2:2f:25:81:34:2c:eb:f6:64:
                    f2:44:53:09:f7:cb:35:cb:ef:06:d3:10:61:ee:d8:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CF:A8:67:C7:D7:64:6E:3E:AF:8F:A0:EB:13:69:7F:D5:3B:F6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl

            X509v3 Authority Key Identifier:
                keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:06:f2:c0:58:30:be:a9:4d:a2:5d:fd:9b:bd:b0:8b:d8:36:
         34:86:f1:a9:4c:d7:b7:75:51:21:7f:1c:3c:a3:d7:76:6f:c7:
         c1:fe:ea:03:2e:72:77:a2:95:2d:f0:39:ae:d0:d3:35:c9:8d:
         08:05:55:52:c0:a6:e9:f8:2a:dd:87:94:49:c1:d6:6a:cb:de:
         af:a3:12:e3:27:80:1a:3c:eb:3f:72:aa:46:04:bb:6d:11:b1:
         1e:cb:09:bf:88:a0:07:13:f4:07:a5:8b:69:12:93:8f:9b:46:
         63:85:98:bc:2d:25:79:f7:3f:24:ab:4d:d3:a3:d5:68:58:d9:
         4b:d3:e1:03:35:c6:56:b4:82:ae:d1:5b:40:be:d6:20:e5:8a:
         4a:a0:8a:cd:8f:3f:b8:7e:0b:f8:08:c7:c3:79:57:55:6c:1d:
         65:d3:98:e7:db:4b:87:78:03:3a:20:ad:75:89:54:46:02:86:
         f0:43:69:ca:a5:4d:1c:96:cb:dc:db:ae:ee:d3:7a:95:21:21:
         5f:f5:f3:ad:7a:64:a6:29:3b:2b:19:6e:d7:ef:ee:1d:1c:e6:
         30:e1:b6:08:5e:a3:d7:59:ea:4e:ae:b5:95:14:9e:d8:d7:f4:
         c2:ca:b1:05:02:5a:ea:ad:58:14:fd:22:29:a4:eb:df:b1:86:
         ec:53:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:13:57 2026 by rpki-client