Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa
File:                     2de66478-b3a7-3d96-906b-0f63430b0ee2.roa (raw, json)
Hash identifier:          w9YoGXlzQPYt828ADj5yugLG6oGY9g5zzCOYB3R0t0E=
Subject key identifier:   E3:6D:D2:AE:B1:3D:7E:8F:E4:9C:0A:F7:D3:37:5F:39:A0:CF:CF:A4
Certificate issuer:       /CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
Certificate serial:       010D0C9F4328584EA7881903DF1C6169357D5BA0
Authority key identifier: C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     138997
IP address blocks:        23.128.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:19:03:df:1c:61:69:35:7d:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3ee8fc64-3b88-4f53-9a52-df31ec1fc671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:a7:10:31:32:49:21:89:2f:eb:46:24:8c:
                    8b:3c:d3:45:a0:28:d8:fe:c5:79:ec:a8:f4:3e:10:
                    0d:91:01:36:6e:d4:9e:13:3e:1f:8d:43:48:36:7b:
                    ac:ba:48:9e:6f:17:bb:d7:6d:79:b5:f7:a0:cf:44:
                    00:97:8a:f1:f9:54:cc:2f:d3:5d:bd:65:4a:b0:c8:
                    38:9a:86:1d:4a:ab:7f:a6:fd:cd:ed:3c:ad:7b:74:
                    4c:01:c4:8d:8a:83:8d:e5:46:8e:1d:89:87:d7:94:
                    db:74:5e:98:4b:06:4e:6d:1c:c2:14:9e:4a:d3:73:
                    cd:e5:d7:e0:77:41:fe:a4:ab:82:f3:5f:d4:24:41:
                    ec:ec:02:86:d6:d5:f4:ad:ba:34:1c:37:3b:dc:eb:
                    33:cd:54:0c:b2:59:89:53:9b:3d:56:f1:1d:a2:64:
                    31:e5:1c:42:ed:b2:97:ce:c3:6d:e0:84:28:83:ec:
                    81:11:b6:d6:eb:0b:3d:14:0a:ba:00:1f:46:65:cc:
                    0a:86:b5:f3:2a:6e:92:82:1d:cf:01:40:24:1f:36:
                    52:78:0e:98:70:11:8e:7b:28:32:8b:4d:48:d5:04:
                    81:bb:12:b0:e6:cf:9c:9b:33:41:e5:1a:5d:fb:ef:
                    3e:06:da:78:19:8d:13:5e:f8:66:1d:65:fe:18:cf:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6D:D2:AE:B1:3D:7E:8F:E4:9C:0A:F7:D3:37:5F:39:A0:CF:CF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl

            X509v3 Authority Key Identifier:
                keyid:C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:19:2a:16:e9:46:89:42:f7:e3:85:2f:3c:89:1f:9b:85:b1:
         38:a3:f0:4a:c5:d2:6c:ee:76:4c:bd:99:80:5a:4c:63:85:61:
         16:e4:85:e0:45:f5:c7:2d:69:c1:26:26:43:4b:86:57:f7:cc:
         80:e5:b0:ec:d0:50:ce:6f:0e:6c:b2:f8:70:35:92:1c:6e:0c:
         aa:68:72:65:08:bb:b0:6c:62:f6:3f:17:86:89:a4:69:b6:22:
         ba:ff:ac:3b:11:3d:33:30:7c:49:f4:99:92:44:64:83:79:83:
         2d:77:b8:08:bb:0f:fb:cc:2e:62:9b:a7:e9:8d:6f:7a:8f:0e:
         36:5c:be:50:d9:61:c2:95:4f:9f:80:01:12:8c:86:bd:05:23:
         53:67:b2:b4:71:d0:5c:cb:48:fe:ef:38:79:d6:12:7d:ee:84:
         1d:c6:1d:29:b3:cb:4c:3a:67:2a:11:02:98:7a:00:83:d7:02:
         c1:d6:52:e6:e7:46:75:02:d0:34:73:e4:fa:80:be:6b:d5:b1:
         e8:e7:6e:0f:19:e0:24:6f:92:a9:12:d9:b6:f1:83:bf:aa:31:
         90:dc:b0:55:d6:71:30:ce:c1:05:55:c8:13:57:07:34:65:7d:
         57:2f:aa:ca:de:39:4b:0d:e2:a0:8c:1c:7e:95:b7:04:a6:46:
         a6:93:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:51:06 2026 by rpki-client