Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/5c3e1806-0fd4-32c9-aa66-17422303e773.roa
File:                     5c3e1806-0fd4-32c9-aa66-17422303e773.roa (raw, json)
Hash identifier:          ofJ8ZYVvFi7uKVQvyc67YsV4mHIlFjZxIO8srjoDAHQ=
Subject key identifier:   53:68:10:A8:66:87:03:CE:73:2E:28:D4:C2:3B:97:9E:CC:95:81:44
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F4328584F15CCE29CA8FDB73E6C5ADD80
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/5c3e1806-0fd4-32c9-aa66-17422303e773.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     151779
IP address blocks:        23.151.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:e2:9c:a8:fd:b7:3e:6c:5a:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=1981c4c4-67ba-442c-8cfa-c4f89ad26398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:65:2b:0f:17:d5:5f:a3:c1:a4:f6:63:eb:
                    7e:e4:14:db:77:1d:c4:2b:8f:1f:09:d4:dc:62:b1:
                    c1:81:8d:b5:a3:35:dd:1c:52:64:e9:ae:7b:67:ee:
                    a5:02:d3:30:a5:cb:39:75:29:03:f0:ba:f8:0a:75:
                    be:e6:25:2b:77:65:77:af:c9:ef:5f:c5:aa:11:77:
                    b8:8f:cb:c1:2f:06:d3:46:0c:52:4e:d6:d9:e2:ae:
                    ff:47:08:59:cf:46:e5:39:d8:0d:e4:41:86:76:31:
                    2a:e5:ee:9f:1e:33:b7:52:13:2b:6d:70:85:a2:6d:
                    4e:ff:9a:0d:03:1c:9e:79:91:53:13:37:4d:24:c9:
                    0d:37:46:84:6b:87:12:06:7d:10:30:66:3a:e9:fe:
                    62:f7:68:cd:91:ab:df:52:4f:0c:33:88:dd:43:c4:
                    cd:7d:70:a8:31:1d:f7:67:37:53:f6:7e:e7:d3:1a:
                    cd:8a:6a:8c:4b:8d:9b:7a:51:cf:97:0d:b2:94:83:
                    e4:be:9b:56:bb:32:06:cd:92:c4:58:c9:13:55:6d:
                    07:5a:7c:a4:34:84:d2:62:00:8a:45:bc:c0:fa:a1:
                    ef:8e:1b:58:88:08:d8:d0:84:49:2d:e3:f5:13:7c:
                    6a:21:34:ff:0f:5c:4d:ab:dc:4c:2a:f6:d5:00:cb:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:68:10:A8:66:87:03:CE:73:2E:28:D4:C2:3B:97:9E:CC:95:81:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/5c3e1806-0fd4-32c9-aa66-17422303e773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:a5:ba:9f:97:b4:d6:33:eb:15:c5:08:a9:13:88:88:b5:
         93:d7:f5:bc:a8:75:d8:ac:ab:ba:40:ab:36:92:28:89:71:5b:
         44:84:cc:1c:9f:a2:a2:67:21:42:32:8c:3a:3b:b8:ec:0e:78:
         2c:68:84:4a:22:1b:63:3e:80:90:37:d0:31:6a:a7:c8:df:90:
         2d:d2:72:21:db:29:10:37:77:90:32:59:9e:fe:80:00:3e:76:
         f7:90:8a:6c:10:5d:ef:2d:b5:45:9e:ca:48:36:b9:04:cc:89:
         09:98:2f:ba:d8:79:c5:53:9c:30:74:0e:9c:61:76:6c:50:5e:
         ac:f2:22:02:99:e6:8c:fb:ed:c5:51:bb:2f:4c:39:fc:44:c5:
         7a:9b:90:c4:e7:7e:5b:1c:5f:d7:57:1a:41:f7:8c:40:25:e6:
         04:0b:f9:ae:33:01:36:7e:ba:0e:69:c5:17:e3:ed:32:e3:32:
         81:c5:a0:f6:ba:ec:13:7a:be:36:cd:57:e0:7f:6c:68:e1:61:
         fb:57:6d:22:54:b0:be:a7:aa:1b:d7:fb:18:55:a4:06:4b:07:
         8e:59:6d:be:76:31:3c:a4:90:be:f5:8c:58:f5:85:18:eb:83:
         0a:38:8d:13:29:15:b6:6e:a3:c8:f5:2a:6c:51:86:cc:7a:e2:
         0e:83:6c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:34:44 2026 by rpki-client