Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c1b8da79-4771-3823-9c64-f62c5fe535f8.roa
File:                     c1b8da79-4771-3823-9c64-f62c5fe535f8.roa (raw, json)
Hash identifier:          NGnqGKrk+WvycnrxtwtnPEPDKI5dUaMQEhoQwJhcUBY=
Subject key identifier:   F7:9C:4F:06:13:3B:3A:A6:95:82:60:A1:29:EF:CE:64:5C:51:0D:E4
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584F58CD653649D4A7F84D208054
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c1b8da79-4771-3823-9c64-f62c5fe535f8.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     30456
IP address blocks:        23.156.128.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:65:36:49:d4:a7:f8:4d:20:80:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=039f4305-b666-4c2d-aefe-241ec4084797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:8c:99:0e:21:f5:28:d9:9c:43:4a:47:51:
                    06:72:14:7a:ff:ad:51:4b:a2:4e:4a:04:f5:15:ed:
                    51:07:a9:48:f2:1f:76:ad:60:13:72:25:b8:61:30:
                    97:15:72:e1:d3:37:79:0d:a0:fb:c0:3f:18:a4:63:
                    ad:8a:70:16:44:79:e5:93:67:a9:e2:b5:41:b7:4e:
                    97:b7:d0:24:f2:60:35:c9:43:d7:18:a7:c5:7b:4c:
                    93:84:90:88:11:43:86:34:c3:c5:53:ef:db:98:12:
                    71:50:6b:db:00:41:5a:21:93:bb:45:d1:74:3a:71:
                    4b:4b:1b:0e:c7:c6:83:9c:94:fa:50:a1:7e:95:45:
                    12:ab:47:a0:bc:d2:c5:2a:62:c3:15:e5:64:82:9c:
                    6b:88:82:4c:63:88:cc:81:58:0e:cc:84:80:50:2a:
                    9e:51:d8:99:b3:5a:89:ee:3c:45:04:e7:2c:df:8c:
                    0f:91:33:19:e9:8b:60:95:f8:23:f3:b9:0d:32:34:
                    64:56:7a:6d:6e:f3:74:2c:fb:4e:1a:06:18:b6:28:
                    08:37:d2:e3:56:35:95:62:85:6c:57:47:90:bd:30:
                    54:7f:7f:c6:c5:c0:f9:90:a4:35:34:6e:13:95:8e:
                    54:43:bd:68:51:5d:6f:53:7f:e0:e8:9e:c6:4a:a3:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9C:4F:06:13:3B:3A:A6:95:82:60:A1:29:EF:CE:64:5C:51:0D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c1b8da79-4771-3823-9c64-f62c5fe535f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4d:be:6b:dd:a9:8e:e2:73:2c:fa:12:39:41:86:bb:4f:d7:
         db:bd:1c:b1:66:e2:59:fb:b2:0a:a1:ec:40:fd:bf:01:fe:2e:
         09:ef:54:19:bd:1b:dc:4b:a6:7b:2c:53:4e:a0:a5:91:be:17:
         69:c5:82:13:76:34:f0:62:07:10:3c:81:b8:3d:43:1f:0a:73:
         3c:40:b8:2d:4f:e2:1d:00:74:1d:53:1f:e9:52:1e:17:6a:73:
         81:12:da:b4:d1:2a:ac:d9:c3:28:c9:9c:14:33:e9:21:27:78:
         c1:d0:1c:d9:fe:92:8f:22:1e:ba:18:ea:61:79:ef:9b:91:68:
         14:8d:d4:b7:ed:0d:7a:22:3e:9a:f0:07:bd:9d:8f:59:66:f5:
         23:8a:8e:60:9d:33:b0:fc:ba:4b:96:1f:e6:c0:b0:9d:6e:8b:
         aa:b9:78:b7:d8:8e:4e:96:68:b3:cf:ab:1e:ee:dc:de:8e:31:
         70:14:64:c0:5c:d6:7f:6f:a6:7c:87:42:02:57:42:67:5b:78:
         5c:92:49:01:6f:ab:e6:c2:46:63:27:ea:83:94:e3:da:90:f8:
         6d:57:62:c0:03:9f:e3:35:1b:0e:62:96:91:71:0a:1b:bd:55:
         5b:c9:6d:c9:61:ba:53:f5:a0:fa:9c:6b:d4:31:7f:c0:da:32:
         57:a1:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:39:52 2026 by rpki-client