Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa
File:                     af328904-d764-39ee-a186-96c8bedcee04.roa (raw, json)
Hash identifier:          KJEmX4hDfIMYOyUJQzLB05DSWHpNkMXpkr/T0PGMgrE=
Subject key identifier:   6F:88:A2:D2:45:66:30:75:C1:92:A6:FD:5E:58:AA:7E:7F:56:9A:21
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584EDC91F6570BC33CCC66ED1400
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     153371
IP address blocks:        23.165.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:f6:57:0b:c3:3c:cc:66:ed:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=df92e7ea-d91a-4579-b5e6-4c3223701e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:72:bc:11:bd:02:57:1a:3c:22:cb:75:8d:
                    5d:ed:12:aa:34:88:fa:94:62:25:46:ee:12:74:b4:
                    de:2f:98:0b:4e:9b:bd:3b:63:36:93:9d:c9:1a:64:
                    3f:ca:c8:31:96:f7:ab:3c:b3:cd:ab:98:1d:0b:7b:
                    f7:54:81:36:06:b9:7a:87:0a:33:24:95:a3:df:29:
                    7d:8a:3e:1d:57:62:b2:6c:e1:b6:5e:ee:8c:6f:c9:
                    89:f0:0d:fb:29:56:30:5a:ce:55:1b:a0:54:64:5d:
                    04:78:a1:47:3f:41:22:45:88:b2:02:bd:a4:b8:03:
                    fb:fe:2c:59:22:3d:9f:cc:64:71:b8:ab:0a:38:a6:
                    96:e6:bf:fd:17:a8:42:67:5b:c8:ba:f2:76:3b:9a:
                    85:00:25:42:99:29:d6:df:4c:ec:6a:56:30:f1:5f:
                    ac:5a:83:67:c7:60:68:7a:27:be:7e:56:34:34:54:
                    36:12:72:a3:87:56:de:f9:61:47:9e:c6:e3:24:de:
                    f6:13:68:d8:83:2d:12:41:9d:35:71:13:c3:48:74:
                    9f:31:6d:8e:46:14:c7:44:08:c5:fa:b6:d2:34:d4:
                    ea:c8:09:97:19:c2:ef:1a:f1:16:c2:00:41:7f:7a:
                    9c:32:d4:79:fe:8a:ab:cd:f8:eb:9c:9e:c5:f4:3e:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:88:A2:D2:45:66:30:75:C1:92:A6:FD:5E:58:AA:7E:7F:56:9A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/af328904-d764-39ee-a186-96c8bedcee04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1f:e6:22:6c:33:6a:4b:39:49:e4:73:e6:d7:47:e2:2f:36:
         01:9d:4f:ff:d1:96:5d:aa:25:02:6d:66:81:8c:56:dc:77:4c:
         85:f2:b9:7a:83:33:12:69:15:50:08:3f:01:b3:06:14:46:0b:
         0c:f1:51:f6:fb:e9:cb:f2:4a:bb:3c:ca:31:d7:69:e6:50:b8:
         36:89:4c:c2:cd:59:12:7c:a1:eb:ce:fb:0b:e0:d5:f8:4a:ce:
         6b:a5:56:fa:86:de:cc:2f:61:22:60:5d:66:3f:b6:3c:ee:a4:
         5d:38:98:c6:0a:a7:b5:9a:25:9a:01:3a:ec:20:fc:17:51:ea:
         56:16:1d:7f:ab:0c:cc:0b:46:27:8c:d6:d0:00:18:0f:5e:4e:
         74:6c:e7:88:cf:2a:6a:53:27:06:11:97:7f:a8:3d:1a:b3:19:
         3b:d9:9b:9c:92:90:4a:3f:c0:2a:2a:b0:98:81:31:96:b3:8e:
         e7:8d:92:d2:75:40:15:df:b3:7c:5b:ff:3c:54:98:fc:d7:d8:
         09:4a:c6:84:6a:d8:c5:6e:63:07:9a:87:20:dd:58:2c:ef:6f:
         83:ec:fc:f7:6e:b4:48:35:4b:93:40:8c:1e:ec:0d:16:80:5d:
         61:8e:78:89:f8:4a:a5:80:7f:de:b8:0e:19:60:8a:35:9a:44:
         6c:de:e7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:10:50 2026 by rpki-client