Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/4d1fafb7-5dfc-32ae-86f0-28d558be92ae.roa
File:                     4d1fafb7-5dfc-32ae-86f0-28d558be92ae.roa (raw, json)
Hash identifier:          Ntpu+x+vnem5d8I9GsCNeopJsbcFYYklXXinmfu0VCE=
Subject key identifier:   94:C6:9E:6D:6A:5B:AC:36:A4:CD:69:C6:75:F0:AC:F1:F3:02:9F:3F
Certificate issuer:       /CN=f87277fc-cecb-432c-a012-437d95808fb7
Certificate serial:       010D0C9F4328584EB9AC533FE03E18232B80C280
Authority key identifier: 34:9C:3C:68:93:5A:AE:BC:58:84:D1:D7:AA:81:FC:D9:07:D0:94:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/4d1fafb7-5dfc-32ae-86f0-28d558be92ae.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     32205
IP address blocks:        23.154.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/f87277fc-cecb-432c-a012-437d95808fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/f87277fc-cecb-432c-a012-437d95808fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:53:3f:e0:3e:18:23:2b:80:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87277fc-cecb-432c-a012-437d95808fb7
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=c48075ac-5cd6-4789-91d6-358ad9670bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:ed:b3:3c:e1:1a:d2:78:bc:17:6f:3f:77:
                    ef:fd:60:af:aa:07:9d:c6:99:76:21:05:54:e5:40:
                    5e:a0:d4:0a:31:8a:22:26:24:c3:2b:21:56:5f:64:
                    b1:d3:1b:d8:a9:56:44:5b:e7:68:7f:74:7f:d2:58:
                    29:2a:6c:e3:c5:ca:2d:0d:b8:29:75:24:e8:3d:4c:
                    ee:fa:df:b6:9c:72:2b:9a:03:16:a8:eb:8e:33:3c:
                    0d:e7:d3:67:9c:84:77:68:c0:ff:16:9f:d8:90:18:
                    8d:d4:29:bb:50:25:41:52:28:07:22:59:48:4a:58:
                    2f:ae:8c:f1:9b:11:97:a5:3b:28:c1:46:92:5d:29:
                    f7:65:06:11:13:11:fd:7e:c4:62:4e:98:d9:fb:2a:
                    30:53:62:43:9d:1c:33:09:60:1e:e1:65:a7:cc:7d:
                    ed:7b:0d:5e:97:9a:9c:3e:d5:38:24:50:7d:fe:7b:
                    eb:ce:20:8a:d6:a5:8a:f8:38:7a:97:f3:3d:8f:d0:
                    0c:94:f9:dd:a1:10:ed:0f:0b:0e:5a:9b:75:95:cd:
                    ab:fb:b4:11:58:c5:f9:40:f3:57:af:4b:e7:c0:68:
                    1a:46:e6:d3:3a:da:38:7b:20:21:41:4f:bf:3d:32:
                    1c:f6:41:cb:32:32:1d:e8:58:25:a6:fa:25:d2:7b:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:9E:6D:6A:5B:AC:36:A4:CD:69:C6:75:F0:AC:F1:F3:02:9F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/4d1fafb7-5dfc-32ae-86f0-28d558be92ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/f87277fc-cecb-432c-a012-437d95808fb7.crl

            X509v3 Authority Key Identifier:
                keyid:34:9C:3C:68:93:5A:AE:BC:58:84:D1:D7:AA:81:FC:D9:07:D0:94:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:08:2a:2d:22:ec:ec:fe:89:e7:d7:55:77:31:60:1e:dd:5d:
         d1:d8:e9:4c:3f:b9:e5:76:e2:88:0a:c9:7a:96:1a:fc:c8:51:
         9e:3f:b5:b3:c7:4e:2f:39:c5:73:a7:ce:33:5b:57:38:ca:a0:
         c5:dc:83:c8:cb:7f:ec:a0:16:71:61:3f:8c:6d:0f:25:89:7f:
         f4:50:e8:20:c8:c4:3f:d8:63:f3:3d:4b:ea:3e:1f:63:dd:7b:
         c3:05:56:32:b0:a3:9f:8f:4d:20:0d:28:16:13:e4:c3:1a:03:
         db:4e:ab:cc:f5:74:4d:31:ca:c2:ac:97:87:96:f6:f8:a9:aa:
         d8:d1:db:56:53:86:b2:cd:d6:3e:18:9b:b5:d6:2f:24:16:ad:
         6b:84:a5:ae:fa:6c:8a:4d:ca:eb:e7:2f:65:87:7d:5a:0e:af:
         f0:8d:34:49:4b:30:25:35:52:5b:c5:35:20:d1:43:91:17:9d:
         8b:f5:ed:52:13:37:ef:19:d9:a7:ff:28:77:c1:78:9e:bc:30:
         42:28:2b:ad:85:1b:8a:b5:3d:cb:2d:91:e1:58:b7:88:5c:05:
         92:04:38:43:1d:d5:d5:96:ab:f0:68:f0:94:2f:23:a2:95:e4:
         c2:51:57:0c:8d:36:6e:2e:3b:96:3d:e2:bb:7f:56:42:e3:63:
         f2:d1:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:25 2026 by rpki-client