Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/f3d237f2-cede-3f1a-a874-91ad868d163f.roa
File:                     f3d237f2-cede-3f1a-a874-91ad868d163f.roa (raw, json)
Hash identifier:          7IfK04Kazo+J5/SaQU/J3PRDV3x12QviSXcd1m3RMQ0=
Subject key identifier:   7F:3D:A7:9B:13:D6:A4:38:12:44:0E:BB:09:9A:32:59:D9:4D:D7:D3
Certificate issuer:       /CN=a2aa5867-ffec-4a93-9a1a-74ad78c19c71
Certificate serial:       010D0C9F4328584F1897C17579C611E291EE0240
Authority key identifier: 82:C9:D5:CC:A1:C7:A8:D3:92:23:06:82:FC:72:A5:6E:F6:68:E3:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/f3d237f2-cede-3f1a-a874-91ad868d163f.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     214483
IP address blocks:        23.139.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:c1:75:79:c6:11:e2:91:ee:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2aa5867-ffec-4a93-9a1a-74ad78c19c71
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=3688869c-4343-45a5-8cbe-1c1c20c456e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:10:d8:6d:c8:15:0a:65:66:40:0c:90:81:
                    8e:be:3d:6e:4f:b0:99:5f:e5:81:30:ec:3c:ec:55:
                    5a:2a:a0:94:6a:33:37:88:d5:b0:31:57:16:f3:2b:
                    9b:1f:13:97:6d:9e:97:4f:97:9e:9d:96:93:7e:e7:
                    36:ac:df:82:e1:c9:bc:dd:f6:bd:3f:9c:38:4b:de:
                    3f:01:64:57:56:06:9a:53:d9:f4:9a:8d:96:41:2a:
                    41:a4:bf:e2:4b:1c:fc:40:5c:5c:b6:99:7c:bb:ad:
                    9b:c4:93:a0:23:b1:b4:d7:bf:57:a2:d3:fd:34:d3:
                    3c:b6:95:86:12:c4:00:6b:f4:45:31:54:31:48:80:
                    ca:56:80:54:4a:0d:8a:26:d4:7a:4d:9f:75:d5:3b:
                    5a:de:81:7d:5f:a8:c5:b9:71:39:f5:9e:75:49:7b:
                    96:7e:49:14:c8:ab:1a:22:41:3d:ef:e5:5e:ad:a3:
                    b8:b6:3c:46:ec:e8:d9:35:e8:cf:28:5d:0d:64:2a:
                    eb:a8:4c:0a:b6:8d:5c:11:d1:04:7b:66:6e:83:1f:
                    c5:e4:48:9c:1b:10:7d:a9:ec:67:2d:e9:d1:cb:b2:
                    28:86:d0:81:27:66:48:00:fd:39:08:7b:27:11:b5:
                    37:c6:81:84:97:68:06:cb:a2:c4:07:a3:ac:51:bb:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3D:A7:9B:13:D6:A4:38:12:44:0E:BB:09:9A:32:59:D9:4D:D7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/f3d237f2-cede-3f1a-a874-91ad868d163f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.crl

            X509v3 Authority Key Identifier:
                keyid:82:C9:D5:CC:A1:C7:A8:D3:92:23:06:82:FC:72:A5:6E:F6:68:E3:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a2aa5867-ffec-4a93-9a1a-74ad78c19c71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:bd:b7:48:23:c3:51:a3:d8:76:f4:12:c3:8e:27:63:39:
         72:07:6b:6a:75:e4:b3:ee:b2:41:a7:ed:5a:ca:0e:a5:2e:d7:
         4e:b2:9b:3e:fd:8b:56:cb:99:8e:cb:e7:d6:8c:bc:4d:e3:b6:
         81:88:32:63:dd:a2:ec:2c:72:fa:65:30:74:96:86:26:75:72:
         52:e2:68:80:68:96:7c:c1:94:09:39:23:14:cc:cf:f7:37:e5:
         37:8f:bf:b1:e9:ad:52:cd:52:56:26:63:62:13:f8:f3:67:88:
         02:71:a2:d9:fc:98:04:ea:b3:ae:d4:9a:21:09:ba:f2:3d:33:
         47:3d:61:c3:b7:a9:97:73:c0:29:bc:d5:80:11:66:68:2d:da:
         f1:3c:dc:b3:01:ba:df:e3:f7:8e:b2:c2:c3:55:f5:da:ea:6e:
         02:ff:53:73:2a:dd:47:6f:47:55:60:0d:d4:f6:66:4a:7d:5f:
         80:24:62:9c:55:f6:54:22:03:35:7a:5f:04:4f:b2:d4:f6:ef:
         66:5f:db:23:25:0d:5e:2d:73:cb:f1:ef:c7:bf:a1:6d:b2:51:
         1e:72:13:54:c3:1a:25:4e:25:29:cf:5c:58:9a:cf:13:6f:80:
         d3:cd:3f:a1:14:21:07:82:eb:28:ad:48:76:c4:e7:25:23:21:
         5d:92:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:54 2026 by rpki-client