Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa
File:                     a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa (raw, json)
Hash identifier:          JiRH91sEHfpVemOHcJ8yYnhO7WGS0Y5WlTV8byw0beI=
Subject key identifier:   38:6F:4E:C9:A7:46:1C:00:87:2B:7F:FD:96:FC:78:68:3F:93:F3:53
Certificate issuer:       /CN=457522b0-cf44-4757-ac16-6215c2516e52
Certificate serial:       010D0C9F4328584EDDF73421289CE25331C30F00
Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     401890
IP address blocks:        23.143.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:34:21:28:9c:e2:53:31:c3:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=8ad3d4fa-4c5e-4d32-b6a5-53e0033d6ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:d4:c9:90:6b:27:ee:ec:1d:98:d8:e9:8d:
                    a4:5b:bc:6d:7d:f5:c4:52:8f:46:d6:66:92:d5:25:
                    48:24:91:95:6f:c3:40:cb:b7:80:37:f1:df:5f:8e:
                    14:0c:a4:b4:86:3a:b0:df:d0:3c:30:4f:0d:67:f9:
                    48:77:89:1c:ae:b5:ff:fb:7f:bc:9c:97:89:06:45:
                    be:1d:a6:39:08:ce:cb:9b:a7:4a:27:92:ab:b6:16:
                    6b:42:56:fa:70:dd:9d:1f:0c:fd:a4:7e:83:73:31:
                    40:07:76:7c:1b:99:08:39:08:5f:47:b4:e4:cb:47:
                    e9:ab:a6:a7:b3:f3:cc:38:91:89:0a:35:44:38:b5:
                    81:3a:f9:b7:e3:33:81:62:a3:8f:3b:b3:90:c1:e4:
                    bf:d3:51:bc:7d:ef:a0:b0:8e:4c:1f:d1:7f:6a:2a:
                    1a:8f:9f:12:96:3b:fb:26:d5:3a:84:99:0d:39:48:
                    3d:50:b3:6f:05:85:c4:84:bf:dc:5f:90:22:29:95:
                    99:8d:d0:de:30:2b:e8:a7:85:a5:5d:dc:a1:a4:bf:
                    af:23:bd:8e:d6:df:14:a5:25:02:b5:a2:91:de:59:
                    44:51:e3:78:4f:a3:3e:f9:95:d6:14:72:31:43:7a:
                    55:1b:44:c7:bc:35:5e:09:70:df:bc:50:9c:df:3f:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6F:4E:C9:A7:46:1C:00:87:2B:7F:FD:96:FC:78:68:3F:93:F3:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl

            X509v3 Authority Key Identifier:
                keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:22:f8:1b:8a:33:89:e7:f7:50:f3:d0:fe:d6:82:6d:7a:
         ac:23:57:14:d1:dc:3d:f2:b3:0d:c4:1a:31:7e:fd:b5:3d:c9:
         ac:2e:e1:bc:b2:60:da:ca:22:e9:02:d0:a4:c2:01:9d:15:77:
         59:ef:78:b2:c8:e7:54:20:b4:34:94:f6:d2:22:93:b6:18:7f:
         b2:7c:60:3a:eb:cc:3d:13:0e:a4:5d:c7:e6:a5:50:e8:bc:c0:
         0f:50:47:bb:d7:3a:c3:40:b5:51:ee:5b:6c:73:bb:c9:22:39:
         95:51:ef:4e:25:fc:f9:3f:1f:f4:97:fa:2e:49:26:55:21:c4:
         0a:d6:49:0e:5d:13:e8:ef:91:08:10:e2:ce:2e:08:82:22:0a:
         b3:0d:ab:a7:1b:b6:81:05:ec:5a:47:7f:0c:b2:be:bc:db:ef:
         24:7e:44:79:2f:4c:67:b6:e7:a3:0d:6e:e1:2c:e9:b0:80:9b:
         69:44:ad:b0:18:af:dc:22:96:bd:41:7d:38:0c:fb:ae:e1:35:
         4c:20:db:1c:10:a4:9c:9c:42:9e:36:bd:d4:b7:70:53:e9:f5:
         49:1d:d3:8b:2d:18:19:e3:3f:02:a1:0f:4d:09:d9:d4:b6:82:
         b2:1f:a1:45:16:9d:16:2a:1d:14:f8:b3:07:70:b2:fb:96:3b:
         18:d2:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:05:13 2026 by rpki-client