Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/938477fd-85e0-3d06-aa88-9b612c56c9c5.roa
File:                     938477fd-85e0-3d06-aa88-9b612c56c9c5.roa (raw, json)
Hash identifier:          ghk+raNhA4+D01aGvIt6rgMyVub0DuHF1kqbTv92bPQ=
Subject key identifier:   25:7C:F4:87:C6:7E:3A:CA:FE:F8:95:4F:1F:F0:D5:CE:E8:E6:DE:F1
Certificate issuer:       /CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
Certificate serial:       010D0C9F4328584F71ED83B6A3ACF1EDA7549980
Authority key identifier: EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/938477fd-85e0-3d06-aa88-9b612c56c9c5.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     401880
IP address blocks:        23.155.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:83:b6:a3:ac:f1:ed:a7:54:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=75b182be-4851-4d80-bec2-61fb30808c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c9:8d:85:10:2a:60:97:b3:26:5a:3d:73:58:
                    2d:23:9f:ee:06:36:a5:09:b0:5d:d7:d1:97:18:26:
                    ba:18:cc:0f:02:50:0c:28:36:d3:ef:6b:8e:7a:c4:
                    8c:57:7b:d5:b3:78:55:01:54:be:d5:56:ac:21:b5:
                    e9:53:46:54:49:8b:27:df:89:32:bb:db:42:6f:d6:
                    1e:ce:93:8a:08:6d:15:52:c5:af:43:0e:9e:0e:8b:
                    0e:04:33:d0:1c:29:58:13:82:73:b2:71:20:93:c1:
                    8f:62:5a:60:32:b6:51:dc:92:6b:71:fe:19:c8:fc:
                    d2:ba:0b:ee:c8:10:e3:1f:6c:20:28:9f:6b:0b:57:
                    a7:7b:80:18:3e:24:9f:b8:86:58:ad:c8:1b:7f:94:
                    1d:b9:2c:33:a4:7e:2c:d6:6e:c9:29:be:1c:b7:8f:
                    d6:81:9c:71:d9:4c:f1:84:f9:6f:97:3e:37:45:04:
                    4d:27:aa:a9:5c:41:8a:07:8a:bc:5d:2c:05:06:af:
                    07:71:f0:16:83:70:c6:b9:88:de:cc:30:a0:1d:35:
                    0a:b7:f7:23:01:a3:99:73:d8:db:e2:32:6b:a4:f4:
                    77:fe:70:d9:1c:54:17:ca:3d:e9:c6:52:f3:75:e6:
                    23:8f:6a:7d:b1:1e:73:eb:05:82:0b:ae:99:74:28:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7C:F4:87:C6:7E:3A:CA:FE:F8:95:4F:1F:F0:D5:CE:E8:E6:DE:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/938477fd-85e0-3d06-aa88-9b612c56c9c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:9a:fe:d9:a5:94:70:e4:3d:5e:6a:3b:40:54:27:87:7e:
         ac:25:a4:bd:a4:46:b5:7b:37:d7:de:c7:b0:27:a2:d2:de:ec:
         23:d3:27:be:02:c5:8a:57:4a:7d:8d:89:6a:2e:fb:cd:0a:5e:
         e6:9c:37:a2:9a:96:ef:b4:f6:ea:a3:e3:d1:7d:10:b1:f0:e6:
         2e:cc:77:9e:9e:bc:66:32:51:f5:1a:e1:0d:47:36:e2:42:b7:
         3b:10:d9:a9:b6:ae:0b:e0:24:98:5d:67:bc:ce:af:ec:b9:d2:
         4f:0b:76:c7:72:df:ce:33:43:3b:57:89:c9:23:38:4b:e2:be:
         51:5e:75:8f:c3:18:12:8b:78:a1:b5:eb:be:04:5e:e7:78:e4:
         d3:6f:fd:40:d3:90:62:57:f9:fe:27:40:26:94:8e:98:c3:ba:
         d5:44:c9:3a:5c:82:14:84:8f:7e:d2:8a:e2:4d:52:db:57:bf:
         a0:79:c1:ef:1c:68:7a:72:cd:54:d9:ac:21:49:8b:0b:51:02:
         18:de:83:7c:67:55:06:7f:c8:bf:69:d8:8a:ac:e5:c5:7f:8c:
         ec:8f:97:03:10:1e:ed:72:d4:5e:7f:fc:3e:78:a3:0c:10:1c:
         6f:d5:74:fb:59:9c:cf:64:b6:7f:1b:c9:d2:75:f2:76:d6:e6:
         fd:a5:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:34:19 2026 by rpki-client