Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa
File:                     2997a217-d468-3059-978d-6d7d89969d6d.roa (raw, json)
Hash identifier:          Qv9vHrs8gYQ1fpkqJLNScZTWk1EOapP8VX6cKeRdIr0=
Subject key identifier:   70:76:D9:A0:90:C1:B0:6C:4D:49:2E:18:54:F2:A0:C0:48:17:4F:67
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584F612D6586B7569F4044EAF180
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     54905
IP address blocks:        23.234.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:65:86:b7:56:9f:40:44:ea:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=2274e940-6c97-4639-bf10-124ea811320e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:92:f4:a2:49:d8:33:45:ec:df:85:62:0d:
                    4f:e5:42:a8:bd:7f:f8:f3:50:e0:34:40:b2:fc:1e:
                    42:6c:0a:61:4b:c4:de:4d:6e:58:cf:c7:f6:85:5a:
                    b4:a3:d9:b3:93:d0:78:4a:e7:bb:1e:9c:65:28:26:
                    7b:ba:a1:ad:fb:cb:eb:1c:67:3c:3a:33:0d:78:bb:
                    2d:89:51:98:b0:e9:04:6e:68:a1:5b:4d:d4:41:0e:
                    a2:0c:cb:10:d6:d6:22:5e:6d:c5:86:5c:31:40:f9:
                    88:2c:59:80:b5:da:e5:11:e8:e4:f5:a1:d1:7b:c5:
                    31:68:78:bc:61:1d:d1:e0:80:56:30:0d:cb:a0:10:
                    99:44:b4:d6:03:8a:1a:08:7f:dc:8d:d5:cf:f0:1e:
                    16:4d:c2:89:77:75:19:2f:58:f2:98:e8:36:3a:f2:
                    dc:c6:f3:2a:25:56:12:41:e0:5c:1f:3e:bb:47:72:
                    12:bc:7c:b2:5b:01:e0:d0:a8:eb:c4:0b:6d:8d:d4:
                    48:64:4c:f9:d7:d6:e3:cb:ea:8a:6d:a9:ea:52:fe:
                    54:f9:d9:70:2b:95:b8:af:6a:19:99:49:b4:d8:45:
                    cd:14:b2:5c:e0:e5:a1:db:91:76:a4:9b:e4:48:5f:
                    2b:6f:9e:94:de:6d:59:7b:cf:cf:cb:66:94:6e:86:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:76:D9:A0:90:C1:B0:6C:4D:49:2E:18:54:F2:A0:C0:48:17:4F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:e4:20:6b:0c:8f:b4:22:c6:0c:e8:6b:5c:b2:46:75:25:
         04:f5:77:4a:87:47:70:0a:a3:aa:b5:89:f9:5f:48:ea:0c:78:
         dc:ff:0a:21:3d:43:c4:42:47:24:89:a3:d6:60:49:09:ff:af:
         a1:b1:35:06:17:6e:af:60:f7:f9:b6:ba:5c:05:3a:e7:76:bc:
         d4:cc:6d:67:71:cc:b3:33:46:f0:dc:ad:02:b3:0a:3c:15:76:
         0e:0b:05:3f:f1:dd:c4:a9:b6:b2:37:e6:5a:44:78:3c:fc:f3:
         3d:7f:5b:5c:62:76:25:4c:6c:2c:82:11:d6:a6:29:87:e7:7a:
         31:d9:01:2b:94:5d:15:94:b3:58:37:a8:fd:e2:77:e8:46:b6:
         23:28:c7:26:5b:39:17:3f:d6:56:cc:4b:e6:45:2d:c5:02:8e:
         58:de:66:1c:47:49:91:b3:1a:d5:e5:20:22:65:53:fe:bc:61:
         7f:22:a8:a2:ad:dd:ad:e7:74:e1:e2:1e:d8:33:56:6a:9a:e3:
         8b:a4:f2:2d:29:8f:c5:31:64:94:89:68:c3:a7:1f:ff:e7:ea:
         1b:58:74:16:a3:ed:1d:64:ea:9b:87:9d:b4:c5:fd:89:63:8a:
         0f:88:71:93:1b:ae:57:af:e1:09:3e:be:b5:44:3d:2e:92:53:
         10:50:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:05 2026 by rpki-client