Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/37278ac2-f564-36c5-b6ec-f5a91309a8d3.roa
File:                     37278ac2-f564-36c5-b6ec-f5a91309a8d3.roa (raw, json)
Hash identifier:          zlD1xTuUZ10LBGqks/g8hvf5FNql5bTJizO+4pO/E0E=
Subject key identifier:   04:22:CD:09:73:DD:C8:FA:1B:9D:D1:01:68:11:CA:89:5E:0D:24:02
Certificate issuer:       /CN=eebd57d4-bdbb-4203-975d-94b32833e8c7
Certificate serial:       010D0C9F4328584F130244C775047AC589533080
Authority key identifier: 80:FE:92:AB:B8:62:45:0A:82:F6:C0:A2:93:0D:4E:92:4D:E4:23:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/37278ac2-f564-36c5-b6ec-f5a91309a8d3.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     32267
IP address blocks:        23.184.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:44:c7:75:04:7a:c5:89:53:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebd57d4-bdbb-4203-975d-94b32833e8c7
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=ab27e894-c6ff-4710-b205-affd999313c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:8a:18:27:15:a4:f2:b8:6b:3d:ab:c6:a2:
                    cd:e7:da:0b:88:04:b7:97:c8:fc:b3:95:c0:71:d6:
                    0e:f8:d0:0f:21:55:fb:0b:7b:e6:02:68:9f:37:60:
                    dc:59:3e:32:13:8c:1a:bc:f4:25:96:d3:15:a7:68:
                    1f:3f:3a:45:0d:f8:47:37:d2:3b:e6:1a:52:b7:cc:
                    94:91:5b:e2:3d:1b:92:4c:61:88:a7:0d:af:98:e3:
                    95:03:a8:86:47:05:85:1b:9d:bf:7f:1d:b8:42:5a:
                    bf:fa:9f:97:6f:cb:04:7a:f2:e5:12:00:db:b7:97:
                    00:6f:60:e6:3e:3a:82:89:cf:2a:2e:8f:45:45:bc:
                    87:cb:41:03:ab:20:52:f1:ae:6d:75:46:da:6a:3f:
                    44:76:ec:16:2c:b7:ac:24:e4:24:e6:02:4d:46:9d:
                    46:fc:6a:fe:b7:74:5e:5c:94:d5:b2:06:7b:b7:5b:
                    ae:c9:7d:8c:f8:09:c7:91:00:6e:d8:e8:01:0f:ba:
                    10:0a:8a:9e:fa:26:fe:aa:3a:ea:bb:3c:85:11:c4:
                    40:2c:6f:fb:cd:e6:1a:d8:22:75:2c:4d:73:90:bb:
                    e9:6f:7b:bc:01:88:3b:ad:8c:37:5d:67:d0:c9:4b:
                    a0:34:4b:b3:85:a7:89:8d:f2:7a:8c:b0:33:9e:07:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:22:CD:09:73:DD:C8:FA:1B:9D:D1:01:68:11:CA:89:5E:0D:24:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/37278ac2-f564-36c5-b6ec-f5a91309a8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.crl

            X509v3 Authority Key Identifier:
                keyid:80:FE:92:AB:B8:62:45:0A:82:F6:C0:A2:93:0D:4E:92:4D:E4:23:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:f8:8c:db:12:0c:3e:34:ea:a2:cb:d9:45:ba:63:c2:75:
         1b:86:eb:d0:0e:96:5c:41:64:8e:9b:52:aa:7a:47:be:8b:7c:
         48:0d:de:91:bc:ad:88:18:4a:59:a5:c6:9c:3a:65:1c:c2:68:
         f9:ad:c1:86:0a:9f:f4:91:29:4c:7f:46:2a:5d:25:83:62:c3:
         44:cc:e8:4c:ce:d2:4b:be:5d:88:1d:4d:a6:09:86:ca:3f:9f:
         53:95:45:d2:ce:9c:c4:77:5e:10:7d:97:9e:a3:a4:f7:de:7c:
         0b:a1:3f:20:18:e8:c4:9e:9b:ec:a7:0c:d3:4c:cc:74:e0:5c:
         11:65:7b:c5:88:5e:92:4b:f1:ed:66:91:02:b6:23:b0:84:c4:
         86:4b:43:89:e0:e1:81:47:22:4c:0e:28:47:f4:91:56:8f:dc:
         53:fd:87:63:c5:76:cd:f8:17:85:42:e3:1a:ec:33:56:2f:49:
         6d:66:0c:5f:a1:d5:69:57:97:05:bb:34:d2:e7:0b:45:c9:ff:
         2a:10:64:b6:35:6e:8a:4e:15:55:40:57:75:a8:68:1e:2e:3b:
         dd:55:47:aa:50:d4:3d:9f:ce:f3:a8:7d:ee:a7:48:e6:18:ee:
         b8:57:6f:05:bd:5d:4c:70:b3:65:f8:a7:83:08:8a:a7:96:12:
         00:85:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:05:52 2026 by rpki-client