Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/35be7af3-548e-3a1a-ad3a-98f465861d98.roa
File:                     35be7af3-548e-3a1a-ad3a-98f465861d98.roa (raw, json)
Hash identifier:          B0eYc5FRkYCFcAoPX9CwKoevuUyh3NeuYAySJxunx2E=
Subject key identifier:   59:16:90:7C:5F:89:36:C1:4C:36:37:F5:21:B1:06:04:87:19:EF:EB
Certificate issuer:       /CN=4c4e2949-612c-4663-8f95-3bdae2086fcd
Certificate serial:       010D0C9F4328584F7E7D9E548A8BF82669FA5580
Authority key identifier: 7C:19:0D:13:69:9A:09:1B:0F:EA:9B:FD:DF:80:B4:76:D2:44:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/35be7af3-548e-3a1a-ad3a-98f465861d98.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     400468
IP address blocks:        23.144.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:9e:54:8a:8b:f8:26:69:fa:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4e2949-612c-4663-8f95-3bdae2086fcd
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=a9b4769c-764e-416f-871e-ce14a64c521e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:dd:1c:78:f7:a6:64:44:73:63:33:3d:62:
                    26:b7:d7:f8:5c:d5:c3:7a:ef:6a:b2:a8:af:19:53:
                    bd:a9:3f:7b:be:f4:3e:ab:7e:73:ef:a2:7a:b3:dd:
                    e7:24:bd:20:55:b0:fc:ad:68:bf:48:59:5f:5a:d0:
                    81:4b:61:5f:44:88:fb:8d:f4:f7:df:e5:6c:05:29:
                    35:be:a1:1d:f6:59:75:bc:fe:0d:93:07:7f:f4:b8:
                    f0:4f:5d:2b:c1:dc:57:97:d9:ae:20:30:bb:16:68:
                    a1:a1:6d:99:f9:db:37:22:d9:36:62:b1:47:49:60:
                    d8:2b:20:bb:65:02:54:77:12:e5:a8:3a:a0:71:0b:
                    8e:52:36:8c:88:b6:f8:95:c1:d9:89:2e:8b:74:52:
                    cc:e3:9d:38:fa:44:f7:c9:4f:d2:e0:dc:29:df:8c:
                    58:37:3c:87:3c:c7:e3:4f:28:21:e5:7b:07:4e:11:
                    7d:97:30:09:8b:ab:f8:9e:36:22:1e:99:e2:07:38:
                    e8:69:9c:ff:07:47:f8:eb:ee:98:79:65:7f:b4:3d:
                    65:1b:f8:c0:45:d8:f1:e7:ef:21:4a:5e:7f:5f:fd:
                    d9:53:83:de:43:b6:73:16:ac:04:39:77:16:aa:66:
                    78:ef:65:9c:e9:c2:40:67:e0:1c:42:86:4c:80:41:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:16:90:7C:5F:89:36:C1:4C:36:37:F5:21:B1:06:04:87:19:EF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/35be7af3-548e-3a1a-ad3a-98f465861d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd/4c4e2949-612c-4663-8f95-3bdae2086fcd.crl

            X509v3 Authority Key Identifier:
                keyid:7C:19:0D:13:69:9A:09:1B:0F:EA:9B:FD:DF:80:B4:76:D2:44:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4c4e2949-612c-4663-8f95-3bdae2086fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:de:a7:b0:a2:af:77:26:fc:a5:7e:a6:17:bb:97:3b:f4:
         13:fa:8d:18:0d:01:79:6c:85:81:fe:fa:cb:c2:f7:ab:da:4e:
         77:37:9e:66:34:e1:ab:b5:26:b6:8e:45:be:77:fe:84:a1:02:
         29:dd:5b:62:b5:11:bb:9f:b3:b4:fb:0c:e2:41:cf:2b:91:c0:
         88:79:a4:eb:11:11:a7:27:25:e6:7e:58:94:7a:d6:4e:8d:ac:
         ca:5d:ee:e1:e9:52:b6:ec:36:b2:46:5a:25:d8:7b:88:ee:27:
         40:c2:37:4b:da:de:0f:92:bf:04:4b:c4:70:8d:84:50:72:77:
         ce:d8:c7:1d:ae:bf:4a:28:50:05:75:23:f4:42:9f:92:41:62:
         ac:0b:33:9e:72:01:f3:be:74:6d:1c:79:a5:f0:0a:d5:41:1b:
         5c:1b:af:84:28:57:c5:29:16:78:be:a2:ec:d2:4b:68:09:48:
         cc:56:fe:1e:59:e6:7d:9a:84:41:d5:b6:7d:ef:4c:79:5a:39:
         9d:58:8c:7b:13:7f:c4:72:0f:8f:98:df:31:f5:0d:e5:8b:e1:
         1a:76:c4:d4:7c:85:fc:e8:9f:3f:94:d3:1d:f8:fa:72:5e:94:
         13:4f:f0:63:8a:a4:70:32:18:98:a8:c8:be:bd:df:aa:4e:c4:
         b3:23:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:56 2026 by rpki-client