Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa
File:                     e397c739-b478-394f-ae21-89fd0af584d8.roa (raw, json)
Hash identifier:          3+cjq+DkKxviwMrErM/S/IzQ0y7YGQhZQj8iZztsGxg=
Subject key identifier:   0B:48:59:40:ED:63:22:B2:F8:81:7D:89:74:AF:DD:33:4A:4E:59:16
Certificate issuer:       /CN=0c4c7001-7459-4ca5-93d2-88612666a768
Certificate serial:       010D0C9F4328584ECD37267D27C6E51DC94043E0
Authority key identifier: 56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     16925
IP address blocks:        23.149.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:26:7d:27:c6:e5:1d:c9:40:43:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4c7001-7459-4ca5-93d2-88612666a768
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=27a33683-ac9e-4894-bc6c-42242f0f2071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ab:8a:29:e6:6c:39:f3:0b:1f:e1:8b:ee:9b:
                    05:4f:7a:3f:85:f2:08:a6:3c:3d:d0:09:77:e6:ef:
                    ff:4b:04:56:6f:b6:33:35:87:bc:d1:01:e2:8c:34:
                    8e:d3:35:f6:45:53:db:1d:55:99:21:b5:52:ed:27:
                    38:7a:8c:3f:a7:ac:7c:55:32:38:6f:e5:74:35:da:
                    40:0a:5e:a4:57:73:ba:18:6c:a5:19:fc:f6:56:da:
                    64:de:7a:6b:7f:81:07:52:57:94:b6:5b:c1:bc:22:
                    ac:c1:ed:4f:98:67:06:40:36:15:80:24:05:7e:d1:
                    9a:19:5f:4f:7c:93:a3:19:6c:4d:d1:61:d6:3f:e6:
                    05:52:b8:8a:34:ca:f4:d1:6f:21:f3:29:0b:28:d2:
                    29:3f:0c:20:0b:a8:e4:1c:8c:59:30:4a:d8:1a:0f:
                    68:8b:ea:5e:34:5c:c7:47:ad:cd:18:83:f7:1a:ff:
                    08:5b:b5:af:33:20:93:91:e8:0b:96:a6:8f:71:c9:
                    51:93:3c:7d:ad:10:48:44:60:f9:7b:2c:b5:64:72:
                    72:4d:9b:1a:14:6e:54:5b:26:74:9d:d9:24:87:a0:
                    78:98:33:1c:b4:fb:1a:91:94:e5:9c:4d:b3:5e:2d:
                    a8:ad:46:da:d8:d0:da:da:02:49:38:a0:46:0e:9a:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:48:59:40:ED:63:22:B2:F8:81:7D:89:74:AF:DD:33:4A:4E:59:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/e397c739-b478-394f-ae21-89fd0af584d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768/0c4c7001-7459-4ca5-93d2-88612666a768.crl

            X509v3 Authority Key Identifier:
                keyid:56:CD:66:92:09:2D:4C:45:34:F8:56:58:5A:20:ED:02:F3:BE:39:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0c4c7001-7459-4ca5-93d2-88612666a768.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:39:ec:60:b8:3c:8c:8c:85:c0:ac:ac:fc:eb:9b:04:4b:
         0a:5b:b6:54:a0:6f:c5:04:53:75:87:12:c9:57:05:8e:ef:9a:
         2b:13:d9:76:78:f1:72:52:f1:d4:ad:ae:11:ce:3a:cc:3a:de:
         db:b5:b4:db:f3:0e:45:df:6d:e5:d4:53:66:39:d1:2c:44:86:
         90:c8:6c:d9:a5:8a:40:2a:b6:0d:3b:67:aa:e3:6c:bd:4c:57:
         dd:c2:65:9a:a4:7a:8b:cc:a6:a5:5a:53:56:5a:c4:a5:c7:79:
         d9:6f:cb:cd:95:77:5e:18:6a:1a:bf:d9:ca:e2:99:07:6e:26:
         82:b5:99:02:11:af:0d:e7:9d:47:fc:86:fc:10:46:98:79:8c:
         10:ea:f3:b9:b2:fc:b4:d5:34:d7:b1:b6:6e:0f:b4:e1:4c:e9:
         2f:06:26:e2:27:18:28:9f:5b:60:a1:5b:b0:33:37:be:06:b8:
         ba:65:7f:b3:4f:e3:63:a3:4d:7c:3f:7e:4d:73:0b:26:ec:d3:
         ec:0a:0e:f2:15:5f:88:2f:d4:f4:6b:0a:97:09:83:db:da:87:
         5c:00:d0:37:04:54:9a:9c:47:ed:cc:e6:45:b4:e5:35:99:52:
         14:43:78:f4:d3:67:58:ac:bc:9c:eb:c3:46:83:51:33:6b:85:
         ab:3f:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:02:36 2026 by rpki-client