Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78feb5-5ee6-3735-b150-a3fc7dda54ee.roa
File:                     7a78feb5-5ee6-3735-b150-a3fc7dda54ee.roa (raw, json)
Hash identifier:          P9JoUWyNCwIwlgtXraW5nLkqX+5/c2WBtW0KTlc6wqo=
Subject key identifier:   75:A0:F4:E5:9B:23:5C:65:78:91:07:EB:E7:CE:AC:6E:CA:50:F2:09
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F43DD2B9D59CF190BB394C000
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78feb5-5ee6-3735-b150-a3fc7dda54ee.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        8.23.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:2b:9d:59:cf:19:0b:b3:94:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=73bb88dc-af1e-4347-a303-736195c6e954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:5b:d8:58:96:bd:eb:26:a1:c9:47:c3:3d:
                    4c:50:04:f3:be:47:9c:f7:76:cb:c5:dc:0e:66:ae:
                    5b:87:da:07:24:b1:f5:56:8b:3d:3e:17:57:ce:79:
                    d4:fb:ee:2c:1c:80:83:bf:50:7d:e7:c0:2c:9f:94:
                    b0:5f:38:69:e7:45:bb:9b:50:8a:27:bd:79:28:ac:
                    62:8c:49:63:26:f9:45:be:a7:e8:88:37:91:d4:8c:
                    8f:49:5f:d8:5f:4c:2b:3e:3f:78:55:5e:45:2e:d6:
                    1f:de:96:72:b8:ec:c3:98:30:a8:58:f2:bd:ab:ed:
                    74:c1:de:f3:c5:a6:a3:fd:64:42:93:1e:ed:23:de:
                    d6:0c:d2:26:43:4d:7b:6a:73:ee:55:03:2b:d4:82:
                    2b:c0:d3:10:2c:8c:dc:ec:19:8a:44:e9:1d:7e:73:
                    97:f7:57:37:15:c0:62:09:11:1f:7d:41:47:f9:97:
                    f8:b3:0f:96:3f:41:cb:91:a6:9a:97:ec:39:f9:fd:
                    c5:62:3f:37:3a:21:80:56:3e:63:66:94:4e:11:b4:
                    b9:0d:8c:0e:52:cf:da:ce:53:b5:cf:78:95:96:b9:
                    bc:e4:e3:ee:e6:41:30:bc:70:f8:af:f1:87:b0:b2:
                    e4:08:95:65:c4:31:56:16:d6:63:33:c9:74:c8:57:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A0:F4:E5:9B:23:5C:65:78:91:07:EB:E7:CE:AC:6E:CA:50:F2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78feb5-5ee6-3735-b150-a3fc7dda54ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.23.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:89:8c:19:8f:14:78:b6:46:7d:49:3c:55:67:51:ca:72:37:
         7b:72:58:c6:e2:9f:1b:c6:eb:34:91:95:06:3b:cd:68:0a:df:
         78:0e:f4:f7:cf:6b:a9:a2:70:ce:8b:d2:93:07:1e:5f:37:02:
         0a:64:5b:2b:0c:f4:a0:41:30:7c:b7:e8:2e:5f:5e:8a:3a:21:
         40:42:60:48:b1:07:ef:84:0a:90:60:99:1a:10:36:60:82:cc:
         96:d3:9f:77:b7:88:e2:b8:6b:0e:8a:05:1b:be:b3:28:60:ae:
         ba:48:81:ca:20:85:5f:d0:a4:3a:da:7f:9d:85:38:e4:d0:23:
         16:9b:01:f2:a2:f0:4c:b8:ff:4b:01:ea:2f:c4:3a:2d:f4:1a:
         9a:af:d9:d1:43:8a:f6:b1:fe:2d:10:ba:ad:b0:e9:b8:3a:15:
         48:b3:36:68:bb:02:dd:fa:b7:06:b8:e0:20:d7:fb:00:2e:42:
         68:0d:0e:d2:fe:9d:60:5e:7f:45:c2:8a:e4:4f:e1:23:2e:75:
         dc:3f:2c:3a:c8:6d:06:6d:d9:06:ec:32:79:c6:47:9e:78:49:
         f7:74:aa:16:45:1c:b8:ab:41:67:92:68:92:56:21:2d:eb:b4:
         5d:66:64:d4:bc:cb:03:75:f9:30:35:27:d0:21:a7:f5:e8:27:
         87:7b:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:35:35 2026 by rpki-client