Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa
File:                     f3815c84-d6fa-3124-9599-27ddd2e814c2.roa (raw, json)
Hash identifier:          23i9CE6PnW9M2IXnXHHvNlJFtEe2FFw6FgvoDZzlrgA=
Subject key identifier:   32:FC:3D:71:4A:A0:C1:41:CC:52:B2:AB:72:57:BB:21:3B:74:88:9B
Certificate issuer:       /CN=733a751b-f4f7-4986-8389-8938fc4a481d
Certificate serial:       010D0C9F4328584EEA875D5A7734734E51A04400
Authority key identifier: DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     30514
IP address blocks:        23.168.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5d:5a:77:34:73:4e:51:a0:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733a751b-f4f7-4986-8389-8938fc4a481d
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=b3fea1f1-0028-4dfb-9c93-f3500afab0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c8:fb:68:9b:dd:53:fd:7b:3d:aa:e6:60:ae:
                    96:41:6a:eb:ff:4f:01:44:6d:d9:93:f3:bd:cf:78:
                    d4:55:52:c5:15:44:d7:c3:aa:4f:02:61:0d:a0:54:
                    e4:f0:c3:92:d6:6a:e8:24:e0:6c:8c:9a:44:91:e8:
                    39:26:b7:cf:73:f6:78:f5:15:46:90:bf:c2:fd:dc:
                    a9:39:8f:98:42:1f:bc:c1:fc:6f:6d:97:37:aa:3b:
                    97:51:b8:11:7d:7f:3f:c7:6b:2e:83:9e:31:61:0f:
                    83:9f:25:cb:b4:b9:f4:a3:57:87:88:af:d1:6a:3b:
                    b7:4b:4d:1b:2c:ae:62:f7:0c:f6:97:67:7c:4f:eb:
                    2a:d3:14:2b:a9:f3:78:1b:f0:3e:6f:79:c6:0a:b9:
                    ac:df:9c:1e:d0:20:7e:a1:78:23:ab:89:79:11:41:
                    02:05:78:1a:e8:11:58:f2:1e:8e:54:89:73:fa:0f:
                    7d:a9:7c:a1:ec:8c:63:00:90:18:3d:eb:0a:2b:1a:
                    9b:3c:fb:a9:4d:97:73:0b:c4:5d:1c:6d:60:44:a7:
                    1d:dd:86:9a:fd:a9:7d:f6:27:b5:a2:b0:f9:59:bd:
                    00:8e:cf:70:3f:6c:da:12:4f:86:8d:e6:f8:6d:5c:
                    7c:4d:8f:8a:77:05:65:ae:51:5e:a0:a9:c5:8b:75:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FC:3D:71:4A:A0:C1:41:CC:52:B2:AB:72:57:BB:21:3B:74:88:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f9:69:8e:20:da:10:8b:b2:f8:0b:c2:6f:a2:87:53:4a:b6:9f:
         d9:d1:43:4e:5f:5a:17:7b:82:9d:cc:d3:79:49:16:6e:40:d8:
         5e:01:0c:4e:60:42:73:74:29:4b:39:d1:33:fc:c5:ed:f6:15:
         6c:fc:ab:6f:0f:bd:8f:0b:b8:86:7f:22:d1:fc:4b:25:79:05:
         29:c7:22:d5:ff:0e:fd:92:09:0d:e2:2f:6b:48:34:67:e5:f5:
         66:21:82:7e:52:cd:26:5d:24:e8:f5:6c:16:cb:aa:0b:cb:5a:
         54:bd:d8:4e:d2:69:2f:fe:c5:c6:4a:2b:60:62:c7:09:08:8b:
         c7:40:b7:2a:64:bd:4c:dc:7c:8a:fd:3b:cb:5f:be:18:c8:f9:
         7f:1d:53:25:ae:22:a0:3f:b6:fa:a5:99:89:b0:8a:98:9d:09:
         b3:d1:8d:f6:c6:36:9e:7f:19:92:f7:a4:41:83:2f:35:69:1a:
         3a:91:8e:aa:52:e7:ae:1b:b0:07:c1:6b:dc:b8:8e:6f:dc:c9:
         c9:97:8e:ba:e6:b8:db:a1:02:0f:b5:e6:ff:c1:52:f1:51:e3:
         01:23:3b:09:95:17:2c:f7:3a:44:be:24:0f:c5:a8:1e:ac:6a:
         fa:88:7d:f0:4f:14:58:01:3a:0a:33:e6:15:d2:8d:96:72:e4:
         f8:07:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:06:06 2026 by rpki-client