Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/290a31cb-a9d2-3a24-b479-e8fcba6b3694.roa
File:                     290a31cb-a9d2-3a24-b479-e8fcba6b3694.roa (raw, json)
Hash identifier:          XQD3UaCihaajo9BVI5JuWFovJGvzHP4716nyhgj+/Ws=
Subject key identifier:   02:0A:B1:BE:73:E4:CE:02:29:77:A2:20:FC:12:7A:79:BC:97:5C:0E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F549DA02BFA068FF80CD20400
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/290a31cb-a9d2-3a24-b479-e8fcba6b3694.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        173.232.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a0:2b:fa:06:8f:f8:0c:d2:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=c760eae0-8d16-41ec-be75-07b1d11f9ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:2f:cc:03:64:0a:4a:d7:75:52:c3:77:99:
                    f2:c6:b2:44:80:7a:85:4e:e1:58:2f:c9:b6:98:35:
                    6d:22:cb:0d:fa:1c:d0:65:60:19:0e:0f:6b:68:b5:
                    79:bf:2e:d5:f2:b6:c0:a0:66:2f:a1:ca:e3:af:ad:
                    6d:5f:aa:9d:e5:34:69:c4:8c:fb:cd:4e:cc:76:43:
                    ca:ce:a2:50:37:5a:48:0f:ad:b7:cc:ee:98:12:06:
                    cc:bd:d3:32:6b:f3:df:1a:c5:85:22:47:29:25:76:
                    c5:22:19:73:43:5c:b6:5b:93:7c:6d:d2:80:d2:e6:
                    bd:4a:e7:c7:3b:f4:73:2d:3a:15:7a:82:12:55:be:
                    d2:87:0a:e5:de:3c:43:b4:8a:ba:eb:73:fe:e9:bd:
                    bc:60:51:4c:0a:e4:9e:2c:8e:5f:0a:c5:cf:4e:bd:
                    f1:33:8f:72:e3:81:0f:37:66:24:12:2e:43:f6:a2:
                    e2:79:9a:d5:81:98:b8:01:ea:65:7d:87:07:07:46:
                    3e:05:7d:78:9d:6f:0e:75:97:25:80:c5:55:96:fd:
                    d0:c9:71:85:20:90:95:89:61:89:04:64:0e:29:7d:
                    f7:e5:c8:90:d4:12:e0:60:51:8d:cd:bb:15:79:42:
                    da:8e:62:c6:0d:ad:ca:9f:a7:b7:9c:32:43:28:82:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0A:B1:BE:73:E4:CE:02:29:77:A2:20:FC:12:7A:79:BC:97:5C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/290a31cb-a9d2-3a24-b479-e8fcba6b3694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:39:5a:a9:7a:82:44:40:9e:60:a8:19:fe:0b:ae:27:9b:
         0a:96:fc:bc:dd:a7:8e:10:80:02:bc:2f:8a:5a:b7:23:d1:83:
         74:dc:39:76:1c:4a:d1:97:17:ab:30:15:d2:41:74:11:09:f4:
         08:5e:a2:be:b6:9b:8b:92:5e:55:3e:2b:67:0e:fb:8a:94:07:
         09:f6:08:c6:de:89:48:1f:33:ad:2e:ac:4d:46:80:4c:00:26:
         31:f0:49:91:aa:25:76:ba:ea:95:cb:48:7d:8c:28:66:9e:8e:
         f4:23:99:9d:6c:81:72:ac:d9:f5:66:45:25:26:0a:b9:7b:9b:
         35:64:f0:bd:fc:de:5f:64:77:42:07:61:49:46:fc:78:07:08:
         c7:5f:03:a0:ed:33:7b:31:59:d8:ec:17:29:36:85:89:f9:4f:
         3c:0e:75:51:30:c0:09:b0:84:ba:01:7a:4d:0c:35:60:59:ad:
         78:ca:cf:74:09:99:1c:c7:c0:23:9f:cf:87:99:18:71:b3:75:
         4f:89:0e:86:b7:5f:2e:f4:4d:10:6a:60:60:93:91:0c:87:8b:
         4b:cb:0c:98:8e:55:96:1a:8f:df:74:c9:06:87:eb:0a:29:45:
         a8:ce:36:aa:a7:cf:98:59:b1:d2:ea:ed:5b:12:25:63:64:d6:
         9b:39:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:10:30 2026 by rpki-client