Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/d0e1319e-24be-3622-87a5-ea7eb7cbd469.roa
File:                     d0e1319e-24be-3622-87a5-ea7eb7cbd469.roa (raw, json)
Hash identifier:          42CKTN6E5KvT6s6JAW8YKj4NM46bvwO7CBnd4NoXHw4=
Subject key identifier:   12:45:64:D2:DC:59:DE:62:43:0D:33:F0:B8:15:71:CC:17:09:95:CA
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F4328584F498BC0D944AAB6CF84329440
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/d0e1319e-24be-3622-87a5-ea7eb7cbd469.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401243
IP address blocks:        23.146.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:c0:d9:44:aa:b6:cf:84:32:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f5d2ddf9-a2bd-4cb7-9066-044faa4665d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:a2:c4:40:83:f1:a0:d3:14:8e:6d:ac:fe:
                    7a:51:b4:04:8e:57:65:1f:d1:3c:8d:9b:d1:b7:ba:
                    6f:c2:fd:52:21:ed:3f:68:a5:f1:14:db:cc:96:55:
                    22:fa:ad:3c:90:f5:fe:7b:1d:a8:13:85:3b:a0:83:
                    43:3d:f2:16:ab:85:6d:95:ca:56:78:3a:18:c4:c5:
                    2e:ee:d7:53:76:c3:2f:19:a1:18:76:1f:d2:e2:7a:
                    5a:f1:e3:e7:c6:d3:89:e7:f6:31:4e:2b:ff:6b:2b:
                    8e:f8:83:1d:1d:44:31:5e:30:0c:4a:32:68:4e:b8:
                    a3:69:3c:bc:09:37:65:85:21:c8:b6:09:2d:b6:8f:
                    b7:41:83:c5:98:bc:fe:bb:95:11:98:8c:45:df:fe:
                    6e:09:d2:3e:c7:f1:4d:88:87:b1:38:46:1c:98:03:
                    f8:e5:18:b4:0f:52:56:d3:2d:08:4d:e9:cc:07:e2:
                    46:a2:db:bf:a7:2b:bc:50:a4:c8:98:c8:c2:ee:f4:
                    d0:6d:bc:44:d9:7c:c5:bf:92:58:5a:97:ed:98:d8:
                    ac:cc:9f:4b:0d:12:86:f1:89:f3:ba:dc:73:26:d6:
                    43:20:8f:fe:c1:d9:24:94:79:31:5d:bd:0a:39:c9:
                    a1:ff:24:48:57:72:82:6c:96:f5:c5:71:db:9f:35:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:45:64:D2:DC:59:DE:62:43:0D:33:F0:B8:15:71:CC:17:09:95:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/d0e1319e-24be-3622-87a5-ea7eb7cbd469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:dc:0f:5c:a8:42:52:b2:a3:5f:e9:46:3f:12:02:67:46:e0:
         96:22:33:04:83:b6:8b:54:4d:f7:cb:d3:ed:f6:b1:b5:4c:0e:
         82:bb:a5:b3:64:0c:4a:3c:d3:ae:ae:64:ac:3e:30:b4:2d:04:
         8d:9f:dc:fd:a6:49:31:e4:eb:d6:b9:9b:91:d6:de:84:64:4e:
         06:c5:20:76:be:5e:ae:eb:91:66:bc:a1:ec:bc:5b:41:2a:e1:
         55:f3:57:58:dc:48:ec:af:81:aa:32:5c:97:92:d9:e2:5f:5e:
         f2:5a:f3:84:41:23:7a:20:32:87:7e:02:93:a1:f4:f2:b4:e8:
         d2:5c:c9:99:fe:70:69:fc:db:70:c4:21:e6:19:91:e3:ec:11:
         f0:8f:b2:04:b0:3e:41:ea:74:35:50:08:91:69:1b:9b:3d:e7:
         8d:51:4f:15:41:3c:ee:a3:9c:ca:5d:a4:0e:7c:8c:4a:b3:95:
         89:69:ec:48:b2:5b:c2:0d:a1:4e:7b:87:28:ca:76:86:21:4c:
         2d:82:cf:05:dc:93:7b:fb:ab:bf:de:2b:de:4b:e8:2a:90:0b:
         65:ba:3b:1a:14:58:61:67:9a:09:b9:01:c9:eb:05:43:12:9f:
         15:d2:3c:82:54:39:eb:b7:89:23:52:f5:32:eb:30:e8:b8:71:
         66:57:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 07:34:46 2026 by rpki-client