Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa
File:                     c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa (raw, json)
Hash identifier:          4zs+0xi/7gqyHyg1K/kHshU5ZBHaX/Noh+mgUKsLr1c=
Subject key identifier:   C3:87:F1:E2:2C:5C:9A:4D:5A:AE:44:18:D6:E8:FF:CB:6A:AE:97:3F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F7BB3015B696C1235F611F300
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     30633
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:01:5b:69:6c:12:35:f6:11:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=401d29c7-2e73-4ef8-9aa9-d71030f6264a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:5e:f2:a9:40:44:c4:d8:d0:33:47:4c:9e:
                    62:d8:6b:3d:3a:6d:00:80:07:3f:2e:12:66:44:02:
                    1a:79:db:41:e3:4c:04:2b:97:1e:b3:fa:e2:a3:5b:
                    49:19:f4:af:47:f5:36:86:80:2d:6e:7f:73:7a:14:
                    51:ef:1a:89:d8:04:4f:7b:3f:a2:e7:56:e5:d1:a2:
                    e3:d4:15:08:d5:3d:ac:cd:ff:9b:fc:f6:bd:97:f7:
                    2e:50:db:90:3c:7c:32:1d:f0:3e:aa:d6:30:b5:96:
                    7d:ee:f6:9f:6f:50:99:b2:96:16:7e:c4:f0:21:ec:
                    4e:70:ba:dc:68:b2:19:f1:0f:30:03:ca:ca:7e:f9:
                    c2:4e:a7:10:74:55:82:9d:4d:7e:d0:c4:14:d7:3f:
                    40:69:f2:78:db:ec:68:4b:7a:5d:e3:63:35:6b:b4:
                    19:2c:27:95:6f:32:bc:61:24:64:ce:9c:1f:e6:85:
                    a3:21:eb:e5:56:73:7f:fe:27:0b:dd:53:c5:d4:d2:
                    a6:5d:9a:69:c7:9b:c5:1d:b9:e5:56:41:dd:24:cc:
                    ed:4c:fc:e9:8d:41:2d:fb:1d:5a:4f:5a:ed:8a:ef:
                    b5:44:70:38:5a:a4:d1:b2:6e:42:1a:80:d8:be:ad:
                    44:e6:3e:7b:82:7b:c9:87:2f:e9:2b:41:ba:8c:61:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:87:F1:E2:2C:5C:9A:4D:5A:AE:44:18:D6:E8:FF:CB:6A:AE:97:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:7c:e8:5b:c0:45:fb:c8:6c:0d:16:bb:5f:64:1b:77:86:
         de:82:73:a8:8e:db:b7:fe:e9:16:6e:45:9d:17:e2:01:7b:a9:
         08:c4:70:d1:dc:eb:da:ca:22:5f:3f:67:f3:89:b5:20:8b:83:
         3b:72:83:03:fc:88:a5:26:e9:ba:b5:dc:05:f5:a8:08:cf:f9:
         d2:f7:0d:38:a3:d8:fc:e0:eb:6a:f4:7d:49:88:56:b4:a2:91:
         f2:08:86:38:b9:3d:32:ba:bf:07:5f:91:6d:28:89:1b:58:87:
         f8:af:ea:c8:25:ba:9e:38:1a:2c:9a:b5:e8:67:83:ae:02:4e:
         58:1c:2d:3e:3a:b6:90:bc:9b:8a:27:94:13:bf:a3:d7:88:7c:
         05:e7:09:91:01:15:55:a4:8b:e5:63:a7:a6:c9:42:67:db:53:
         d5:72:13:ca:75:bc:e2:22:d0:25:df:4e:30:33:72:36:3f:12:
         8e:85:77:ec:d6:9b:9e:87:8f:43:83:54:3c:da:3a:e7:93:1e:
         3c:cf:0a:86:be:e5:57:a2:ab:99:7c:e7:3f:bd:49:dc:0f:a6:
         80:43:97:d8:f8:38:6b:e4:3e:cb:72:66:7c:83:43:63:26:6f:
         73:2e:1f:1b:fa:5a:89:53:50:ff:df:dc:dc:67:18:27:5f:8a:
         1e:83:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:42 2026 by rpki-client