Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/1fe480f4-0a6c-36ee-93fe-87eea019f2a9.roa
File:                     1fe480f4-0a6c-36ee-93fe-87eea019f2a9.roa (raw, json)
Hash identifier:          TX22GX/YCN5LnPbBDRcg+4RAITw5WZTa207yS2yBxAE=
Subject key identifier:   37:E0:48:E0:A4:A8:BD:0B:D2:76:4C:78:09:0F:6C:BE:FB:74:00:E9
Certificate issuer:       /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
Certificate serial:       010D0C9F4328584F7B345C255FE3571D10FD7A70
Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/1fe480f4-0a6c-36ee-93fe-87eea019f2a9.roa
Signing time:             Mon 12 Oct 2026 20:45:23 +0000
ROA not before:           Mon 12 Oct 2026 20:45:23 +0000
ROA not after:            Sun 10 Jan 2027 21:45:23 +0000
asID:                     26337
IP address blocks:        23.91.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:34:5c:25:5f:e3:57:1d:10:fd:7a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
        Validity
            Not Before: Oct 12 20:45:23 2026 GMT
            Not After : Jan 10 21:45:23 2027 GMT
        Subject: CN=238021a0-4202-4c73-87ca-365188788e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:99:ff:de:1b:27:85:6b:28:82:10:1a:3d:
                    82:48:d0:90:9a:cf:9e:da:ef:1c:a1:f5:62:d0:39:
                    06:3c:59:b2:d2:20:93:b4:bf:7c:91:d4:f2:f0:08:
                    f2:8e:ac:fc:b5:aa:55:d8:ce:e6:a5:0c:d8:c0:cc:
                    e2:e5:79:65:90:d8:80:ce:10:af:d5:4c:9a:11:15:
                    7f:db:1b:42:b1:f1:72:29:7a:2b:63:0c:15:1f:39:
                    48:31:9f:d6:63:33:97:c9:5c:f7:4e:94:9d:62:1f:
                    f5:e9:71:1b:cc:94:19:28:48:c0:7b:55:bc:3c:62:
                    97:8a:f7:46:fa:bd:6e:89:d1:b2:a5:9d:42:8d:20:
                    a9:ea:23:bb:b6:f4:a3:7d:33:b4:09:91:7a:7c:eb:
                    2e:18:09:86:bb:1d:e7:f1:9a:77:61:c6:ed:f5:1c:
                    dd:3b:04:a6:f3:c0:d0:ed:29:a7:0b:61:f0:da:0a:
                    37:0c:89:ab:e8:e0:c6:e2:62:ca:d1:bc:39:38:04:
                    d2:0c:75:e8:67:5d:0f:75:cd:22:57:f6:45:80:a1:
                    4a:1e:1a:11:3d:db:28:ec:03:35:6c:d5:41:d3:37:
                    50:1d:41:7d:c3:fc:f0:18:ac:82:31:0b:4f:a4:cc:
                    5c:e4:61:86:fd:56:e0:87:bb:5f:c9:64:f7:b0:80:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:48:E0:A4:A8:BD:0B:D2:76:4C:78:09:0F:6C:BE:FB:74:00:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/1fe480f4-0a6c-36ee-93fe-87eea019f2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl

            X509v3 Authority Key Identifier:
                keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:24:a9:dc:ac:18:98:87:82:c2:c2:88:39:ae:df:69:db:
         2c:35:ae:77:04:65:d6:2b:61:1d:1f:eb:ff:f6:d2:cc:ce:8d:
         8b:8a:ad:f8:12:e2:d7:e3:51:bd:02:77:ca:f1:a4:f3:ae:06:
         43:44:1c:97:3a:5d:ba:ee:a6:14:89:7d:85:1c:b4:86:c5:36:
         22:83:1d:81:1d:2c:6e:b6:78:6e:0f:8f:d8:86:50:10:10:59:
         64:1a:92:dd:bf:d3:d8:21:ef:f3:6b:0b:80:fc:f8:7b:e2:14:
         f8:25:b6:2e:83:9c:10:8f:9f:2d:ae:27:e6:3f:86:1b:6b:9f:
         ed:86:9e:43:a8:a9:26:d6:a5:e0:ac:80:ad:4c:ea:0f:d4:6b:
         75:f4:b3:c7:84:10:04:80:c1:cf:4b:e0:a8:32:01:d1:5b:9b:
         51:5d:48:b4:f8:6c:06:a0:f6:c3:79:35:35:ee:1c:7a:be:a5:
         47:fc:ac:ad:37:14:24:14:47:60:07:fc:08:ff:23:f1:b6:21:
         af:b1:93:f7:f5:0a:ee:21:b2:3b:25:86:6d:fe:dc:c0:5e:0c:
         37:54:18:e0:31:f8:9f:17:9a:58:65:99:fc:fa:a6:3a:51:70:
         43:19:f9:b6:6e:9b:d7:0d:f4:5a:cc:14:1f:9c:56:16:df:7c:
         c7:cf:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:43 2026 by rpki-client