Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/d3870104-ecd4-34c3-bf3b-4835fca0ca83.roa
File:                     d3870104-ecd4-34c3-bf3b-4835fca0ca83.roa (raw, json)
Hash identifier:          qgFEZOFaqRl8pLziQXXyKKetao86ygAmUSyIS+08t7w=
Subject key identifier:   20:89:03:4B:30:59:14:E8:4E:A9:5E:FD:64:42:61:7A:0C:54:D3:BC
Certificate issuer:       /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214
Certificate serial:       010D0C9F4328584F7E7D9C6488C749E2DA79C780
Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/d3870104-ecd4-34c3-bf3b-4835fca0ca83.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     9304
IP address blocks:        23.145.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:9c:64:88:c7:49:e2:da:79:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=18413f2e-fe54-41fc-88e1-1c08ed704764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:dc:1b:53:4a:1b:64:d4:85:c5:a6:05:87:
                    bb:68:4b:ab:30:c6:2b:87:f1:c0:4e:28:1b:a4:28:
                    f1:ce:bd:fe:27:5e:d1:09:c8:ba:2f:37:1a:c2:f6:
                    ff:7a:e2:8b:90:55:1f:ed:79:92:79:e8:fa:58:76:
                    7a:b0:f3:a9:aa:19:3b:d9:d4:bf:09:21:bd:02:8e:
                    f8:30:7d:15:5c:bd:d7:36:0a:0c:b7:d0:86:7d:cd:
                    66:99:5f:17:09:1c:8e:4f:41:e0:58:6a:52:7e:c1:
                    e8:51:cc:8c:b4:56:e4:21:ef:c2:e1:3a:11:8a:2c:
                    bc:0f:e2:d3:3a:2f:fc:82:fa:81:bf:a8:12:6d:f9:
                    5f:8d:19:74:29:e8:1a:48:cf:7d:8d:40:a4:9e:e6:
                    ea:2f:28:c7:85:33:9a:5a:32:0f:14:8d:f1:e6:85:
                    f5:04:36:b5:78:e9:97:10:85:f8:eb:48:9a:a7:60:
                    e9:37:18:cc:fa:b2:2a:84:ab:52:b7:6e:65:9d:60:
                    d2:5e:2c:b3:cc:b5:a3:a8:c3:e3:cf:cf:0a:c8:ab:
                    8d:e0:9e:52:9a:bd:f6:e8:bf:8a:4d:ba:5e:88:64:
                    26:4d:29:a0:22:c1:b7:a5:74:69:0e:54:46:bc:2d:
                    e5:ea:5a:a6:5e:97:3e:73:48:c8:ca:dd:e7:fe:96:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:89:03:4B:30:59:14:E8:4E:A9:5E:FD:64:42:61:7A:0C:54:D3:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/d3870104-ecd4-34c3-bf3b-4835fca0ca83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl

            X509v3 Authority Key Identifier:
                keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:0d:d5:12:a9:6f:6e:4d:01:7b:cd:09:e6:1f:c7:54:64:
         44:8f:86:17:fc:f4:61:38:2a:01:d1:e9:70:e5:90:14:f8:9b:
         af:8b:a2:5d:83:39:76:5e:3b:0f:31:9d:de:78:f0:8d:1b:df:
         de:b0:df:9e:91:9f:66:71:9c:8b:e4:5f:4e:c7:7b:48:18:7f:
         8f:86:f0:c1:dd:8d:8e:f6:a6:de:c9:0b:65:3d:2f:ea:f8:86:
         94:7b:d8:34:a4:38:d5:4d:1d:54:d6:ae:a1:4d:d3:6a:0a:bd:
         18:67:3e:30:9b:63:68:df:01:71:d4:ee:2a:d4:9b:38:e3:bd:
         ba:18:73:2e:ac:87:d4:3b:64:2b:a3:25:9f:42:25:0f:83:1b:
         69:7e:21:5c:67:d9:89:7c:8a:50:5f:20:90:2a:84:f1:77:26:
         1c:53:a8:93:23:01:11:fa:55:1e:f2:40:6f:96:55:e8:72:18:
         08:56:45:dc:12:14:61:b8:98:0a:6f:c7:10:42:9f:5f:b9:27:
         66:b7:6a:ce:b9:c8:a2:2e:7c:9f:a0:6f:a4:4d:08:9f:f2:45:
         4e:c7:46:9a:3d:52:6a:9c:e4:dd:24:cb:4c:3d:ea:54:6a:e6:
         ad:9f:a1:e8:51:db:4f:a8:36:6c:98:62:6b:b6:56:d7:02:c2:
         aa:23:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:54 2026 by rpki-client