Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/e5c93f43-d2d8-3038-9487-393e015c2e3c.roa
File:                     e5c93f43-d2d8-3038-9487-393e015c2e3c.roa (raw, json)
Hash identifier:          YyAwgamE+ylDjuwZdaf4NNNfboDswtIGDtEJBGK3oAk=
Subject key identifier:   56:D7:06:42:EA:6A:BD:7C:A5:1A:1F:BB:01:23:05:73:93:D2:99:9E
Certificate issuer:       /CN=7e9de20f-3d15-4f2b-b264-a02ac1f40d1b
Certificate serial:       010D0C9F4328584F38D81D742732BD1FBDDCEF00
Authority key identifier: 60:FF:17:A6:66:CE:A1:6F:F9:34:FE:80:08:5C:B8:A3:8E:1D:28:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/e5c93f43-d2d8-3038-9487-393e015c2e3c.roa
Signing time:             Sat 19 Sep 2026 02:16:10 +0000
ROA not before:           Sat 19 Sep 2026 02:16:10 +0000
ROA not after:            Fri 18 Dec 2026 03:16:10 +0000
asID:                     398880
IP address blocks:        23.249.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:d8:1d:74:27:32:bd:1f:bd:dc:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9de20f-3d15-4f2b-b264-a02ac1f40d1b
        Validity
            Not Before: Sep 19 02:16:10 2026 GMT
            Not After : Dec 18 03:16:10 2026 GMT
        Subject: CN=f9e2fed4-df30-4426-a576-00f684b94c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:89:e2:67:8b:bf:31:31:c2:12:a1:2f:c6:5f:
                    95:7d:c4:95:ab:15:cc:ce:6b:c3:0b:dd:91:1b:f2:
                    8e:4f:24:49:3f:fd:02:bf:53:8d:dc:65:7b:0f:ba:
                    90:ed:bb:e6:03:80:48:16:d5:fe:83:96:f1:0b:7b:
                    64:55:4b:b7:10:35:b2:37:0b:ba:43:48:3f:02:14:
                    cf:5e:57:18:ec:12:28:d4:b3:60:bd:ba:ea:75:a2:
                    d4:57:49:4a:2a:f5:24:07:7a:56:3c:23:1b:dc:12:
                    8b:89:0d:78:0a:02:54:9b:14:4a:6f:89:68:d1:27:
                    1a:2c:56:e7:db:1f:5e:97:5c:61:e9:80:0b:48:31:
                    a7:79:f8:2c:d5:07:99:05:ce:85:85:bf:d1:56:36:
                    50:f0:44:54:b2:fc:db:74:f5:a6:7c:95:89:08:f3:
                    f3:7f:72:bf:74:18:2f:4b:7f:a0:4b:d0:d9:3c:0d:
                    b9:8f:ea:bf:5a:c8:41:bc:28:bc:06:1f:74:33:20:
                    3d:04:9d:c6:65:c9:27:b8:f1:87:7d:d0:de:5d:c4:
                    ec:a9:9e:f5:e4:c2:b8:f6:18:7c:c9:2d:e6:5d:33:
                    7b:be:4e:15:fe:04:4c:df:ae:df:ad:f2:d7:d8:4c:
                    33:33:74:45:24:f0:ad:75:13:88:7c:e6:4f:0e:2f:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D7:06:42:EA:6A:BD:7C:A5:1A:1F:BB:01:23:05:73:93:D2:99:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/e5c93f43-d2d8-3038-9487-393e015c2e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.crl

            X509v3 Authority Key Identifier:
                keyid:60:FF:17:A6:66:CE:A1:6F:F9:34:FE:80:08:5C:B8:A3:8E:1D:28:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7e9de20f-3d15-4f2b-b264-a02ac1f40d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:c5:cb:27:0b:0d:5b:0c:4f:f0:a1:c4:73:0d:d5:3e:7d:52:
         53:3c:c7:29:dd:c8:51:e1:c3:26:3a:a5:db:fc:1e:24:e7:fc:
         4f:6e:92:68:24:56:af:02:f9:bd:1e:2e:5a:89:fe:d0:77:03:
         d2:88:f0:fd:72:07:77:46:ed:4c:0b:ef:5c:f6:d0:c2:76:77:
         88:43:5d:e9:7a:f1:7b:68:8c:99:aa:d1:92:c8:e8:57:20:79:
         7e:34:83:d8:5e:e5:94:75:95:89:87:00:2b:91:b1:e2:8c:fd:
         9d:15:02:d9:46:77:58:7b:88:91:16:01:e8:b4:35:52:b1:a6:
         31:9c:bd:a2:d6:79:41:9a:93:1c:ce:bd:d5:6f:b9:df:e7:20:
         53:b0:2b:74:67:7a:cc:d7:64:fb:56:27:04:67:b0:c3:7d:83:
         0a:6b:0a:7f:af:fc:a4:c9:d5:a3:ee:1c:1d:79:57:3d:93:2c:
         9c:f7:20:5a:53:11:3e:64:07:e8:bb:7f:86:cf:be:33:b9:18:
         da:93:7d:db:19:3d:d4:cc:b9:08:ed:71:bd:b8:46:fa:e6:17:
         1d:8a:8e:01:0a:b8:08:4b:a5:a8:ef:ac:82:be:c1:8d:95:d5:
         e2:96:d5:34:a1:aa:a5:68:93:88:1a:e6:80:57:e1:5a:62:56:
         de:b3:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:36:22 2026 by rpki-client