Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8d331984-c13e-307a-867d-87975780f4df.roa
File:                     8d331984-c13e-307a-867d-87975780f4df.roa (raw, json)
Hash identifier:          ieUHnUxZDBAd4livyEUrKqcmz5HQwpgNRDEuL5bwURc=
Subject key identifier:   74:85:82:C2:7F:3F:35:B4:07:39:07:5D:97:65:D5:A8:3F:3A:0F:1B
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F4328584F1CC7AC70A4EDD5DC89D01F00
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8d331984-c13e-307a-867d-87975780f4df.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     399765
IP address blocks:        23.131.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:ac:70:a4:ed:d5:dc:89:d0:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=0963beb9-43d2-4072-a9d9-71d22183fd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:9d:78:2a:a6:54:61:08:fd:a1:81:b8:1e:
                    21:ab:a9:d1:8d:9b:f3:84:1a:0b:6b:99:bd:32:fc:
                    dc:ff:c8:16:dd:c6:de:70:16:7e:e3:cd:5d:3b:74:
                    21:ec:73:a0:88:da:c0:e0:74:6d:d2:3b:0e:77:33:
                    ca:b2:63:5a:77:19:f8:5d:70:6b:3e:ba:72:44:44:
                    0a:c4:13:fc:b4:50:80:24:60:2b:6e:b0:a4:41:61:
                    06:8e:88:71:f0:d4:14:53:05:3f:e6:b1:87:9e:63:
                    cd:f0:8f:7d:10:6d:c1:23:9f:c1:8a:7a:69:41:56:
                    37:b5:a4:a3:ba:60:59:04:f9:76:fc:e8:02:80:48:
                    de:02:71:87:f2:b5:47:0e:74:c0:e2:a6:07:92:e7:
                    c6:15:e0:d1:cc:6f:03:d7:65:97:0b:1d:42:4f:8b:
                    cf:b5:23:55:cd:ef:a9:ef:36:16:fc:89:94:f0:e8:
                    89:6b:57:2d:3e:3c:eb:3b:16:55:28:d4:88:dd:3d:
                    da:db:0f:de:59:61:3b:99:c0:a9:b3:50:af:a8:40:
                    87:7f:d5:d9:f0:9c:19:2e:10:fd:f0:f0:6a:98:ae:
                    1a:c2:5f:ef:a4:2e:53:b6:da:53:a1:12:b6:fb:44:
                    d7:04:79:f0:9e:4b:6e:d8:d3:29:41:de:e9:86:72:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:85:82:C2:7F:3F:35:B4:07:39:07:5D:97:65:D5:A8:3F:3A:0F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8d331984-c13e-307a-867d-87975780f4df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:55:c3:52:d4:f7:93:27:e7:cc:e0:fb:78:37:8f:93:65:c8:
         b5:2d:7f:ad:9f:f7:b5:cb:2d:ec:94:ce:e4:07:0d:4c:51:43:
         4c:c3:f8:2f:78:fb:72:ef:ff:8c:6d:91:e1:bf:95:fb:32:d6:
         33:ac:b1:7e:34:e7:49:3c:e3:f4:46:40:de:2c:c6:6f:ee:a5:
         be:9d:9b:46:ce:5e:f3:52:04:f9:e8:f7:9b:d3:72:8f:54:d4:
         6c:70:5e:d2:31:e8:8d:b1:16:c6:dd:0f:b3:5f:e3:9f:5b:ba:
         26:fd:5c:e8:ef:2b:6e:88:e7:c5:b1:16:7e:94:f4:54:01:c5:
         1f:14:6b:df:7f:48:80:e3:41:0d:65:a7:26:cb:b6:a2:3c:5b:
         20:0f:89:43:cc:bc:5a:f4:1b:83:53:e6:f2:9a:be:4d:e9:46:
         5d:62:0a:ed:31:b9:15:29:26:2c:96:42:7f:45:c2:81:cb:19:
         fc:0f:fa:58:30:87:5f:f1:76:2d:c2:bc:39:45:ca:78:91:0a:
         ca:36:aa:c3:e6:76:a8:88:fd:16:ed:24:35:40:3d:51:f3:b8:
         11:6a:21:b3:86:06:83:0a:e5:8c:15:b2:a0:91:fe:99:d5:b6:
         8d:0a:0e:5f:86:6d:6e:17:bc:bc:54:23:bd:67:11:a5:81:a6:
         95:04:cd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:06:41 2026 by rpki-client