Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa
File:                     6f898a92-27c5-34f5-ab5d-94a7194d0508.roa (raw, json)
Hash identifier:          9Ulmz1hYcn6zULJqhrFPWF/c/UjQzQ02JM4gGeIgWf8=
Subject key identifier:   32:38:D1:F3:49:9D:7A:B4:45:52:9A:10:29:8D:77:D3:62:35:97:6D
Certificate issuer:       /CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94
Certificate serial:       010D0C9F4328584ED8648E0DBD0B69234EC45980
Authority key identifier: 06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     10753
IP address blocks:        23.132.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:8e:0d:bd:0b:69:23:4e:c4:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=e627565e-b4e2-4975-91f8-c861ea6ec7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:02:3b:e4:f6:cf:85:4a:78:86:72:04:66:3f:
                    ca:be:6f:8b:8b:09:32:ef:bd:94:71:67:07:47:9b:
                    6d:98:da:7f:f0:61:f5:de:16:3e:1f:aa:b6:27:70:
                    3a:ce:eb:3b:15:c8:bd:83:46:c5:42:8d:75:40:73:
                    36:d1:42:bc:11:9a:31:4b:f7:50:9c:19:91:15:62:
                    39:7a:53:47:ce:c1:e8:51:2c:19:e9:3c:3d:b0:c6:
                    ec:74:9a:f6:3e:0a:40:b0:ad:b8:df:fb:b6:64:2a:
                    6f:0d:56:c6:39:4f:29:65:6e:c7:f4:94:8c:90:28:
                    1c:4e:e9:57:10:e9:02:41:a5:3d:2f:4d:5f:88:1e:
                    42:6d:55:d0:44:9a:9c:55:12:7d:43:6e:11:ad:1e:
                    f7:8d:c8:fd:08:f2:3e:44:84:55:e9:13:4c:0c:7f:
                    8c:16:c3:b2:87:75:48:2b:b7:bb:f0:80:b4:be:02:
                    d7:c1:52:20:3c:8e:ed:c5:c7:15:08:bb:3a:e6:bc:
                    25:91:35:1e:e8:87:59:56:6c:ac:ee:19:5f:f4:2b:
                    d9:85:b1:7c:c0:af:ab:21:f0:17:f6:5a:89:dd:bc:
                    ce:f2:98:f5:37:a1:ef:27:f5:19:86:93:d8:1e:48:
                    21:24:81:0b:7c:b6:fd:06:cb:89:06:cc:31:5d:95:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:38:D1:F3:49:9D:7A:B4:45:52:9A:10:29:8D:77:D3:62:35:97:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl

            X509v3 Authority Key Identifier:
                keyid:06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:49:28:e3:66:9c:31:df:8a:c4:f1:07:4c:d9:b2:5e:3b:b0:
         9e:d6:4a:52:4f:90:71:57:c3:83:af:5b:83:ee:e3:f6:0d:3a:
         be:30:53:81:25:39:b7:c0:04:64:36:6c:a9:b8:c8:a7:e8:23:
         28:a1:f4:60:31:45:43:40:be:88:18:c6:57:0f:7c:bf:b9:9d:
         bd:fc:35:0c:42:ae:c8:7b:a5:f1:80:cf:36:d9:76:d5:c0:c7:
         da:d0:c8:0c:2b:6c:24:e2:cc:d1:01:ce:4e:42:75:d4:e9:d6:
         c9:04:2a:ef:25:8a:8c:c6:ef:a8:50:4c:38:69:a0:bf:6d:5b:
         7c:91:be:0d:c6:14:00:7b:fa:07:e5:d9:43:bb:a3:68:79:bb:
         82:6d:40:45:f2:95:4c:27:55:51:e8:f3:ac:6b:fc:c7:61:7a:
         2d:88:85:cc:0f:83:df:8d:c2:dd:3f:e8:73:15:57:65:55:06:
         8f:37:35:40:6b:db:b3:6e:65:73:39:59:18:2e:34:04:71:a6:
         87:61:95:0d:68:93:20:b1:08:64:e7:a6:5f:b1:93:a2:56:2a:
         9e:7f:e1:ca:4a:d7:d3:7b:1e:60:a5:b6:d9:76:b4:2a:6c:bf:
         ee:73:87:5e:89:6a:8f:20:39:7e:ac:c6:27:48:65:4e:39:65:
         d6:99:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:41:55 2026 by rpki-client