Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa
File:                     8b8be658-4911-3e79-adcb-5f756862b67a.roa (raw, json)
Hash identifier:          Z9zF87CcyeYFKIzpS/XFrslLleDLV7RZ7RkXDOc2bco=
Subject key identifier:   C9:50:46:13:F9:24:4E:86:E0:0E:38:B0:06:26:93:B7:18:AC:50:20
Certificate issuer:       /CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1
Certificate serial:       010D0C9F4328584F506D52999E915D30C784D7C0
Authority key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     46505
IP address blocks:        23.187.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:52:99:9e:91:5d:30:c7:84:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=a59fdea7-f55c-4a7b-90ad-5faa2bdc3d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:aa:f3:ca:cc:b2:e2:42:de:3e:e7:d5:47:
                    f4:29:50:f5:b8:5a:e8:d2:cc:d2:e7:16:8b:f4:ca:
                    8d:13:5e:c0:20:5f:49:10:e1:d5:1e:b3:5a:da:8c:
                    d2:d2:2b:6b:9b:53:a1:ce:63:ad:99:fe:4a:d6:6e:
                    02:34:9d:e0:68:47:0f:b5:f3:92:cd:9c:fa:25:cd:
                    57:d7:e0:79:79:51:99:58:ff:82:17:2f:6f:5a:eb:
                    7f:ec:dc:87:7a:4c:d8:9f:0f:41:59:32:91:de:c4:
                    46:fa:a9:d5:e3:f8:cd:33:3e:78:95:20:f6:71:c4:
                    9b:74:1b:82:40:01:95:dd:8b:1a:b9:a5:34:02:cb:
                    d6:1d:e8:07:c4:f6:07:7a:a4:94:ad:a7:22:ae:d6:
                    8b:d1:88:de:46:7d:74:fe:1f:2f:b9:51:0f:75:b5:
                    36:54:8a:88:fb:de:9f:5f:1f:8c:85:3a:15:50:95:
                    69:90:bb:86:81:4b:a6:5e:aa:76:58:ee:02:56:5d:
                    7c:86:0a:9b:f5:49:0f:5b:0c:7b:c8:60:de:3b:f3:
                    5f:3b:c6:e0:4a:75:d3:6e:f9:5b:27:ac:10:c8:de:
                    4a:37:e4:f2:4b:84:d9:9e:3c:a4:fe:39:cb:cd:4d:
                    0c:e1:67:dd:3e:99:49:00:e0:54:08:8a:c4:00:5a:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:46:13:F9:24:4E:86:E0:0E:38:B0:06:26:93:B7:18:AC:50:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl

            X509v3 Authority Key Identifier:
                keyid:DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:60:34:50:90:69:78:80:8f:41:d6:ec:28:fd:c7:59:38:f5:
         e5:74:42:d7:c2:29:a7:26:e0:38:c3:0a:f2:98:72:27:16:f5:
         4c:7d:87:cb:5b:c4:b6:78:fb:14:ff:75:82:14:78:24:91:91:
         27:70:db:4a:e2:b5:cb:27:38:ea:b9:f5:6b:33:2e:73:4c:d5:
         4f:72:ba:d0:b4:cb:49:8f:49:fc:6b:e0:9b:46:6e:ed:fc:4e:
         29:db:80:c2:8a:69:ec:1b:a4:c7:63:3e:98:34:61:55:06:90:
         e1:d9:89:0c:fc:73:73:fa:02:8e:8c:93:07:38:8c:7f:5f:91:
         e6:55:a5:40:86:b8:a9:3c:04:6b:8d:66:49:57:6c:e0:be:f3:
         41:32:b8:af:5b:d7:ff:66:51:7d:dd:61:ee:04:32:f0:98:48:
         b4:22:3c:8e:14:f4:4c:c1:99:48:7c:29:aa:03:c4:89:25:f5:
         cb:90:89:f7:5f:7e:4e:32:1f:a9:11:bd:fa:89:ae:e0:2e:59:
         df:98:1a:6a:a7:c4:5f:72:cd:3e:53:be:08:f3:cc:2c:e5:fc:
         24:16:81:4d:d8:36:ee:d1:a8:71:e3:9c:7d:18:6f:ac:7e:3a:
         e4:21:ce:ca:d0:89:fa:7a:49:db:ac:de:c3:94:d8:c4:d3:3a:
         87:4c:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:09:03 2026 by rpki-client