Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa
File:                     2c9db57d-cb56-3111-ad11-10c62203b5ca.roa (raw, json)
Hash identifier:          86zL4R3bslSY+tGY3ZknnLXQXOuFOjXBdVIAZD0S3jA=
Subject key identifier:   DB:AA:0F:94:21:FE:DF:9C:4E:EA:B9:F9:EA:F0:C6:E7:20:CB:D6:95
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584EE38CA423C986A3266CD10640
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     19257
IP address blocks:        23.252.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a4:23:c9:86:a3:26:6c:d1:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=9fc262b2-c3bf-49f9-b25b-16ddc073d2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:ff:cf:ae:ac:81:3f:31:8a:26:0b:6b:a2:
                    3c:41:60:1d:ce:f7:90:09:a6:7e:bc:2d:51:bf:07:
                    db:f0:38:4a:77:91:30:72:8d:bc:df:e6:41:bd:e8:
                    b6:c6:48:0e:82:98:89:46:f9:a3:4c:17:3a:f7:ff:
                    d7:33:31:3f:4f:13:a1:dd:fd:a2:07:6a:7a:36:64:
                    17:6d:01:fa:76:11:98:5a:e8:91:e5:a9:63:77:5f:
                    e6:80:41:2a:cf:d2:8d:e4:7c:45:74:cc:59:90:86:
                    c1:3e:55:71:2d:14:6d:85:31:16:06:7d:36:1f:99:
                    7c:b1:25:27:62:2b:29:1b:20:76:33:d9:34:5f:13:
                    e6:69:2d:50:3b:8d:91:1b:85:c6:0e:d6:90:2c:e4:
                    8a:dc:14:f7:e2:a2:d0:33:ac:7f:f6:e6:8d:21:b0:
                    11:e2:57:bf:60:1e:d0:3e:45:26:c1:98:a9:2f:9a:
                    a1:29:6a:bf:4d:eb:9c:dd:96:35:3e:4a:e6:bd:1f:
                    07:2d:71:87:55:4c:65:3d:40:1f:46:e5:ab:bc:f5:
                    58:8d:b1:bc:64:e2:e0:db:76:85:0a:76:ca:4a:aa:
                    b6:da:22:01:a9:e0:f4:0a:37:8a:88:99:23:3e:54:
                    77:14:29:8e:a6:9f:5b:39:e9:48:1a:54:db:80:8e:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AA:0F:94:21:FE:DF:9C:4E:EA:B9:F9:EA:F0:C6:E7:20:CB:D6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5d:5c:a9:ea:be:75:20:df:4a:bc:51:7a:6c:bf:f7:62:82:
         3b:65:19:49:c0:d1:cc:08:49:18:fd:e5:07:00:7f:4f:30:7f:
         5a:58:78:d7:e9:17:01:fe:d8:6c:f6:0a:19:46:46:78:33:1a:
         f0:48:36:75:fa:8c:f4:fe:cf:99:db:5a:82:f1:b8:c0:46:91:
         57:06:f9:57:fe:a4:88:83:2c:ba:75:13:6c:e6:fa:b6:c1:a8:
         4e:a6:b2:bc:87:73:ea:05:22:75:ac:b8:96:e8:15:58:6a:5b:
         94:ad:11:0b:4e:de:4f:0b:f1:bd:b0:f5:c1:fc:78:a5:ec:9b:
         72:9d:a1:59:6f:9c:58:37:6c:44:f5:6f:9f:5d:b8:d9:05:ad:
         09:06:f1:f0:b6:67:82:f6:37:4f:f5:b6:30:fa:51:a2:99:9d:
         0b:ec:b3:70:91:3b:f9:be:f4:d6:42:41:8d:e0:ed:f3:7a:4b:
         49:a3:a8:de:31:6f:83:13:e0:dd:29:c3:2d:f5:cb:64:8f:c8:
         9c:c3:b9:5d:57:ae:77:c9:2c:c1:1d:45:1e:bb:62:6d:5c:79:
         01:eb:0d:b9:b2:12:77:27:49:1b:4e:e9:0b:25:81:9a:34:34:
         a5:a1:89:9a:42:22:03:8b:62:90:cb:ee:3c:36:87:25:6c:ee:
         cd:6d:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:58:23 2026 by rpki-client