Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa
File:                     7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa (raw, json)
Hash identifier:          4S9nbr6K6oX3+wL8uAkvnMcDzqVe/jvkPWAf8tgmBV8=
Subject key identifier:   FD:39:61:CE:AF:3C:E8:11:52:AA:0D:A1:A3:2D:56:8A:1D:71:E6:26
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F498A171559077A092CE627C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32043
IP address blocks:        173.232.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:17:15:59:07:7a:09:2c:e6:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=922cdef0-7989-4822-8819-8c20a549e647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:f6:ba:fd:c9:ba:df:6c:e3:37:36:a0:51:
                    b9:bc:28:25:6d:a9:8c:40:37:7e:04:67:a1:42:e5:
                    72:fa:56:7c:6d:b1:22:60:93:f8:09:6b:de:c0:85:
                    96:4c:86:59:00:3e:47:3d:d9:53:df:71:46:8a:fe:
                    11:78:27:34:c5:d9:22:d3:7a:f8:42:23:71:f8:7f:
                    55:ae:76:6b:24:1b:66:7e:5d:9b:1a:16:f5:7b:3d:
                    bb:2e:1b:f3:1a:c5:3a:fb:9f:60:f3:fc:27:41:23:
                    af:7a:07:7e:d5:0a:d7:a5:9d:7f:b5:9d:8d:a3:b9:
                    84:77:f8:0a:bf:a3:32:84:d3:5b:4a:ae:2b:c7:2d:
                    fb:7c:89:d9:5f:20:a3:fc:2e:06:9a:35:b1:57:e6:
                    89:e3:8e:47:32:4f:76:17:3d:c6:86:91:14:06:20:
                    18:41:ca:1c:f9:fc:a7:64:28:57:49:0b:ce:35:77:
                    bf:7f:50:5b:a1:63:a4:ff:eb:e2:29:7c:36:d3:6a:
                    25:08:ca:4c:f7:aa:33:8f:fa:21:16:fe:0b:bb:cc:
                    f4:96:b7:de:80:48:19:22:dd:82:05:fc:bd:12:5f:
                    e6:22:94:61:02:8a:c0:ce:81:d3:0d:7d:73:bc:7e:
                    a0:64:b8:4e:4c:50:13:e8:a6:e6:31:bf:59:98:b8:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:39:61:CE:AF:3C:E8:11:52:AA:0D:A1:A3:2D:56:8A:1D:71:E6:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2e:ba:58:6e:17:e8:7f:41:4a:4d:bf:f1:45:c1:fd:71:ca:
         0a:5a:a6:f6:8f:07:b9:1a:45:c6:c1:08:99:4b:c6:4a:6e:23:
         d2:d2:a6:3e:30:c9:66:b2:72:a9:90:99:c2:47:65:46:02:3d:
         2d:be:5e:68:13:c3:9e:8d:d9:3f:f7:78:a2:65:1a:35:00:cd:
         30:23:29:99:5f:d3:da:a8:dc:a3:ef:f9:aa:a6:92:b7:50:f9:
         05:df:c3:6a:28:8b:6e:3d:6d:eb:f6:b2:85:39:01:58:8d:b1:
         b6:40:47:a6:88:a0:3f:6d:ea:9a:e9:ef:34:e3:35:8a:7d:c6:
         1b:84:1f:11:5e:47:a3:fb:1d:38:b6:af:78:34:c7:2e:88:80:
         75:ae:1b:d9:32:63:77:f8:61:6d:66:6a:60:c9:41:f3:6b:8e:
         7a:4f:ff:9a:eb:09:4e:cb:6d:3a:25:50:18:c2:50:ab:c2:ee:
         a1:5c:62:03:92:74:c2:cd:88:c3:5d:62:71:d5:40:b8:8a:ea:
         d4:a3:c7:05:c2:ea:15:0b:1d:61:2f:05:d4:88:96:e4:3b:53:
         8f:23:45:bf:94:0b:f3:9a:7e:3b:0b:be:d5:9b:c2:17:66:25:
         16:3f:cf:2b:a0:c8:b9:45:8b:bc:51:39:8b:1a:e7:2a:7a:79:
         5d:58:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:26:30 2026 by rpki-client