Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
File:                     9438e3b6-c8b0-3562-828e-38e2e3227244.roa (raw, json)
Hash identifier:          6qi5L4SugX0wO5cTxLrHaH8yUTqUwwE3oheM3CYYzMU=
Subject key identifier:   A3:FB:F3:B3:E0:F9:D6:C7:8C:56:BD:9F:2D:D5:E6:10:F6:92:C2:C2
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F4328584EFE12240CE1DFFBF099E92EE0
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     398698
IP address blocks:        23.165.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:24:0c:e1:df:fb:f0:99:e9:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=be9469eb-7199-427e-b4d3-f2986f1ac824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:40:74:0d:96:43:d6:da:6f:4b:15:b0:3b:53:
                    6c:92:d8:a9:a7:10:e2:58:d2:16:37:eb:80:02:92:
                    cd:89:b5:c8:ae:7a:57:03:92:04:48:3f:89:3e:fc:
                    39:cf:df:c8:e8:32:e5:5c:47:b9:6c:7a:d0:df:d2:
                    14:38:fb:30:17:b3:bf:f9:be:f0:f5:fd:39:38:ea:
                    5c:ea:ac:88:50:6d:9d:f5:6e:71:bf:1c:68:d7:b9:
                    8f:e8:a4:49:cf:79:41:2b:6e:90:84:41:0e:ae:c3:
                    dd:0a:eb:ea:dc:ff:ad:e8:5d:ee:41:a9:b6:da:fb:
                    67:70:1d:ee:9f:66:31:9a:f7:91:dc:e1:22:ec:79:
                    d4:c9:0e:1d:bf:cb:44:a4:83:9b:87:13:56:37:88:
                    0c:ba:24:3c:76:c0:9e:f7:05:b3:1b:2a:5e:41:c0:
                    39:2f:22:6e:d8:5f:46:77:22:55:8b:7c:29:9f:73:
                    05:0d:ec:70:94:6e:4e:da:d3:06:ec:c7:e7:d9:5d:
                    3f:c5:c4:2a:c6:ca:2a:ab:e8:4c:3e:7d:ba:c8:27:
                    e4:d1:24:2b:e8:bb:a1:6a:93:8d:94:3b:03:cf:93:
                    44:6b:c9:f6:26:85:88:c4:df:a9:42:69:ff:54:9a:
                    bd:2e:9c:0d:6f:2f:d2:bb:38:74:da:78:a2:15:3f:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FB:F3:B3:E0:F9:D6:C7:8C:56:BD:9F:2D:D5:E6:10:F6:92:C2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:77:8b:b5:6c:60:6c:58:fa:f3:fc:cb:10:7b:c8:2c:17:
         fb:c4:5d:a1:7b:f3:e1:42:17:27:70:23:c9:bd:b2:81:44:8e:
         db:f6:5f:dd:7c:62:06:41:33:b5:f4:0d:69:55:07:47:af:d2:
         09:77:00:3c:28:b8:37:ad:df:38:ce:99:89:28:38:f6:41:d6:
         a4:97:1e:9a:ec:0f:56:9b:84:d1:01:1c:01:7a:bb:77:99:27:
         02:b0:47:60:82:f2:d5:b8:bd:6d:70:a6:5f:f2:28:14:9a:73:
         9d:86:35:9e:0c:d2:00:84:42:58:1f:d8:53:f9:0d:5a:3f:ec:
         b8:ce:49:10:ed:a3:2b:e7:36:19:5c:ba:1a:4f:c6:88:ab:5a:
         26:6b:28:da:fa:6c:4a:ee:3e:58:4e:0e:1f:1f:e8:22:c0:fd:
         05:50:f6:f2:ee:4c:6a:3e:da:15:bc:e1:a2:13:71:4e:91:4b:
         c5:af:27:85:e0:3b:8f:2e:02:4c:b6:6f:2a:0e:1d:f6:9d:a8:
         af:28:87:36:f0:ad:e4:ce:71:7c:72:40:53:50:8b:e2:74:b0:
         3e:d0:e9:03:48:37:71:32:1b:66:47:9e:cc:fb:43:9a:ef:32:
         a6:dd:6e:b8:67:c2:d3:b3:ee:be:fd:d4:d3:00:91:18:47:72:
         06:f0:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:59 2026 by rpki-client