Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cb782e4e-a634-36f4-80ca-adfd4e1f90eb.roa
File:                     cb782e4e-a634-36f4-80ca-adfd4e1f90eb.roa (raw, json)
Hash identifier:          4pcGbcJkjR5IyrT/YdpLH4av+DBeYnY8MDi/S2Pd4eM=
Subject key identifier:   D0:D0:C3:54:A5:03:14:4C:E9:6B:0B:17:32:76:02:3B:24:FC:8F:1D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B54BC88B30D9B8A82D00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cb782e4e-a634-36f4-80ca-adfd4e1f90eb.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        23.82.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b5:4b:c8:8b:30:d9:b8:a8:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=a3cb27c8-a5e3-4809-9787-e10a665c8bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:91:c5:05:11:be:ad:9c:26:fc:63:d1:96:
                    81:bc:f7:14:fd:cf:0e:15:39:9a:5d:03:d0:3d:4f:
                    84:e1:f4:1c:7b:60:d8:ea:e9:b5:4c:0e:18:39:d0:
                    f7:b6:1d:3e:45:69:8b:a8:66:d8:97:d5:43:b6:59:
                    d9:cd:ba:d5:c6:98:a9:be:8a:c8:a1:85:30:b9:33:
                    1c:9e:d3:80:63:5c:53:ce:d9:47:b3:0f:d3:06:7d:
                    37:d9:60:2a:7f:1d:a7:e5:de:83:3b:3c:50:09:47:
                    1a:94:d1:d2:62:1e:ff:ab:fb:17:8a:2b:f9:e0:0a:
                    f3:d9:92:cd:3c:b4:ce:f4:7c:be:41:5a:a6:8f:51:
                    80:05:b1:ba:7c:98:19:d9:cf:dd:f3:22:5b:14:5c:
                    fb:fe:0f:ad:00:5e:3c:3c:e4:9e:79:98:f2:15:22:
                    0d:d7:06:95:78:c6:7a:d1:55:7b:f3:a8:5a:f8:eb:
                    e1:1a:31:c0:23:0f:bb:0d:e0:ac:3f:b5:20:de:46:
                    05:fe:4b:af:78:21:16:4f:5a:4e:bd:2e:6e:13:fe:
                    55:f7:a4:a0:2e:ec:2a:84:6f:86:dd:1d:04:9c:4d:
                    cb:5e:e0:12:e1:7d:86:27:fa:48:d6:12:be:84:a6:
                    49:42:30:5b:05:d9:00:a8:6d:70:c0:06:71:2f:4b:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D0:C3:54:A5:03:14:4C:E9:6B:0B:17:32:76:02:3B:24:FC:8F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cb782e4e-a634-36f4-80ca-adfd4e1f90eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.82.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5b:c0:81:24:56:aa:8c:28:80:2f:9d:5e:30:e8:92:af:c4:
         0b:ed:1b:87:fd:cc:eb:59:26:0f:35:cc:cf:a4:74:5d:a1:cb:
         d9:83:b1:e8:f2:2c:fb:13:b0:2a:7a:3f:12:33:62:f3:42:64:
         78:6c:70:92:6e:6c:c3:bf:e7:43:22:43:77:40:f7:d8:1f:e3:
         4f:b7:07:cc:50:4e:49:2e:90:22:28:44:c0:3b:9a:31:88:64:
         01:e1:f5:08:21:99:ae:a4:f1:59:fe:af:69:5b:03:0c:35:6f:
         ff:3f:68:bd:ba:f0:a9:16:57:e4:5a:23:f6:47:d8:87:72:a2:
         d4:ab:9a:25:6b:76:d6:15:62:65:cf:a5:70:98:fc:9a:eb:11:
         44:fc:e0:43:73:f7:c1:9f:cd:3a:e3:45:2f:1b:1f:80:9b:eb:
         61:12:1e:20:47:2b:33:0e:e4:09:d5:c1:a0:32:6a:bb:1a:e1:
         31:23:1c:87:f1:e3:f0:a2:85:f6:ee:cb:19:3d:79:c6:e5:18:
         8d:b8:e9:50:fa:c3:ad:b9:3c:29:08:7b:c0:88:c3:97:2a:f5:
         3f:da:e2:2f:71:42:30:ec:59:3c:cc:c8:96:2f:12:1e:b5:07:
         a1:d0:a4:f8:08:4e:31:29:6a:94:9f:32:0d:ef:d8:3f:2f:87:
         c3:76:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:51:45 2026 by rpki-client