Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa
File:                     3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa (raw, json)
Hash identifier:          u55UWBNrBQozZyas6nqsgNwVV+gd3RMBqvubCGTDwwo=
Subject key identifier:   30:B6:83:B2:D9:D4:51:D4:F0:95:DE:E3:5B:CC:48:CD:2F:13:2D:34
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584F85786DABA3954DE14B921100
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     19257
IP address blocks:        23.252.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:6d:ab:a3:95:4d:e1:4b:92:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=e1be9c18-0153-4eb8-a87b-4b1829a28287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:0c:dd:d6:dd:04:2e:77:7c:9b:f8:cc:09:
                    89:4c:b1:50:3f:26:11:7b:8d:4f:41:25:ab:ad:dc:
                    5f:f1:a1:b1:09:fd:2a:82:dd:7c:4f:93:eb:26:40:
                    fe:e3:a7:3e:f0:a1:9c:61:ec:84:7d:fd:f6:9c:d2:
                    e2:c8:6b:d0:6a:19:c7:22:a7:d9:66:80:cb:9e:52:
                    57:fb:ef:32:e7:ff:23:a2:7e:34:23:5d:2e:8e:1d:
                    38:85:d6:e2:e9:4e:9d:31:8b:e0:80:f7:73:bb:36:
                    84:bc:5c:c0:56:4c:3f:19:1e:e0:62:ce:b6:ff:60:
                    4b:61:68:f5:07:52:47:b2:e9:7b:0b:82:d5:67:3e:
                    36:1e:3a:d5:ea:8a:1d:b3:79:3c:78:29:0f:72:46:
                    bf:96:6d:21:46:1f:20:73:42:cf:89:54:57:fc:c8:
                    d4:a2:73:a7:49:33:cc:f7:e5:0d:d4:55:95:6e:4e:
                    73:87:00:6a:ba:a1:ef:50:a8:11:70:db:b4:b6:26:
                    5e:94:af:0b:f3:6d:cd:b9:4d:12:52:09:59:8e:f5:
                    26:f6:67:0e:74:96:a5:65:a6:d5:10:fb:18:d4:ee:
                    77:7f:8d:72:d4:85:b3:29:86:c2:14:96:15:f3:ed:
                    95:d0:1b:a8:9a:93:0a:d1:2e:4d:fe:c3:5d:12:09:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B6:83:B2:D9:D4:51:D4:F0:95:DE:E3:5B:CC:48:CD:2F:13:2D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:06:7b:48:d8:d3:44:5a:5b:37:be:eb:54:22:ff:6a:64:29:
         13:ca:3d:ab:15:23:a4:33:60:6a:a5:1b:10:06:c9:d0:58:7f:
         be:2f:c6:8e:99:d7:df:d1:cb:3c:3a:8c:bc:78:d1:bf:e7:ac:
         67:3e:52:de:a9:09:c7:00:25:db:b4:08:5e:a1:5f:03:80:49:
         ee:e9:c5:62:7b:73:b9:dd:e8:fb:1b:9c:5a:d9:b4:c2:07:dc:
         71:3d:a8:7d:46:a0:bb:e7:34:8a:45:6d:95:c4:c4:a1:64:c3:
         46:97:cf:cd:8d:8c:6c:c9:31:9c:a4:fb:0f:8b:05:f6:3e:ea:
         8e:1e:5c:46:3b:de:42:12:5b:6e:d5:cd:1e:8a:24:7d:73:e0:
         6a:43:32:00:47:9f:c0:6f:28:01:f0:91:51:77:96:a7:64:13:
         e7:3c:90:37:0a:22:9f:be:ac:7e:81:9f:2d:87:f5:19:c8:77:
         0c:72:0b:66:81:bd:3a:7c:a0:9d:fd:b2:8f:0d:ab:82:bd:45:
         e6:a1:6b:22:aa:db:d6:9b:0e:61:d1:46:ed:4a:5e:ce:ab:c8:
         70:01:0e:6c:5c:1b:b8:2a:aa:e9:21:01:3c:3f:7e:f1:04:3b:
         21:7c:f1:66:6c:28:ca:67:9f:18:88:68:92:f5:9a:ad:c1:f0:
         2b:9c:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:14:48 2026 by rpki-client