Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
File:                     075439ad-b463-39da-bd19-5d02bddea01e.roa (raw, json)
Hash identifier:          9KDgL26KaElPDFlHfdBXWKzn8teWc+B95sTpIUgPF0Q=
Subject key identifier:   0B:E2:9E:4D:B7:5A:84:44:06:3A:61:8B:4B:33:09:26:78:96:6A:B3
Certificate issuer:       /CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
Certificate serial:       010D0C9F4328584F30527B69A1DEBD9186538340
Authority key identifier: 8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     212524
IP address blocks:        23.155.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7b:69:a1:de:bd:91:86:53:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=033f3ee2-ae21-432f-a8a6-694782d1646d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:3d:5f:e0:5d:71:f2:6d:64:c2:d5:ab:6e:
                    6a:1b:a6:40:1f:8d:b0:64:e4:bc:e5:c9:53:51:35:
                    b6:07:a4:cd:91:62:e3:6f:a0:51:e2:f9:a5:e9:bd:
                    b9:f9:ac:85:4d:12:19:ce:dc:00:ca:1a:a3:26:d0:
                    c4:3d:a6:c3:28:ef:61:fc:5c:f0:3a:df:c3:36:6e:
                    ab:39:97:3f:92:e7:0c:9c:29:18:53:2d:cd:36:ca:
                    8f:fc:57:be:e1:8c:e8:ea:b8:b4:c9:81:89:60:7d:
                    e5:27:b3:e3:90:2a:d0:ac:67:b4:be:c1:98:1f:fa:
                    5c:43:a2:9a:ed:5b:d9:6f:30:fa:db:e6:b4:a8:39:
                    b2:d7:f9:2b:fd:7d:ac:ab:f8:05:8b:09:37:eb:0e:
                    6d:de:64:68:70:ec:e2:74:05:55:a9:af:6f:aa:9c:
                    cb:34:c0:b9:c4:92:30:92:a3:af:fa:41:b0:40:cc:
                    83:12:13:cc:19:d2:5d:63:97:e2:73:d2:74:37:58:
                    6f:e2:16:27:a5:fa:26:0d:3f:dd:5e:a0:4f:ff:b0:
                    49:79:e3:e2:5a:f9:9c:76:ba:0f:0d:07:0a:88:cb:
                    ea:ff:f2:13:dd:a0:42:4e:82:7b:96:ad:ac:69:0d:
                    70:aa:0f:c7:c7:c6:23:7c:57:15:ea:de:d8:25:bb:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E2:9E:4D:B7:5A:84:44:06:3A:61:8B:4B:33:09:26:78:96:6A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl

            X509v3 Authority Key Identifier:
                keyid:8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e8:e6:bf:cb:5c:6d:62:f7:8c:59:a9:97:a5:38:c3:c2:54:f6:
         da:61:ed:3a:98:68:f0:80:71:fb:91:ec:32:a1:7e:cb:ea:80:
         18:bd:b8:00:c0:3c:7b:29:36:2b:af:a8:ff:63:6d:7f:56:91:
         09:a3:3d:f9:ec:a5:05:c2:40:8e:57:42:8e:a1:eb:62:e3:55:
         05:7a:67:2c:94:d2:61:11:59:aa:9c:09:75:0f:43:9f:10:cd:
         c1:0e:6d:57:8b:f1:ba:b3:4c:5c:f0:d3:2c:d0:8c:ea:e0:85:
         7b:ea:6b:74:7c:82:ec:4d:46:49:89:79:22:40:28:1d:9b:bc:
         fc:b2:6a:54:af:c7:68:0f:e7:71:bd:8c:7d:c9:45:6a:e3:4d:
         70:79:65:e7:e9:02:ac:b6:d4:52:e6:b0:ec:1f:5f:65:98:ef:
         f8:5d:7d:bd:f4:63:1d:2e:1d:23:39:2d:10:a5:23:84:7d:50:
         d8:53:95:24:3c:b8:00:2c:7f:1f:25:92:60:bd:b1:a0:42:1d:
         76:c4:25:10:4a:7b:d4:5b:9d:79:71:e4:3b:c9:12:16:e6:59:
         f3:b0:f1:aa:8d:07:f4:a2:2f:8c:77:fa:51:05:e7:30:22:9c:
         c9:83:a8:4c:32:84:cb:88:ec:da:dd:c6:82:fd:36:24:8b:32:
         d2:ea:2c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:34:11 2026 by rpki-client