Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/f05177d7-1d41-3211-b25d-3ec9ce74d857.roa
File:                     f05177d7-1d41-3211-b25d-3ec9ce74d857.roa (raw, json)
Hash identifier:          h5jjei4366HYwWEFzAmlOzzGY7JWFxXBnSFHkQdFwrM=
Subject key identifier:   C0:0A:4B:18:85:A0:AC:76:23:64:1D:1F:9C:AE:3B:7E:9A:4C:3B:AE
Certificate issuer:       /CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575
Certificate serial:       010D0C9F4328584F89A847DB5D816A11651319B0
Authority key identifier: DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/f05177d7-1d41-3211-b25d-3ec9ce74d857.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     20012
IP address blocks:        23.154.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:47:db:5d:81:6a:11:65:13:19:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=75860cf5-203b-4904-9b3e-5d4739e677ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:63:a0:bb:fe:34:d7:52:58:b0:82:fd:b7:60:
                    8b:35:ea:cd:37:4d:09:47:79:76:b7:d0:c6:8c:6e:
                    0a:64:dd:5d:bd:4d:27:49:83:77:43:fc:30:d3:85:
                    8b:9c:35:85:ff:bb:85:d5:22:56:f2:50:95:0f:f3:
                    91:bb:1e:94:dd:29:27:2e:8f:3e:42:c5:18:24:53:
                    73:71:34:87:9c:28:8b:4b:1b:0b:98:84:0d:24:31:
                    1d:a6:08:0b:83:ad:6c:35:fc:00:08:44:aa:a2:c8:
                    71:34:82:03:67:78:99:70:5d:a4:6f:76:f4:bc:ff:
                    60:da:ad:8d:03:23:a5:3c:ad:be:82:d5:f6:14:8c:
                    ae:cb:f3:a0:9e:9d:31:29:d1:31:63:16:75:1b:b1:
                    c4:06:a6:f1:fa:f0:96:22:0d:cd:33:ca:a1:66:83:
                    e0:ac:62:d5:da:dd:19:c3:65:40:5a:02:12:49:8a:
                    fe:5c:9b:c8:db:f4:37:93:7d:60:0f:31:7f:72:28:
                    16:5b:30:35:62:aa:96:62:4c:39:ee:5e:40:9f:a7:
                    2f:5c:7a:8a:5e:89:a9:59:b3:f8:cf:5c:b2:f9:cb:
                    27:37:ba:7c:b6:81:e3:08:fc:e9:ed:c0:46:a8:f9:
                    17:44:17:3f:c0:0e:77:3f:e8:be:e3:e3:da:bf:95:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0A:4B:18:85:A0:AC:76:23:64:1D:1F:9C:AE:3B:7E:9A:4C:3B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/f05177d7-1d41-3211-b25d-3ec9ce74d857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl

            X509v3 Authority Key Identifier:
                keyid:DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:3f:9a:cb:5b:5a:1e:3f:39:4e:e6:1a:c5:36:f3:ce:b0:
         d5:de:e6:ed:d8:26:4b:bf:6d:e9:bb:18:09:97:33:fa:63:0a:
         16:41:76:81:41:03:df:72:62:d4:99:13:87:c9:b5:26:01:72:
         c2:56:91:81:5b:c7:64:a4:cf:24:47:4a:9d:15:de:27:11:59:
         d5:a5:4d:0b:ae:23:e2:24:af:9c:0f:69:5b:16:4a:0e:14:66:
         25:14:c2:e1:23:ad:e4:58:31:49:aa:0e:56:62:c3:c1:c8:03:
         0c:b6:89:72:dc:fd:94:dd:a5:97:e8:05:1f:06:a6:7d:03:fe:
         6b:a7:1b:ed:7a:67:4a:ba:d0:83:db:b4:df:af:0c:37:59:46:
         34:69:22:c3:3c:c9:3a:e8:3b:bb:19:33:bf:fe:b4:71:3c:8e:
         ca:f0:0c:fd:95:f6:10:6a:56:26:ea:c4:3a:6f:ba:bd:25:19:
         26:e2:4c:c5:a5:09:a8:20:45:a1:04:c8:16:4d:d5:7d:69:db:
         2b:e7:40:c7:3d:ec:ba:41:f5:8b:e7:2d:4d:44:72:29:65:9f:
         57:91:79:b9:ae:5b:af:77:f7:5c:d4:6d:be:08:94:79:b2:8f:
         81:16:a5:b7:d9:89:77:54:43:84:67:57:da:2c:2b:75:bb:9c:
         95:85:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:51:46 2026 by rpki-client