Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa
File:                     71614124-d8cd-3cfc-83ad-fb27d9571197.roa (raw, json)
Hash identifier:          hBDHorogujnypRMuV8xigdGeUwtpI61/VEneay3RIEg=
Subject key identifier:   BC:90:52:52:2F:2C:4A:24:56:24:BB:EA:6D:26:4A:23:81:F6:E2:6C
Certificate issuer:       /CN=d978ad6f-4614-4fcf-9d00-9f30e1a82674
Certificate serial:       010D0C9F4328584F20F7A3FA818A31D08375B280
Authority key identifier: F7:D1:FE:EA:1C:EC:BE:6D:45:87:65:7F:4A:53:11:CE:D8:B2:7F:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     8143
IP address blocks:        23.149.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:a3:fa:81:8a:31:d0:83:75:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d978ad6f-4614-4fcf-9d00-9f30e1a82674
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=c2b64ba4-935f-4e86-9996-b7d33c7f7e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:05:30:cc:7d:40:6f:e1:d0:3b:82:58:04:
                    9f:53:2e:53:36:3a:7d:8d:de:73:4f:82:bb:8a:88:
                    cc:09:d3:84:88:dd:df:74:4c:28:ae:48:a1:40:27:
                    5e:74:62:e8:9a:3b:97:c4:5d:58:50:63:3e:19:d9:
                    bc:51:fd:0b:0d:1e:6a:21:7d:c5:98:06:1a:b6:c1:
                    9f:89:87:4c:ff:77:a1:5a:20:8f:52:0b:a3:c4:f0:
                    5f:95:7c:b8:e6:67:98:b7:43:7f:a4:35:c6:49:69:
                    9b:6d:72:1d:ec:e5:1e:f4:23:e1:c3:f5:65:63:e1:
                    fe:db:55:16:84:31:3d:e9:0f:64:0d:55:a2:b2:76:
                    77:9d:3e:ed:38:9f:f6:a6:77:67:0c:bd:26:e9:d5:
                    9f:e4:26:4a:59:3c:e8:74:a9:a4:40:36:9e:83:63:
                    96:ae:76:e1:36:23:b9:c9:6f:03:c4:8d:4d:d4:25:
                    3e:bc:a1:cf:8c:94:21:02:88:fd:b0:b0:7f:ae:3b:
                    82:d4:0e:c7:a1:1f:23:c9:40:f6:9c:1e:72:9d:c8:
                    63:d8:5f:c8:ba:a6:a2:bb:47:f7:94:38:ef:4c:9e:
                    35:11:79:84:df:6d:fc:28:d6:03:a6:64:6e:f7:40:
                    8f:ec:7f:96:4b:6b:89:04:c4:1a:95:bd:7e:32:8b:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:90:52:52:2F:2C:4A:24:56:24:BB:EA:6D:26:4A:23:81:F6:E2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.crl

            X509v3 Authority Key Identifier:
                keyid:F7:D1:FE:EA:1C:EC:BE:6D:45:87:65:7F:4A:53:11:CE:D8:B2:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:1d:e2:a4:4a:12:14:dc:76:a9:a6:23:08:a1:51:7e:da:
         73:16:6d:17:15:0e:b2:91:ad:60:05:3d:5b:21:02:56:d2:a1:
         65:2b:06:8c:b2:af:11:79:ca:bc:23:5e:d3:ee:79:84:cb:24:
         ef:87:91:31:43:b7:d6:14:91:ea:3c:c4:f6:66:71:e0:23:65:
         7d:c5:f3:70:39:25:a9:aa:3a:bd:03:f7:93:3c:32:81:86:c8:
         e5:4b:52:4c:34:28:27:db:1c:c5:38:c1:94:c9:61:02:3d:4f:
         e1:87:bc:d3:a3:a9:b5:6e:99:13:58:09:92:b7:c6:07:53:9f:
         f6:60:ba:61:9c:98:2d:d0:de:9e:d7:3c:82:77:6c:44:f1:65:
         5a:5a:7f:52:82:89:08:fd:e3:c5:00:21:98:95:dc:91:6b:1d:
         28:92:12:04:db:9a:ae:7e:c1:7b:09:64:db:3f:f3:3e:43:60:
         04:0f:2b:06:d1:b0:81:07:6d:ee:1a:b6:ba:52:a5:65:08:54:
         6a:98:25:fb:15:9d:6e:96:63:66:aa:68:18:bb:1a:0b:7b:d1:
         db:89:25:38:e2:38:17:1b:4e:0e:98:74:d6:f0:cc:34:b4:ec:
         5b:65:77:1b:7d:ad:57:e6:e5:53:87:af:0b:d0:28:d3:77:1a:
         81:fa:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:15:38 2026 by rpki-client