Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/3ecb7ff0-3f84-3dc2-92bd-8780201e6814.roa
File:                     3ecb7ff0-3f84-3dc2-92bd-8780201e6814.roa (raw, json)
Hash identifier:          d7KITJIa2ph0yX5hKe1RyMFqlB5NBVqGkk0PVF9It/8=
Subject key identifier:   87:E2:9B:62:39:17:83:2C:FB:D7:5B:1E:59:12:6C:E5:14:69:4D:1A
Certificate issuer:       /CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
Certificate serial:       010D0C9F4328584ECA6C8614C10520490A3F2880
Authority key identifier: 01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/3ecb7ff0-3f84-3dc2-92bd-8780201e6814.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     57844
IP address blocks:        23.247.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:86:14:c1:05:20:49:0a:3f:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=cc29bc3c-a4ff-4dd0-96e4-d50bb3602cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:c6:00:c4:22:a1:52:ff:55:57:d7:1e:f8:
                    c0:eb:81:38:13:13:66:4a:23:ce:78:89:70:93:77:
                    fe:23:d8:ce:9d:6e:74:8a:4f:49:f0:df:fa:0b:cb:
                    68:70:d1:b2:bb:51:ae:9a:72:62:45:21:e1:5f:56:
                    d2:23:95:db:06:25:59:19:c6:72:8f:e7:8e:fc:05:
                    08:82:68:47:57:2c:d1:06:24:48:d5:c5:a0:9c:1b:
                    08:8e:59:3e:9c:0e:02:a1:f1:a0:56:d6:38:c5:41:
                    a4:6c:94:95:a5:90:db:e7:fe:e1:1f:db:f5:7f:c4:
                    66:90:27:48:73:02:f8:fb:97:19:69:fa:36:41:37:
                    2f:8f:50:dc:13:7e:34:35:fd:38:e7:5b:9e:57:c0:
                    bc:ee:68:4d:aa:55:37:9f:15:1a:74:c3:67:11:51:
                    1a:9b:5c:0f:81:b1:9e:a0:e5:6e:d2:11:82:57:e6:
                    64:e2:79:e7:6e:58:1c:d3:6d:8f:1b:f4:7a:3a:68:
                    8b:c0:66:e2:70:bd:ca:c4:5f:b9:f4:69:60:8f:73:
                    b1:6c:7f:e3:49:06:79:3a:3e:5a:61:e8:85:ec:09:
                    a6:86:96:89:a2:0d:21:9d:d0:35:65:21:be:53:30:
                    c4:eb:d9:d5:02:e6:e3:30:9c:3c:99:c1:03:db:b0:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:9B:62:39:17:83:2C:FB:D7:5B:1E:59:12:6C:E5:14:69:4D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/3ecb7ff0-3f84-3dc2-92bd-8780201e6814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl

            X509v3 Authority Key Identifier:
                keyid:01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:97:1d:e8:e1:f5:08:4c:8d:1b:8e:d8:89:bd:c1:46:a2:d5:
         14:23:6d:30:8f:2c:53:ab:50:7a:dc:47:74:41:ce:90:ff:7b:
         39:9c:7d:35:8a:b5:5d:59:8f:a0:fa:b7:27:b5:89:bf:9d:fe:
         00:5d:a7:8e:f8:40:02:e5:4d:e6:29:5b:ca:41:3c:e5:c8:e2:
         92:62:10:b5:f7:ed:6a:3e:4b:ad:34:e5:13:74:6d:3f:34:4e:
         89:d8:73:a7:99:5a:ff:11:5a:94:74:42:ac:15:c9:5d:47:66:
         af:30:89:3e:e9:57:7a:cf:37:47:3e:90:5e:44:0a:4c:47:99:
         65:e9:71:f4:5c:a9:b7:0b:e8:be:81:be:87:c1:f7:64:00:ee:
         66:7b:cd:94:50:ae:be:88:3e:b6:db:15:33:32:1c:38:3e:79:
         20:3e:a9:1d:2f:8c:a3:78:f1:cb:ee:6e:d0:09:f1:26:0e:70:
         55:35:e6:66:27:05:11:bc:c6:c5:06:11:ae:69:cf:11:71:69:
         8f:96:87:1e:0c:c4:40:a5:2d:08:35:46:f5:5d:82:92:aa:60:
         37:c6:d8:33:38:bd:2d:d0:37:88:65:16:3f:9e:bf:71:42:24:
         34:73:d5:9a:a3:cd:a6:8a:17:b6:df:58:d8:3f:0c:6c:f7:ef:
         a3:6b:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:39:02 2026 by rpki-client