Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/827f07b0-f3d1-3bca-bc21-59925be858fd.roa
File:                     827f07b0-f3d1-3bca-bc21-59925be858fd.roa (raw, json)
Hash identifier:          ndU075L4X3hGD/HeYLVDxfD+jyGPfrsQqTKXmLlS/Yo=
Subject key identifier:   74:49:7F:57:91:B0:77:C4:31:76:62:D8:44:3D:F1:41:C8:83:0E:1F
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584F4277FB9CD7A9A62E6C32BD20
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/827f07b0-f3d1-3bca-bc21-59925be858fd.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        23.239.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:fb:9c:d7:a9:a6:2e:6c:32:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=abbd3edc-a5ce-4293-932b-4255b95eb2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:0c:4e:e6:cf:06:b8:12:30:95:3d:1b:0f:
                    73:44:1f:69:10:2f:02:3e:4a:7d:68:3e:33:19:f7:
                    5f:2d:50:ec:05:c4:3c:95:b2:7d:be:6a:0c:10:f5:
                    03:74:cd:ed:b8:e9:c5:2e:7b:1e:d7:08:d5:bf:f4:
                    48:fd:4e:43:a4:ac:1e:f6:fb:c2:22:f7:3a:5a:ad:
                    ee:40:44:e4:40:8f:04:9b:9e:84:f3:0a:41:aa:21:
                    7f:4c:c4:0c:86:9d:7f:56:34:75:0a:3d:d5:ef:9f:
                    24:f5:a6:0a:95:59:6c:2a:8b:26:28:b0:02:01:68:
                    7a:99:9d:52:57:5c:a8:05:5f:cd:bd:23:d3:4f:4a:
                    0a:a7:9c:8f:93:54:4f:95:8f:34:8f:da:6d:16:f5:
                    81:02:e9:2b:17:8f:bf:31:10:5e:be:82:14:b7:d0:
                    55:43:19:cb:0a:28:6f:76:9b:4d:36:0a:db:90:5b:
                    2a:b2:c2:5c:87:4b:53:1f:da:44:ec:91:06:63:6b:
                    e9:fb:05:3f:b0:28:83:5d:ca:e2:24:1a:2d:9e:d0:
                    ef:37:fd:57:12:24:83:c7:96:0f:f4:09:a0:ec:f6:
                    56:df:99:a2:31:2e:e5:44:ed:15:62:03:ae:3a:6d:
                    07:95:15:ff:3d:5e:a1:ce:4e:43:9a:4c:0e:1c:6f:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:49:7F:57:91:B0:77:C4:31:76:62:D8:44:3D:F1:41:C8:83:0E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/827f07b0-f3d1-3bca-bc21-59925be858fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:86:1d:74:7d:98:a8:b6:06:fb:75:4f:23:38:f0:27:45:
         b0:7e:af:08:c6:dd:f7:66:2f:45:2c:69:16:8b:f8:3b:84:ec:
         89:88:43:80:11:48:f4:0d:fa:d8:c9:d7:11:f1:6a:dd:93:c0:
         29:e4:da:95:4b:3d:c9:fc:16:c1:98:eb:4b:1b:0f:75:e1:fb:
         0c:da:c4:ab:78:9f:07:45:89:f6:03:c5:bb:14:7d:ab:7e:19:
         2e:e7:61:ba:83:c4:cf:c9:d3:eb:bc:fa:61:e3:c5:68:ef:2c:
         6e:ab:a4:c0:76:57:66:f3:d3:17:ef:10:f4:72:50:8f:c0:8a:
         25:c0:13:40:23:dd:0f:e1:f1:4d:fe:37:91:bb:c2:69:ab:5d:
         58:4c:ca:b9:cd:a0:24:d5:34:1c:ed:37:85:80:fb:48:a7:03:
         ed:a4:3c:11:b8:c2:e3:07:4c:08:e3:9f:49:c0:6a:93:c3:23:
         10:b8:98:67:f0:5b:a0:91:46:03:c8:0c:0a:a7:81:1a:ce:af:
         c1:a2:b6:fd:ed:32:7f:4d:66:df:88:49:77:c6:b6:7f:65:31:
         72:ca:84:b9:b2:3b:52:d6:08:31:37:ec:d0:8b:08:25:79:57:
         d2:af:56:64:79:81:82:75:86:ec:48:ff:ae:30:85:18:4b:5f:
         2e:eb:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 13:30:47 2026 by rpki-client