Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/c46e5055-2fba-3a9b-9c8c-75f449241006.roa
File:                     c46e5055-2fba-3a9b-9c8c-75f449241006.roa (raw, json)
Hash identifier:          CzDDNiL6YKx4XCzBZQ7CpN5QfuO7NqoHfPTUzP9m02A=
Subject key identifier:   02:43:F0:B2:08:58:AB:1F:AE:3D:3A:8F:0F:BD:9B:E3:12:CE:7A:63
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584EFE12192260154239582C8800
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/c46e5055-2fba-3a9b-9c8c-75f449241006.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        23.179.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:19:22:60:15:42:39:58:2c:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=246ea252-57d3-4b12-b649-19dd83b2f738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:52:4d:12:43:24:77:7c:43:17:28:d0:3f:
                    f5:0f:f9:08:f2:76:bb:27:a9:43:38:40:1f:2e:eb:
                    b3:55:ec:e9:a6:43:3d:05:86:a3:39:34:03:16:f1:
                    ec:7b:8b:ff:25:24:d3:d3:64:31:cc:e8:60:ac:d1:
                    68:b9:a7:cd:15:85:2d:c6:db:d8:ec:ee:88:22:42:
                    70:75:83:92:7e:30:0e:6b:fa:46:c5:9d:e4:31:ee:
                    f8:a9:a7:0b:fe:7b:6c:bb:68:f3:92:43:3f:a1:c1:
                    0d:56:22:a7:33:38:b3:27:3b:93:de:4e:42:a1:3f:
                    0a:17:72:e2:d3:ad:a6:ba:b9:a3:55:c0:d5:47:97:
                    a8:02:20:4e:7b:57:f2:55:20:1f:84:ca:8e:4c:43:
                    d5:72:2e:db:6e:c9:53:b1:73:78:77:5d:fb:d7:31:
                    34:f7:cd:81:bf:77:91:07:01:ea:39:2d:18:eb:53:
                    38:34:52:08:a7:a5:ac:a1:67:e2:d4:08:5f:79:30:
                    d0:f7:dc:2e:36:e0:a8:fa:4a:6e:af:4a:cd:ef:f9:
                    50:17:93:f4:3d:c6:14:15:2c:7d:40:b9:96:31:97:
                    41:c4:47:51:dc:de:69:37:68:46:4a:ba:0e:ab:ff:
                    7c:1a:14:61:dd:99:1e:42:46:e5:db:13:df:f4:8e:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:43:F0:B2:08:58:AB:1F:AE:3D:3A:8F:0F:BD:9B:E3:12:CE:7A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/c46e5055-2fba-3a9b-9c8c-75f449241006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:5d:af:a0:8f:5a:b9:ff:ef:a7:7d:c8:70:44:d1:5f:cf:
         17:41:06:df:08:bb:3a:c7:1d:db:61:bc:9f:ed:e4:ee:61:25:
         57:80:1e:fc:a3:f3:fc:30:be:b5:11:04:d7:fd:9c:b9:23:7e:
         f7:10:0b:12:75:b3:63:b2:9b:7e:da:b9:fc:c9:0f:a8:c4:4f:
         1f:d1:18:38:b0:93:28:37:88:d6:43:67:a5:03:4c:7c:64:c9:
         91:ad:b6:5f:ac:23:06:f7:a5:c7:30:f0:f5:9c:31:78:b1:5c:
         8d:07:9a:99:7b:0b:12:d5:b6:1e:9e:fc:d6:4c:26:8b:de:56:
         08:29:4e:97:82:5b:14:9e:4f:71:14:12:1f:7f:ae:e5:5f:c0:
         15:fe:6b:e7:8d:b6:4e:69:69:ff:01:43:8d:3d:d2:b6:c7:ee:
         99:46:46:f2:62:12:cc:c3:01:41:6e:7a:29:e0:b2:fe:1a:75:
         27:33:7c:76:64:13:95:b3:44:2b:5b:33:62:19:8d:95:08:fa:
         1e:25:b2:e8:3e:e2:06:a8:ff:1e:39:13:f2:13:e4:e8:d2:58:
         bd:6a:9f:87:a9:2a:bc:18:33:6a:d2:cb:a3:43:3a:59:04:bf:
         1d:1a:aa:45:78:eb:25:7f:b4:ba:ab:1d:63:5e:70:11:73:3e:
         ee:b1:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:55:14 2026 by rpki-client