Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa
File:                     b5490758-29c6-3dee-8f6b-3a687067e265.roa (raw, json)
Hash identifier:          2kao1vpShO+oAsRDS6SR81yObKYHDxY2EJevEQb89Ck=
Subject key identifier:   CE:4F:71:C3:29:7F:E6:BB:74:16:A9:15:C7:28:5B:95:F8:50:26:46
Certificate issuer:       /CN=5a050d35-445a-48e3-baa6-4d4bdc3fa308
Certificate serial:       010D0C9F4328584F698D9D755E9EC05E178C5200
Authority key identifier: EF:49:AA:6A:1A:20:F4:AA:DD:A0:BF:67:27:F9:10:63:23:D8:9C:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     152179
IP address blocks:        23.137.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:9d:75:5e:9e:c0:5e:17:8c:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a050d35-445a-48e3-baa6-4d4bdc3fa308
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=426813eb-a839-4f3b-be74-23ccdd1ac425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:ed:40:c6:dc:0d:d6:5e:78:15:2f:07:84:
                    8b:6e:28:45:49:cd:50:92:bc:5f:6f:12:0e:23:60:
                    12:0c:b9:54:fb:c7:04:0b:c4:4b:2c:ec:27:38:c9:
                    73:14:de:98:37:2e:d6:5f:c6:a3:6b:28:57:f0:b9:
                    cf:da:71:4c:30:f8:5a:38:0d:da:94:54:92:38:2b:
                    44:48:7d:df:17:7d:52:1b:f5:a1:e2:d2:44:c4:7f:
                    cc:b7:e9:de:19:62:8d:2c:69:dc:4c:85:ac:78:2b:
                    ec:67:1b:ec:3a:2d:b9:61:0a:18:e3:fc:a7:79:94:
                    92:65:b6:39:d3:1e:2e:30:50:e2:38:5a:17:dd:3d:
                    a2:91:1b:5d:39:3f:e7:33:05:77:2e:b1:89:7b:f5:
                    30:7d:20:d4:56:e7:2f:8f:a5:bb:69:c9:be:be:ad:
                    6b:37:8d:6e:1d:c5:a8:a1:69:b8:75:3d:47:10:cc:
                    bf:5e:19:ed:28:24:86:01:cc:eb:8f:bc:a1:5c:62:
                    7d:d8:62:c6:61:09:98:5b:f4:7d:e5:e4:65:04:ee:
                    8d:e7:dc:f1:87:d3:7a:27:de:1b:4c:a1:4c:02:e2:
                    a6:0c:c3:7a:e6:73:5d:d4:fe:35:85:f2:d3:7a:b3:
                    02:89:3a:03:82:c8:d4:87:64:0a:df:3c:23:f1:7a:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:71:C3:29:7F:E6:BB:74:16:A9:15:C7:28:5B:95:F8:50:26:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.crl

            X509v3 Authority Key Identifier:
                keyid:EF:49:AA:6A:1A:20:F4:AA:DD:A0:BF:67:27:F9:10:63:23:D8:9C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f3:b1:cb:4d:12:bb:6e:d7:7c:9c:f6:b2:a9:05:96:47:88:
         43:a5:df:09:66:c0:e4:eb:23:e6:4c:de:da:84:4b:c4:8e:ec:
         37:ab:ec:ce:d6:06:78:e9:9f:8e:fd:9d:05:97:0e:48:2f:76:
         58:0d:e1:49:47:a0:e4:5a:12:97:01:9d:cc:87:de:e4:a7:c1:
         8e:b0:97:01:82:d7:a1:9d:e2:4a:5f:b9:bd:ff:8a:5a:33:1c:
         ce:a0:f7:1d:4b:62:e3:c5:42:8a:47:c7:fa:83:39:ef:7b:5e:
         e4:75:a2:5b:d1:b2:e7:af:e9:b4:9a:3b:e5:08:44:bd:c1:af:
         2d:13:49:1d:7c:42:91:3d:a2:a8:65:11:6e:8d:ab:c0:09:a3:
         2c:6b:2c:bc:50:db:70:06:2f:ba:47:64:57:c0:cd:d7:88:17:
         0c:0f:80:fc:c8:7c:b5:a2:a7:79:44:10:bd:40:41:f4:df:bd:
         5b:7d:1c:69:a2:5e:3f:ae:7f:5a:4d:42:30:f1:46:e3:bd:fb:
         5e:f1:36:42:50:79:e0:48:a4:fd:26:47:35:5a:d3:4d:0d:3e:
         43:a3:dc:c6:e1:67:32:1f:35:26:e5:e8:b7:ed:27:f6:f1:d7:
         9a:20:2c:ff:eb:5c:c3:40:40:c5:15:b1:98:5b:7b:2f:b2:81:
         1a:0d:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:28:49 2026 by rpki-client