Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/bc7ffbdf-88a7-3322-9215-6399aa14e8b8.roa
File:                     bc7ffbdf-88a7-3322-9215-6399aa14e8b8.roa (raw, json)
Hash identifier:          ITygTciqZ4Vw+kYgcybbXFFchUpCuf7yp3Yy7/jz2ms=
Subject key identifier:   D7:67:8D:22:FB:56:1F:67:47:35:47:8B:B3:7D:72:64:1A:23:23:50
Certificate issuer:       /CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
Certificate serial:       010D0C9F4328584EC0A71D5E223E35E1CFB63100
Authority key identifier: 01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/bc7ffbdf-88a7-3322-9215-6399aa14e8b8.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     57844
IP address blocks:        23.247.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:1d:5e:22:3e:35:e1:cf:b6:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98358f5d-f18a-4598-b78f-1fc0ea91652a
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=3aa1539c-edcb-4d9a-af3a-4180f833cba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:ac:f8:77:ed:a1:59:22:d2:ee:1b:65:d4:
                    5d:bc:20:ae:78:04:c8:54:96:45:35:b3:51:72:0c:
                    d1:cc:79:40:45:4f:b7:d9:93:31:1d:cb:bb:1d:ce:
                    db:05:f1:78:79:5c:30:b1:0a:b7:e7:79:03:78:37:
                    ab:12:7f:27:46:b2:11:2e:81:35:89:8a:c2:2b:eb:
                    b7:1d:43:5a:91:0a:c6:84:fa:78:e7:5b:0a:d6:86:
                    be:23:98:5d:5f:ae:bf:f5:b0:e5:dd:46:c3:7e:4f:
                    ae:ed:cf:99:04:cb:a0:c7:61:f3:9d:d4:17:8d:15:
                    5c:86:ce:cf:38:73:b6:7e:eb:3f:c8:d3:5a:c7:83:
                    b7:b1:26:ca:0a:1e:80:de:72:d1:83:82:b4:62:8f:
                    b5:62:ca:68:2b:0c:7d:ae:e8:2b:8a:45:da:e9:d1:
                    5c:bc:94:82:56:5c:2d:b1:2b:7e:4e:dc:0a:6e:aa:
                    b5:2e:0c:2b:d5:0e:2b:57:ab:12:87:51:7c:b3:d3:
                    fa:21:87:90:83:2f:01:29:3a:05:ab:8f:c6:e1:1c:
                    b2:6b:f5:d3:6c:16:e1:3a:c5:9e:c2:9e:96:0e:23:
                    d5:38:47:58:32:c8:84:61:c3:ff:29:ff:c8:64:70:
                    29:27:7d:c5:5d:89:fb:f6:fb:75:c8:be:05:1f:08:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:8D:22:FB:56:1F:67:47:35:47:8B:B3:7D:72:64:1A:23:23:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/bc7ffbdf-88a7-3322-9215-6399aa14e8b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a/98358f5d-f18a-4598-b78f-1fc0ea91652a.crl

            X509v3 Authority Key Identifier:
                keyid:01:B7:1F:C1:BF:12:42:00:51:B3:85:A5:DC:26:15:DA:E6:39:C1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/98358f5d-f18a-4598-b78f-1fc0ea91652a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:76:b3:fc:aa:7f:2c:f4:8f:92:72:29:fe:6a:4d:b4:e3:98:
         f4:c6:66:6f:3c:c0:90:5a:d0:cc:32:ed:03:91:c1:7c:b1:57:
         e0:d6:fb:b6:c2:e6:43:ad:53:11:6c:b6:44:02:df:8a:37:bc:
         00:89:fa:b5:43:fc:24:3d:6b:c9:de:14:1b:14:c9:eb:74:9c:
         f4:ab:1f:9c:77:ce:b0:99:b6:2e:52:72:1c:d4:2a:03:ba:e5:
         5e:67:60:38:12:8b:0a:65:bd:f0:9e:36:cc:34:c8:e3:d7:9d:
         c7:6c:ee:2b:99:31:cf:08:5c:78:a4:a5:16:6f:6b:fe:fb:76:
         a5:3b:74:e5:38:22:74:0a:6f:50:07:87:51:af:5a:8e:c0:d7:
         a8:84:89:e5:21:ca:4e:b7:be:05:d8:0a:18:cf:67:98:5c:eb:
         ab:68:f6:0a:9e:70:c6:f4:53:15:12:91:42:3a:d0:32:97:11:
         be:56:66:d0:f5:64:cf:27:46:be:41:fb:fe:dd:f5:bb:05:38:
         14:bd:81:ed:2d:c9:f9:53:06:ba:43:27:ef:30:8f:73:8b:b2:
         0d:1f:01:b3:09:bc:a6:09:40:c0:e8:a1:2f:13:58:8e:ac:35:
         de:1f:cc:e6:3d:61:0a:a4:7d:5d:fa:5a:d8:0e:fa:16:6d:11:
         9c:ca:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:39:04 2026 by rpki-client