Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d99ee4b2-e635-3f32-8b5a-454c2b1f103d.roa
File:                     d99ee4b2-e635-3f32-8b5a-454c2b1f103d.roa (raw, json)
Hash identifier:          BK6nENGF36hhbKwKDikPjfSVKDdOXTlRst/W8oqUBvg=
Subject key identifier:   EF:1C:D8:FF:BD:2A:C3:61:A4:A5:84:18:5F:D6:2F:64:2D:47:3F:92
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B44E9D1BEF81F1898B40
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d99ee4b2-e635-3f32-8b5a-454c2b1f103d.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        23.106.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b4:4e:9d:1b:ef:81:f1:89:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=a0950202-5e87-4392-817b-6d2d6c9864e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:07:4c:e9:9a:45:f2:45:fa:af:bb:d4:87:
                    e5:9a:a8:5d:46:83:c6:82:4f:37:8b:61:01:f3:20:
                    cc:29:69:ec:03:7c:0f:6a:ea:87:c3:e3:66:2a:c8:
                    ae:00:3f:2a:98:a0:20:03:a9:3c:2e:ae:c3:00:5d:
                    3e:f6:b6:ec:16:43:ca:20:be:7b:f5:f5:28:aa:7a:
                    de:c7:e6:78:16:29:4c:95:6d:8e:67:52:ea:9e:a4:
                    df:a8:54:5d:39:df:b5:75:96:04:8f:e8:39:51:5a:
                    38:53:35:e1:10:a3:22:e8:0b:d6:25:25:49:6b:d7:
                    25:6f:be:b1:53:fd:cd:31:2f:eb:06:49:ab:84:82:
                    74:11:2a:08:e3:9f:42:6f:e5:86:90:2b:8d:06:ea:
                    d3:4d:62:3f:7f:22:2d:e1:38:87:75:9e:84:79:cd:
                    ec:96:7c:72:6b:b2:fb:c9:5f:d5:0f:98:d8:be:9a:
                    98:27:d1:9c:df:6e:de:3f:bd:44:0e:15:71:3f:0b:
                    0c:e7:60:8e:b6:8c:6c:e3:98:f4:45:aa:1f:b2:e4:
                    93:35:f8:fe:b0:85:8d:d2:33:13:ac:81:c2:b7:37:
                    9e:80:59:32:e4:15:31:42:0b:d1:36:03:67:a9:ae:
                    9d:64:35:d9:b0:9d:f7:83:99:57:3f:59:7f:46:16:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1C:D8:FF:BD:2A:C3:61:A4:A5:84:18:5F:D6:2F:64:2D:47:3F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d99ee4b2-e635-3f32-8b5a-454c2b1f103d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.106.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:16:19:ff:4e:f7:4f:29:3c:b8:09:88:a6:cc:26:88:53:82:
         3e:c9:ac:73:94:0f:30:05:2b:5c:36:1b:29:e3:0d:83:1a:1f:
         4e:e0:e6:c9:ab:f9:68:ce:c1:81:76:37:c4:cc:69:66:ca:9f:
         11:30:1d:6c:89:b0:fd:53:4c:60:20:de:ee:f1:b8:2d:89:8a:
         ee:fd:d5:36:77:ad:44:e0:3d:e0:c0:0d:bc:cc:22:3a:54:57:
         e1:02:8a:29:58:6f:37:2b:22:a6:21:7c:f0:4d:39:9d:4d:f1:
         25:ed:97:8a:2f:78:8c:0a:59:6d:2b:e3:46:82:ad:ab:f3:89:
         a7:54:33:29:12:0c:5a:cc:d1:eb:05:77:6c:5f:e9:e9:bf:c8:
         ba:79:07:43:7f:5d:97:73:d3:b5:88:72:a3:54:ef:5e:5d:16:
         47:6c:65:c5:db:67:d3:e8:6c:0a:2b:6f:53:50:2c:44:af:08:
         7a:d1:8e:8d:e9:5b:8b:fa:81:b8:32:64:6f:18:00:17:d5:8f:
         73:c5:f1:27:4f:26:14:d3:ac:39:ed:4c:52:e6:e1:8e:74:6a:
         68:ea:71:d6:76:b2:b9:63:90:5b:06:ed:06:95:53:dd:73:7a:
         a4:45:c3:7b:3b:9a:da:9e:b3:82:73:42:dd:d8:96:db:e8:76:
         1c:a4:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:12 2026 by rpki-client