Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa
File:                     e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa (raw, json)
Hash identifier:          hTs+jBgMGj7nwQcejFAfpjoZrBhQpoDaOsJNxbnL5dA=
Subject key identifier:   97:E1:AA:C1:92:1F:85:2C:44:3D:63:93:68:9F:C6:10:75:AD:25:AC
Certificate issuer:       /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial:       010D0C9F4328584F0D6CFD905CED8A811846ABA0
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     396502
IP address blocks:        23.172.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:fd:90:5c:ed:8a:81:18:46:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=c45e94f9-1b9f-4466-8720-c72166b7a145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:9a:86:ba:8f:b4:9e:b4:14:49:91:e9:7c:
                    28:d2:9d:1b:a6:27:e9:46:ff:e7:c9:53:cb:db:51:
                    c7:ed:67:c0:99:b7:ae:5d:9b:25:09:db:1a:c7:bc:
                    f5:13:f1:e7:b5:e9:67:2f:b0:e7:c6:2b:86:66:ac:
                    64:03:b0:ca:86:22:76:03:6d:e3:c3:b6:af:5e:a1:
                    a7:78:b6:89:27:67:5b:51:52:59:f2:d0:90:fa:49:
                    74:67:dc:e7:9e:55:e8:fd:57:3e:38:e9:49:02:ec:
                    0d:4f:ff:f6:0c:25:ed:96:d7:7d:b0:84:4d:51:80:
                    c8:0e:e9:b9:db:08:a9:fc:5a:2a:c4:b8:92:5e:f2:
                    ec:1b:21:b3:b8:83:9f:78:ed:32:9b:58:59:73:09:
                    ac:77:e1:e8:f8:dd:4b:3f:4b:16:b9:33:4e:cb:3e:
                    a7:aa:46:dc:e2:b9:fa:30:22:f9:ff:bb:e9:55:4d:
                    a5:fa:d2:5e:d6:d9:22:71:4f:f6:bb:f4:b0:72:97:
                    2e:ae:4d:24:97:25:6f:0a:1a:34:9e:bd:d7:96:92:
                    41:4a:6f:5d:13:2c:c5:85:1e:c3:e9:08:f6:bd:66:
                    ed:7f:5e:42:f3:90:28:0c:48:72:b7:d0:65:09:58:
                    9f:1f:d8:1b:e9:1c:1f:c9:27:b3:88:2c:e5:cb:af:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E1:AA:C1:92:1F:85:2C:44:3D:63:93:68:9F:C6:10:75:AD:25:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl

            X509v3 Authority Key Identifier:
                keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:b4:45:42:e4:0d:1d:16:7e:9f:e6:a0:fe:39:20:ed:a7:
         df:4b:1f:5c:30:02:fd:a3:7b:e9:f3:93:ac:6a:20:bc:e2:c3:
         12:0b:56:10:e6:5e:79:77:9f:81:51:f0:07:71:26:ad:e1:13:
         68:48:ad:aa:76:52:1a:7d:2f:dc:da:d5:88:bc:c8:94:7a:5d:
         db:96:54:7c:5d:18:95:f9:5b:cb:90:64:80:27:bd:d0:15:d9:
         fb:a9:db:72:e1:c8:84:51:1a:fd:b1:dc:5c:81:47:e0:5f:b3:
         3b:28:83:34:53:dd:1c:16:da:94:d7:23:a4:3e:36:4e:8c:47:
         e5:7c:5c:19:e5:cf:ee:13:4a:07:b1:e5:c0:54:3a:85:29:38:
         7f:ec:2e:89:1f:eb:5a:b3:82:20:e5:ce:3b:ca:d2:61:50:62:
         ee:67:c7:a0:ec:f0:f2:41:06:ef:03:42:0d:ab:50:60:4f:fb:
         57:c3:02:32:a9:55:c3:ab:0b:ee:bf:3a:d0:13:a6:80:d1:f1:
         1a:61:5c:66:63:f5:ed:7c:2d:3a:cf:7d:de:ec:95:8e:e5:38:
         62:a8:36:34:45:18:9a:b9:ea:d6:e2:8e:5e:a4:49:6e:b2:7b:
         1b:1e:db:e8:7b:2e:34:fd:7f:00:08:e9:d3:a7:1d:8f:a6:03:
         9e:e1:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:26:14 2026 by rpki-client