Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/8b368cf8-59a1-3e70-ab05-225fd8aa7ac8.roa
File:                     8b368cf8-59a1-3e70-ab05-225fd8aa7ac8.roa (raw, json)
Hash identifier:          ZXW6Ira3kKT3fBXkV/k+dwMOC9/M4JvnnpwgV6+DRGk=
Subject key identifier:   66:52:D7:AD:20:1A:52:89:04:46:52:C7:4F:1C:E9:79:0A:CB:66:E6
Certificate issuer:       /CN=c094d447-bba2-4063-89a8-82526852f242
Certificate serial:       010D0C9F4328584F549DA7B3A7F5C422ED06F2A0
Authority key identifier: 28:A9:2F:93:1A:8C:B2:7F:28:D5:5E:F0:7F:5C:4C:F4:5C:B8:96:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/8b368cf8-59a1-3e70-ab05-225fd8aa7ac8.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        23.166.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/c094d447-bba2-4063-89a8-82526852f242.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/c094d447-bba2-4063-89a8-82526852f242.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a7:b3:a7:f5:c4:22:ed:06:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c094d447-bba2-4063-89a8-82526852f242
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=b045d1c8-bf30-4669-acdc-4355be4badb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:ae:06:e9:cb:e4:40:f1:11:b5:e0:1c:64:
                    61:ab:40:96:cc:f3:03:8c:b3:1c:14:63:d1:b0:64:
                    ef:af:80:e5:e2:9a:f0:79:24:35:86:54:61:4d:09:
                    74:98:4a:0b:22:08:d8:0d:91:6a:a4:b5:b0:39:8b:
                    16:6e:8c:f3:5d:6a:d3:a8:a3:0c:29:7a:21:4c:a5:
                    64:3f:3f:f9:b0:60:40:7c:ec:34:a6:e6:52:60:ae:
                    44:22:0e:88:6c:80:1e:34:5a:ae:ba:f5:84:e9:56:
                    b8:6d:f7:8a:85:28:94:2b:7e:0f:ef:b7:ba:f8:1c:
                    cd:86:bf:f6:1c:4c:6a:4a:e4:15:85:b9:dc:ac:eb:
                    aa:73:c4:c7:80:7e:52:47:2e:70:28:13:a0:5d:3c:
                    a9:35:8e:96:e2:d0:d7:fb:98:0d:0e:81:92:82:b6:
                    05:8e:2c:8d:e9:4e:9f:4f:16:5f:b9:6c:2d:a7:17:
                    e0:a6:ee:1c:71:20:fd:f2:fb:dc:4b:26:df:4e:ce:
                    55:cf:ff:d2:6a:ad:1a:47:2c:b6:8a:44:50:ae:db:
                    21:e7:24:00:79:b3:a9:ee:6c:7e:e5:05:0f:25:ed:
                    a4:c6:0b:31:84:62:ff:dc:57:62:84:c9:cc:e5:97:
                    a0:b5:a5:8c:65:14:00:72:64:56:3e:96:a3:1a:ec:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:D7:AD:20:1A:52:89:04:46:52:C7:4F:1C:E9:79:0A:CB:66:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/8b368cf8-59a1-3e70-ab05-225fd8aa7ac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/c094d447-bba2-4063-89a8-82526852f242.crl

            X509v3 Authority Key Identifier:
                keyid:28:A9:2F:93:1A:8C:B2:7F:28:D5:5E:F0:7F:5C:4C:F4:5C:B8:96:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:72:af:d4:5f:70:47:53:f7:27:d4:5e:7f:61:02:06:5d:f3:
         52:96:eb:74:f6:f5:2f:57:89:13:14:0c:e1:2d:84:5e:f8:09:
         e0:ee:dc:77:ec:41:c4:79:77:04:c6:ff:83:68:50:18:4c:e6:
         a7:1e:41:fd:6e:fc:71:09:56:25:b8:13:01:2d:6c:ab:0d:ed:
         5a:00:90:cd:78:fe:ee:06:fc:7b:5d:31:4e:2b:76:92:a9:f3:
         0e:e2:3a:f6:1f:01:bc:c9:20:67:c3:ae:e5:da:0d:31:03:eb:
         51:70:a1:11:a5:4e:31:ed:be:9e:88:c9:71:46:79:7c:b7:36:
         a8:60:ed:ce:11:87:13:01:a9:e7:d7:bb:bf:70:c2:b3:66:46:
         44:5b:b7:b7:39:99:61:f5:d9:27:37:d7:a4:0f:d5:ee:d3:01:
         5a:d8:9b:63:a8:74:45:9f:73:87:a1:56:c7:d9:d9:7c:66:b5:
         0a:fe:ff:02:80:5f:35:09:92:e5:24:a1:e9:d1:84:d4:17:15:
         5a:31:6c:11:f1:a1:2a:67:2b:4e:c1:39:35:76:ad:4b:df:72:
         fe:be:25:af:a1:36:38:0b:3b:00:41:e4:88:85:9c:2b:71:91:
         91:b1:e8:9d:8a:46:0a:96:5c:d3:f9:c6:ca:6c:da:fd:40:a1:
         9d:37:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:39:12 2026 by rpki-client