Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/463a9414-25f9-3421-b298-58711f1d3d08.roa
File:                     463a9414-25f9-3421-b298-58711f1d3d08.roa (raw, json)
Hash identifier:          kKW+aJxJefoQysc4BpvVFEJ90k0TH3V2uJpbFDPL4Ms=
Subject key identifier:   42:92:BF:10:08:E3:E6:F9:3D:CA:BF:A7:31:F1:B2:B5:34:C9:16:85
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F43DD6092BBDC8374E77404C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/463a9414-25f9-3421-b298-58711f1d3d08.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     399654
IP address blocks:        8.41.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:60:92:bb:dc:83:74:e7:74:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=8f63a7c7-2143-4746-b6f1-9d925ac1222f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:e6:75:e3:d6:d8:4c:09:fc:dc:fb:ff:df:
                    5c:e5:23:3a:4c:8a:de:21:d7:14:8c:ca:a5:38:04:
                    23:c8:59:b0:1f:64:69:40:01:dc:5a:3b:3f:64:a0:
                    b2:42:89:64:16:5b:15:8c:f5:d7:da:bb:27:73:c1:
                    b5:11:b5:06:c9:3a:3c:0c:9f:eb:80:da:ee:0c:18:
                    4f:ba:f9:26:9c:9b:e2:56:ae:d5:be:d4:95:55:e5:
                    19:72:c7:97:6a:35:ff:29:a4:9d:17:8f:d0:06:37:
                    e4:30:d3:1c:53:62:c8:aa:b6:05:5c:2a:92:17:05:
                    fe:18:3a:93:c8:4a:45:f9:40:b3:c5:83:8a:41:8d:
                    b9:27:c0:1d:0a:5a:28:d4:15:f7:2a:79:e8:c6:34:
                    3d:f3:72:00:75:86:69:f4:01:c4:3f:a8:95:07:08:
                    75:0d:41:35:07:ef:7f:1b:4a:6d:0c:50:2b:ea:0f:
                    96:3a:57:40:65:62:30:69:1a:2b:cd:05:42:99:5b:
                    77:70:d0:3a:da:b9:7a:b7:e4:f2:e7:42:68:f9:c1:
                    34:d7:67:7e:0e:cc:57:0b:60:7b:55:5d:d4:32:f7:
                    a8:05:8d:c0:2e:0e:10:5c:78:f0:0a:1c:ef:f0:58:
                    12:ae:cb:1a:b5:18:52:e7:9d:eb:18:bb:a1:14:65:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:92:BF:10:08:E3:E6:F9:3D:CA:BF:A7:31:F1:B2:B5:34:C9:16:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/463a9414-25f9-3421-b298-58711f1d3d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.41.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:bc:71:38:f3:8d:34:e8:db:b7:43:88:69:a9:46:d4:ad:33:
         8e:7a:c4:bd:1f:94:e8:6e:59:5a:70:30:46:01:7c:84:7f:f8:
         15:57:cc:b2:5d:cc:c4:7f:7d:eb:db:bd:51:00:87:0e:32:da:
         58:57:0b:9d:82:62:d2:fe:04:68:50:88:2a:55:49:a8:0a:f1:
         b7:ef:34:56:a4:96:05:4b:0b:a9:52:44:61:64:a4:9e:95:54:
         95:82:ec:77:70:0c:d9:6c:e4:17:8b:07:d4:dd:2e:4d:be:82:
         a4:d0:1f:8c:13:51:2e:c8:c5:d2:71:ef:c3:15:d4:aa:aa:01:
         82:dd:08:e4:87:8b:15:65:4a:c5:48:e5:8b:0c:e7:b9:27:fc:
         8b:2f:0f:3a:06:dc:6d:66:06:07:bb:d8:fe:fc:70:7c:f2:53:
         f1:7b:ab:c9:48:ff:eb:49:89:84:3b:21:33:62:26:d3:3f:c4:
         7b:5c:5d:a1:52:bd:62:1a:de:29:ca:4f:a4:18:cd:36:fd:96:
         4e:7a:e5:3d:c9:40:d6:e2:10:92:7b:6e:ba:4a:7e:39:90:3f:
         b7:7b:fd:f7:33:15:3f:87:9c:d9:bc:55:d6:13:5e:49:4a:aa:
         3b:dc:8e:31:06:9d:7d:38:ed:5b:14:ba:ae:eb:9b:9f:3d:d3:
         54:86:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:52:46 2026 by rpki-client