Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/4f6851cc-3ca2-3173-97fc-b30b6be690c2.roa
File:                     4f6851cc-3ca2-3173-97fc-b30b6be690c2.roa (raw, json)
Hash identifier:          lO5nFncsjZX83g5mNTx4+9ldNkypMAQ0zUYBN4jzlpU=
Subject key identifier:   9C:35:73:22:EE:0A:44:89:8B:06:C4:A9:D4:7C:47:B9:D5:2C:E9:D8
Certificate issuer:       /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
Certificate serial:       010D0C9F4328584F07D777BAD8D90C84032FFBC0
Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/4f6851cc-3ca2-3173-97fc-b30b6be690c2.roa
Signing time:             Tue 01 Sep 2026 13:00:12 +0000
ROA not before:           Tue 01 Sep 2026 13:00:12 +0000
ROA not after:            Mon 30 Nov 2026 14:00:12 +0000
asID:                     30041
IP address blocks:        23.176.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:d7:77:ba:d8:d9:0c:84:03:2f:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
        Validity
            Not Before: Sep  1 13:00:12 2026 GMT
            Not After : Nov 30 14:00:12 2026 GMT
        Subject: CN=f300125e-2700-429c-af61-6c963ef2f451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:1e:5c:1b:8e:f3:be:c7:e2:22:c9:45:37:
                    31:e1:07:2b:3c:19:49:b1:15:54:03:32:f8:bb:e1:
                    80:16:9f:8b:96:4c:df:78:4f:29:c8:20:64:09:92:
                    72:d3:d8:14:bc:1b:95:5a:8d:93:c1:11:1a:a6:4e:
                    c8:b4:53:29:8b:59:79:f2:50:14:5f:54:b2:db:ae:
                    d1:2e:a6:0f:17:41:df:c7:ef:9d:a9:e1:d7:60:ad:
                    c0:10:f6:9c:39:de:93:e3:c7:fb:c5:c5:49:e8:b3:
                    3b:e7:ee:a4:01:e1:9d:0d:d9:ae:3a:52:d6:33:5d:
                    4c:a7:59:c4:fa:c3:93:76:50:46:05:cf:11:16:71:
                    56:4b:4d:00:b4:b4:1e:20:46:dc:af:f2:e4:77:de:
                    a5:8e:cf:4c:90:38:49:4a:74:8b:45:59:dd:58:98:
                    81:aa:d5:3b:92:0e:7e:19:76:91:cb:fe:c5:0b:9a:
                    d2:b0:84:9a:2c:c5:96:2f:21:ad:98:42:91:cb:56:
                    aa:bb:53:41:bb:fa:f0:38:c5:01:4b:6e:20:3e:ca:
                    49:c6:20:b0:34:38:86:b8:75:e7:42:52:c0:50:49:
                    46:28:91:05:94:6e:af:05:7c:42:b5:b8:e1:aa:ca:
                    c9:e0:df:41:a3:d0:72:8b:ff:b4:3c:04:64:e9:1f:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:73:22:EE:0A:44:89:8B:06:C4:A9:D4:7C:47:B9:D5:2C:E9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/4f6851cc-3ca2-3173-97fc-b30b6be690c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl

            X509v3 Authority Key Identifier:
                keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:8e:c4:03:f0:c5:f5:9d:f0:20:20:04:8f:28:db:9b:a9:f3:
         db:73:33:bf:2d:c4:11:72:4f:c3:b6:df:3b:ef:3d:1a:93:da:
         bf:fc:17:f3:ea:5a:c6:22:2b:04:87:f3:a1:f7:b7:97:13:50:
         e6:ed:e2:5f:1c:5f:3f:80:8a:77:1d:7f:da:26:45:06:75:ae:
         ce:5c:a5:c5:b8:6d:fa:92:4b:75:18:e5:40:81:d4:53:0b:5e:
         b1:7c:7e:82:dc:16:6e:2b:c6:cd:55:bf:ca:97:8c:2d:85:76:
         4c:10:94:af:1b:eb:ce:3b:e4:3e:69:40:78:c0:6a:58:0a:4e:
         bb:0f:6f:c3:40:ae:3f:b3:e7:a4:e0:8f:4d:25:9c:22:30:55:
         83:c4:73:f8:92:51:b8:90:0f:69:aa:7f:ef:f4:70:d6:e7:94:
         4d:6e:72:ad:71:91:cf:cb:3a:fd:a0:85:08:1e:e7:56:02:5f:
         7f:12:7e:bb:89:d7:bd:61:64:e4:04:e2:bd:eb:da:79:9e:03:
         a7:41:03:3a:ec:c2:43:85:89:cf:c8:6c:a0:ff:6f:ff:07:ef:
         be:6c:a8:33:ff:67:fa:e4:65:a1:d2:5b:26:e0:69:bf:0f:11:
         22:83:bb:5f:01:d9:f7:d4:f4:ea:aa:cd:29:1c:e8:17:d1:86:
         ed:df:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:52 2026 by rpki-client