Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/14f473a4-6c37-3710-93eb-0ece4af50889.roa
File:                     14f473a4-6c37-3710-93eb-0ece4af50889.roa (raw, json)
Hash identifier:          fMnM2p3GdkHefmZrFDL5jS4WTvFNKliHxj6OvnmXgc8=
Subject key identifier:   FC:3A:A3:FA:DA:CC:57:8B:30:F5:EA:A6:DB:6A:DA:70:39:AB:AA:BC
Certificate issuer:       /CN=9c0c1427-027c-46e0-badf-264566cd16de
Certificate serial:       010D0C9F4328584EA788A9B48B6103BB37504550
Authority key identifier: FA:E7:0D:DE:26:03:F4:B9:58:40:79:E2:88:77:68:0B:DF:B9:60:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/14f473a4-6c37-3710-93eb-0ece4af50889.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7018
IP address blocks:        23.132.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/9c0c1427-027c-46e0-badf-264566cd16de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/9c0c1427-027c-46e0-badf-264566cd16de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a9:b4:8b:61:03:bb:37:50:45:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0c1427-027c-46e0-badf-264566cd16de
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=332f7e6d-beb4-4c4e-872f-9826e02fc483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:ce:f3:33:4b:70:ea:7e:b5:ab:91:45:be:
                    19:99:1e:97:11:05:bd:dc:83:1c:63:71:bc:10:d0:
                    04:fa:11:9d:f0:d2:da:89:19:c6:02:01:6c:47:31:
                    18:73:91:f4:b4:87:da:f0:89:a8:f2:4b:a1:2d:84:
                    24:33:e0:2a:0c:f9:b6:85:2f:72:03:2c:b8:b1:1e:
                    c6:fb:ed:c2:16:fa:ca:71:fd:83:1f:91:82:c8:6e:
                    1b:3d:86:a4:20:37:14:bf:44:d3:fc:08:5c:5f:a2:
                    15:10:92:36:c6:d5:3b:12:89:36:c2:cf:90:04:42:
                    d4:23:ec:57:32:b4:fc:f7:58:0b:93:a2:87:40:6e:
                    67:05:f4:6a:b3:36:a0:27:38:2b:5d:72:66:67:02:
                    de:fb:93:65:83:a3:6b:c0:ba:99:c1:ed:04:cb:d5:
                    b6:90:f6:69:b4:9a:fc:e7:54:84:b7:79:19:5a:c0:
                    94:fe:f7:dc:16:c5:c2:7b:43:5b:b6:35:24:db:74:
                    1a:1c:60:63:63:76:85:fa:15:9d:ec:59:31:56:00:
                    fd:8a:10:a4:c1:a7:f9:e4:68:d8:10:62:81:9b:de:
                    ce:0f:ef:cc:20:8a:00:80:86:6b:c0:4d:b6:5b:78:
                    9a:3b:5b:3d:50:cc:c5:2c:bf:fd:7f:c5:7f:c4:f3:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:A3:FA:DA:CC:57:8B:30:F5:EA:A6:DB:6A:DA:70:39:AB:AA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/14f473a4-6c37-3710-93eb-0ece4af50889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/9c0c1427-027c-46e0-badf-264566cd16de.crl

            X509v3 Authority Key Identifier:
                keyid:FA:E7:0D:DE:26:03:F4:B9:58:40:79:E2:88:77:68:0B:DF:B9:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:04:08:7a:d6:ac:fa:46:49:2f:54:00:30:67:66:5c:81:fd:
         9e:20:a4:df:93:19:8e:b4:d5:fc:f9:32:0a:b1:83:7e:ec:eb:
         c8:33:fd:c9:ce:dd:ec:29:76:f6:b1:fa:ea:16:28:1e:75:28:
         9e:9e:78:4d:ff:81:83:54:5e:e9:59:49:2e:71:c1:59:e1:00:
         2b:ba:6f:81:0e:c3:0d:88:be:34:c1:b8:a8:4b:b9:39:9e:8e:
         2e:1e:4e:9e:87:f1:a6:9b:5b:58:6b:11:da:e7:98:33:89:c0:
         de:7b:93:9b:89:5c:a8:bb:22:73:8f:39:44:dd:c9:e9:cd:5d:
         27:7d:54:01:f7:9b:9d:5d:f6:f2:3a:9b:dd:13:aa:1d:8c:75:
         9c:ba:30:26:ca:7a:9f:3d:d5:1a:92:59:ec:51:d8:b9:8c:cc:
         79:9b:6c:5c:33:ab:f5:f9:15:fe:59:2e:a5:2b:6b:50:3e:dc:
         a3:8e:23:10:4f:08:c3:22:19:d5:5a:8f:6e:1e:9b:b2:7b:de:
         df:87:44:7b:99:f0:af:ab:89:5b:90:16:03:dc:30:2a:de:c7:
         63:a4:88:12:b6:98:56:58:ee:54:8f:f6:a1:06:ee:70:69:06:
         82:59:54:8e:95:af:59:c0:12:b6:97:94:6d:7f:d3:40:15:37:
         a4:a2:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 15:39:29 2026 by rpki-client