Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa
File:                     a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa (raw, json)
Hash identifier:          SGwPs6V5oY3yEVOaJD63wmYMikE4rtQGMibsK+X2wDQ=
Subject key identifier:   0F:02:24:1F:14:8C:D5:4D:BC:DD:C3:DB:B1:6B:6E:B7:90:C8:1C:57
Certificate issuer:       /CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
Certificate serial:       010D0C9F4328584FAB288EE31FC2A9B5EC64CF20
Authority key identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     396879
IP address blocks:        23.252.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:8e:e3:1f:c2:a9:b5:ec:64:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=109b6557-b989-431b-b4ac-1ab9a0f2be4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:d6:cc:ce:29:eb:c7:10:d2:b5:12:77:14:
                    d3:53:35:d1:83:93:6a:9e:1d:72:31:45:8e:be:c2:
                    d4:a9:2b:d1:8e:93:f3:2f:e4:d0:09:87:1e:37:ec:
                    ca:92:09:39:ea:ec:1a:48:a7:28:71:51:5b:b2:9a:
                    02:20:05:3f:27:38:4c:e2:85:c6:ab:bb:a1:3d:84:
                    06:27:5b:6a:1a:f4:56:44:e2:86:92:84:1f:c1:11:
                    69:97:33:42:52:8d:55:86:47:9d:3c:e1:a3:f4:c1:
                    35:4f:2e:98:d7:80:8d:ec:b0:d0:e8:82:08:a3:a9:
                    a5:87:66:78:2a:16:20:4e:39:cb:8f:e2:8d:85:2b:
                    79:30:6f:1e:4d:33:6a:f9:de:a7:ce:ca:cf:6f:d8:
                    9d:5c:88:f8:f2:b7:a5:71:4f:fb:5f:cf:d3:ad:50:
                    79:42:2b:f3:f8:bc:49:94:d6:e8:e7:db:1c:a9:e7:
                    e1:92:0e:38:ef:8e:e0:97:34:d5:28:fb:b4:19:d4:
                    b4:bb:01:71:e1:38:b2:30:e7:56:a7:73:86:1f:7e:
                    23:f6:c2:f2:4d:0d:43:df:38:9e:85:74:f8:a1:fe:
                    82:3c:7a:71:26:a0:cb:aa:f2:7b:d9:14:15:56:69:
                    94:97:63:9e:0b:c3:64:4f:06:6c:c1:b8:83:15:a1:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:24:1F:14:8C:D5:4D:BC:DD:C3:DB:B1:6B:6E:B7:90:C8:1C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl

            X509v3 Authority Key Identifier:
                keyid:68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:0f:ad:55:0a:07:dc:a1:42:9d:6d:6e:d3:b9:d6:59:53:
         99:41:f3:43:04:65:41:14:d7:bb:8c:90:53:9e:c3:02:56:e7:
         ea:9e:43:33:cb:21:81:1d:ca:03:ab:84:65:95:d5:39:c8:cb:
         f9:41:a0:42:68:e7:bb:dc:65:1e:06:45:95:5c:82:cf:fe:07:
         0d:01:4b:70:b7:e0:fc:4d:6f:8f:4d:b7:6a:23:44:05:09:e7:
         06:76:75:87:bc:82:e7:ff:5b:bc:21:60:ca:77:fd:94:f2:dd:
         b8:10:ed:b1:32:6e:6e:ce:d3:58:51:b3:7c:29:c2:1d:04:b5:
         6c:ea:01:99:af:58:f3:e6:67:1e:4b:e9:4d:1e:48:f2:55:52:
         d7:c4:76:22:5a:ac:53:a1:ae:46:20:12:1d:61:9f:9c:27:2f:
         53:17:74:fe:68:65:2b:33:b3:55:3c:61:f9:a3:f0:d6:0f:4c:
         1f:67:be:6c:5a:d5:05:c4:06:1b:d0:ed:34:fa:f3:f3:2d:55:
         fb:ba:3f:76:65:cf:fa:45:bd:59:81:15:69:b7:7f:bf:c1:92:
         81:92:49:87:3f:95:d5:3d:be:12:ea:a4:ff:a6:37:86:b1:d7:
         e1:77:8c:d2:59:21:21:29:ee:d2:29:b2:6f:d0:28:94:b2:dd:
         5b:fe:c0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:54:21 2026 by rpki-client