Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/0568bb30-a161-338f-b039-d3ae2bde0cf1.roa
File:                     0568bb30-a161-338f-b039-d3ae2bde0cf1.roa (raw, json)
Hash identifier:          b/y0ehrPfRltXibFPKRjOsaxbCx2Yae5u++C8Us2itE=
Subject key identifier:   2C:95:32:3C:95:CE:45:B3:1A:09:5B:C8:F1:08:A1:D1:97:59:6D:F1
Certificate issuer:       /CN=210656ce-d9a2-443d-996e-405a0c9439dc
Certificate serial:       010D0C9F4328584EA797FEFDD88917F634ABDA80
Authority key identifier: 63:25:A3:D9:CD:1E:0F:E1:D5:3E:F5:3C:D5:1E:63:7E:1A:E6:33:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/0568bb30-a161-338f-b039-d3ae2bde0cf1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63023
IP address blocks:        23.150.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/210656ce-d9a2-443d-996e-405a0c9439dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/210656ce-d9a2-443d-996e-405a0c9439dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:fe:fd:d8:89:17:f6:34:ab:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210656ce-d9a2-443d-996e-405a0c9439dc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5cff37f0-8941-468f-8a97-1fe79ff33eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:6c:ff:1d:2d:39:94:d2:d6:5f:b9:40:6b:
                    f5:da:29:86:31:39:84:94:92:1b:31:b7:34:35:41:
                    7e:41:37:f4:11:b8:ef:ca:9a:de:13:b4:97:6e:5b:
                    e0:1c:e8:83:fd:62:34:45:eb:a8:2d:ee:99:92:de:
                    50:45:05:35:f1:1d:be:cd:88:c5:8a:bd:50:da:44:
                    33:6d:fb:0d:bb:51:f1:fa:d5:de:e7:b2:a2:81:a1:
                    56:57:0b:08:a1:3b:6e:a7:98:8c:05:83:52:0c:d8:
                    45:55:5a:66:1d:a6:8e:2a:8b:5a:4a:c0:96:c6:6f:
                    14:58:85:4d:4d:6b:1b:8f:a1:54:18:4f:15:f0:0d:
                    86:d1:de:4f:65:38:02:a8:1a:2b:b2:4f:91:97:09:
                    5c:4e:a9:db:d4:c7:76:4b:71:2e:26:fb:8d:9d:a2:
                    ce:63:06:82:34:d3:12:bf:12:fa:54:ce:7f:55:f2:
                    e6:4a:d6:03:63:3f:09:9e:db:a4:4a:dc:6c:d9:d6:
                    6a:cb:48:1e:3c:42:6e:b3:73:b8:20:7b:4f:d2:ed:
                    6a:ca:70:dc:c0:23:82:69:44:97:f1:b6:f8:39:35:
                    52:82:96:ae:41:a0:ba:81:65:a3:4f:e2:d7:94:bc:
                    3a:c0:47:ab:e9:64:d9:a1:76:d5:85:88:06:72:14:
                    1b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:95:32:3C:95:CE:45:B3:1A:09:5B:C8:F1:08:A1:D1:97:59:6D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/0568bb30-a161-338f-b039-d3ae2bde0cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/210656ce-d9a2-443d-996e-405a0c9439dc.crl

            X509v3 Authority Key Identifier:
                keyid:63:25:A3:D9:CD:1E:0F:E1:D5:3E:F5:3C:D5:1E:63:7E:1A:E6:33:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c6:a5:a8:bf:b9:35:df:c4:7d:f8:cd:29:c0:ed:f6:6d:bd:
         62:f6:d7:7b:08:fe:59:22:77:34:3f:34:69:31:6e:47:1a:d5:
         a0:07:21:4d:b3:94:18:46:77:a5:db:e3:17:fa:bf:04:ea:04:
         5d:2a:08:4b:4c:80:8a:42:c5:03:f4:be:88:1b:6e:84:6f:ea:
         d9:9b:35:ed:41:7a:f0:e0:a3:5e:be:f1:7e:09:d1:dc:2f:f1:
         48:98:aa:b4:5b:14:bc:1c:29:8d:df:28:84:04:7c:e5:8d:b6:
         ae:3d:30:5a:5d:3f:d3:fd:79:c9:f6:76:dc:18:b5:69:46:de:
         d5:96:3e:b2:08:45:f8:91:a7:7f:e2:d5:3c:9e:40:a2:35:d9:
         33:09:5e:57:dc:db:3d:56:83:ad:30:06:cd:65:c1:de:ee:8c:
         fb:eb:71:41:f0:87:e3:ae:84:eb:b9:78:49:e6:75:ba:73:99:
         77:d6:d4:9b:39:dc:0a:19:df:9f:62:12:69:0a:f3:37:f2:34:
         41:f1:77:51:19:b7:79:0e:79:9c:42:88:19:f9:11:e6:bc:73:
         c9:3d:6e:2d:dc:2f:86:03:7e:54:54:67:d0:d5:04:f9:ce:f0:
         95:17:50:f1:7d:dc:1f:86:be:f2:d4:88:ea:b0:e8:cf:4b:6c:
         b2:1f:78:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:16:21 2026 by rpki-client