Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa
File:                     c53925ff-d700-3546-9f23-98b9543e1426.roa (raw, json)
Hash identifier:          8i3mnsZOiisqnEupGoMeiEJ3u5BKg+pZLMMnboOD9nQ=
Subject key identifier:   9A:FF:F9:B1:C0:D0:4E:AC:A5:8B:65:D2:97:BA:7C:71:75:50:B8:87
Certificate issuer:       /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Certificate serial:       010D0C9F4328584F4974F5BB5E2B621603802880
Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398741
IP address blocks:        23.172.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:f5:bb:5e:2b:62:16:03:80:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=17172cdc-765d-4a3a-a2d8-52abb877218b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:26:53:32:19:35:de:54:45:a6:38:d9:97:
                    6c:22:3e:6f:49:34:d1:ab:ae:8e:6f:12:74:96:56:
                    58:85:e4:44:bc:74:56:2a:54:a5:54:60:e4:ef:04:
                    7d:7d:51:b9:b6:16:d7:d9:4b:d5:89:21:da:81:6c:
                    b8:bb:32:b1:de:f3:aa:a3:40:75:3d:8d:a2:3c:e6:
                    3e:3c:62:60:48:b1:19:37:0e:4f:2a:51:5c:fa:b8:
                    ed:6c:6a:26:57:fa:ef:c6:f4:9a:91:70:f7:6e:bd:
                    4c:de:35:87:77:6b:67:f9:6b:53:01:02:38:cf:d4:
                    8a:8b:91:9b:6a:94:87:04:a8:35:13:eb:32:d4:ba:
                    9b:28:22:fa:9a:50:1c:12:3f:9c:b7:f0:10:6b:7e:
                    1f:c8:4b:a6:81:14:ec:6c:10:57:3c:2f:c1:26:fe:
                    de:5d:08:71:91:ed:2b:24:bd:05:a7:11:57:79:fb:
                    27:08:21:bb:aa:94:1f:4d:45:3e:f2:1a:3c:65:56:
                    e2:8c:a9:50:31:4b:ac:d9:29:e5:41:28:fb:4f:f7:
                    88:95:49:e4:fc:f3:91:ba:65:8d:95:3f:b0:78:18:
                    24:b7:46:bc:b2:57:7f:09:fb:25:80:0f:fc:42:d8:
                    17:f5:4d:30:dc:ff:af:ed:e2:74:be:a1:9f:fc:10:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:F9:B1:C0:D0:4E:AC:A5:8B:65:D2:97:BA:7C:71:75:50:B8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:28:d2:8c:c8:53:38:a0:a4:d5:fd:e9:b5:b0:8b:d0:97:
         3e:64:44:1b:30:02:6a:6f:a6:e1:f2:41:ed:f5:0d:8d:10:e3:
         d3:7e:44:52:d8:1f:34:c0:79:a2:d4:17:29:5a:73:de:1a:6a:
         18:9d:12:b9:00:ac:f4:7a:bb:8d:44:6a:26:5b:a4:a1:cb:56:
         3f:e8:84:44:8c:21:d4:6a:6a:c2:2a:e0:91:e4:54:8a:49:b2:
         db:38:3d:cb:67:20:5d:d6:0c:4f:19:ed:6d:9e:ea:18:8c:1b:
         54:94:89:3d:5b:94:0d:03:3d:1c:0a:30:63:17:cc:17:e8:df:
         1a:4f:d8:9f:06:da:03:bf:d6:6c:50:d1:23:d0:ec:5e:cb:3f:
         cb:6d:7d:ae:47:7d:83:ba:ab:63:aa:33:ab:dd:e6:2e:cf:1b:
         ff:14:7f:a9:11:ec:5b:8d:db:05:4d:16:17:3e:85:68:7b:fd:
         72:62:8f:06:1d:97:39:24:7a:8f:aa:ea:bb:fc:be:3a:de:9d:
         03:3b:f5:68:c2:63:e2:8e:0c:a2:25:83:d0:7d:2b:fe:1b:c8:
         d0:b1:1b:0b:fe:15:18:25:c1:06:65:0c:69:84:46:16:28:99:
         2c:80:96:b4:3d:e0:bb:f0:e0:94:44:e0:e7:74:33:e9:5e:96:
         07:7e:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:24:14 2026 by rpki-client