Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/827da7e7-f921-30fd-b21b-0d2defde3abd.roa
File:                     827da7e7-f921-30fd-b21b-0d2defde3abd.roa (raw, json)
Hash identifier:          nGUBw0HEEfzXIM47WSdFvZZZIhlmZA+tqQtRlaX1b1A=
Subject key identifier:   22:6E:4E:82:36:F3:96:88:21:2D:89:86:44:54:7A:27:3D:D2:70:76
Certificate issuer:       /CN=377844c3-b45b-4bca-8728-7590c6f21007
Certificate serial:       010D0C9F4328584F43DD7C2AD5C18BE879B366C8
Authority key identifier: BC:2E:C7:FB:B7:F8:6C:EE:0B:60:B6:84:F0:E8:95:91:D3:29:30:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/827da7e7-f921-30fd-b21b-0d2defde3abd.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     7361
IP address blocks:        23.155.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/377844c3-b45b-4bca-8728-7590c6f21007.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/377844c3-b45b-4bca-8728-7590c6f21007.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:7c:2a:d5:c1:8b:e8:79:b3:66:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377844c3-b45b-4bca-8728-7590c6f21007
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=15162224-8053-43b8-b3c2-ed90ebb982b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:93:fd:37:40:fd:6d:72:da:5e:aa:d2:d7:
                    cb:cb:af:47:d3:a0:67:2c:e4:76:ac:f9:27:6e:7d:
                    0f:46:cd:46:48:62:2c:04:88:35:e7:0d:d9:a2:dd:
                    b5:bb:56:ed:7d:e7:68:53:88:26:26:c1:2d:2a:13:
                    49:c9:46:8b:ea:ed:ab:d2:1b:11:f0:94:4b:88:76:
                    d3:ec:2c:71:9d:f9:ba:c1:2a:37:75:31:c9:b1:b5:
                    03:dd:8c:54:92:d7:e7:84:e7:90:6e:6f:6e:75:30:
                    fc:f0:cf:35:91:ee:e9:8a:e5:ea:d2:35:20:e0:57:
                    85:59:c8:fb:34:d3:74:04:a9:7b:4d:fc:9d:80:32:
                    24:e5:c5:69:5d:4c:57:8b:94:64:d7:3b:f1:d7:57:
                    08:1e:3d:35:b1:3f:a7:59:c6:23:9b:e5:8f:0e:50:
                    60:6b:8d:a5:15:0d:a4:90:6a:46:2b:c5:ae:f3:f1:
                    9f:57:a8:d7:9e:44:fe:ae:a8:50:43:70:f4:8b:3b:
                    5e:94:c9:56:d7:99:82:41:15:33:64:be:d7:79:0d:
                    cb:e6:30:37:3b:0c:69:1e:0c:29:8a:65:e6:94:bd:
                    b6:4e:b8:f2:32:02:f4:88:f5:69:77:17:ae:4f:b9:
                    3c:e0:4e:29:99:2d:02:13:f3:fb:14:f7:5d:73:f2:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6E:4E:82:36:F3:96:88:21:2D:89:86:44:54:7A:27:3D:D2:70:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/827da7e7-f921-30fd-b21b-0d2defde3abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/377844c3-b45b-4bca-8728-7590c6f21007.crl

            X509v3 Authority Key Identifier:
                keyid:BC:2E:C7:FB:B7:F8:6C:EE:0B:60:B6:84:F0:E8:95:91:D3:29:30:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:26:27:9c:ef:23:49:a4:53:3d:42:ae:d9:8e:3c:fb:18:f0:
         e8:f3:73:32:c1:70:d1:de:ce:29:c9:52:db:a4:06:be:b2:71:
         06:1e:53:2b:f3:60:54:05:65:4c:44:e8:3b:95:31:3c:30:89:
         23:45:b3:64:21:60:9f:4e:8d:ee:c2:c6:9f:9d:06:a5:54:d0:
         05:2f:2b:77:64:d6:a6:65:7b:ef:b1:ab:b6:8a:39:78:6c:56:
         ca:29:88:0d:79:ba:f6:ff:54:c9:2b:2e:b2:74:d9:e6:5e:a9:
         85:89:64:a8:84:24:a4:19:6e:73:43:3c:8c:dd:d8:03:47:b8:
         bf:43:76:9b:32:01:3b:52:11:72:50:0d:06:be:21:f3:6e:21:
         5d:06:60:b6:87:b2:3e:d3:45:7a:f3:39:6d:62:ca:0b:cb:b2:
         6f:ad:89:33:0c:f2:b9:57:80:f1:a5:13:50:b4:23:b9:7f:37:
         de:51:8c:3e:98:ad:45:77:53:33:f0:5e:00:12:b0:78:58:e1:
         18:d5:68:34:9f:13:c6:c1:ea:55:3a:2c:07:9a:80:70:01:4e:
         fe:1d:ff:a4:6f:87:ec:48:e7:84:1d:19:8b:e5:3e:7e:a0:55:
         95:65:a2:61:ee:ab:3e:35:7d:8b:7d:db:82:28:98:bc:3c:9f:
         d8:5f:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:22:56 2026 by rpki-client