Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b6c931f3-eb3f-32b5-b0bb-d2c271c4ec9c.roa
File:                     b6c931f3-eb3f-32b5-b0bb-d2c271c4ec9c.roa (raw, json)
Hash identifier:          fxIkKOlN2kV3p0DrEtsd+KelF8v65OTMjUDftPNxqOg=
Subject key identifier:   CB:55:F3:F4:E4:0B:22:DD:76:68:11:40:82:B1:42:21:86:79:93:75
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F43DD3F989E57400A443A5B80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b6c931f3-eb3f-32b5-b0bb-d2c271c4ec9c.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     11842
IP address blocks:        24.75.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:3f:98:9e:57:40:0a:44:3a:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=bff4fb07-3bec-4b36-9d9e-7a68e4f1c46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:94:0c:e9:75:62:49:19:57:cf:77:1c:14:
                    76:3f:55:f0:47:e6:3c:0b:3e:f0:64:80:0c:28:f4:
                    31:4b:0c:6d:72:cb:c0:9c:95:07:01:09:eb:10:e0:
                    bd:d6:0f:77:f6:a5:7f:9e:2b:65:97:a0:e1:32:d4:
                    7a:d2:71:db:43:17:3f:cb:95:e4:ac:84:5f:e3:98:
                    7f:8a:87:d8:a1:aa:d3:77:dc:30:43:a2:2f:98:e9:
                    c4:8a:fe:c9:e7:e1:a1:90:7d:be:d9:fc:ef:6e:3b:
                    70:97:7d:f9:6c:b3:cd:d5:a4:53:50:f6:8b:d8:7b:
                    34:5c:56:6f:8f:65:e6:83:0e:06:7a:e6:8e:0a:32:
                    20:32:37:13:e4:0b:d1:82:88:ed:98:97:18:05:a9:
                    a9:73:db:a5:15:65:0a:8a:3d:74:04:8f:77:7d:c0:
                    01:11:f8:27:fe:68:94:b7:d9:1a:57:08:83:ef:7d:
                    55:5c:44:47:8e:b8:89:71:70:50:75:7c:73:7c:63:
                    4d:aa:c7:87:bc:b7:74:67:08:73:84:7b:54:45:72:
                    9c:85:17:5d:00:5e:22:fc:4d:1f:cb:a2:e8:0c:0b:
                    da:99:68:b7:52:61:38:15:ff:dd:92:13:6a:de:23:
                    e2:f9:37:f6:2a:4a:b4:77:67:06:00:cb:8c:ee:14:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:55:F3:F4:E4:0B:22:DD:76:68:11:40:82:B1:42:21:86:79:93:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b6c931f3-eb3f-32b5-b0bb-d2c271c4ec9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.75.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8a:8a:43:11:f0:8f:f3:ae:19:ba:de:6d:d4:fd:0e:63:f9:
         f6:ce:3f:fc:22:d7:de:db:c7:05:a8:e9:99:f8:3a:60:5f:d7:
         76:52:20:a6:22:d5:d2:20:21:14:e6:60:01:a4:a6:82:56:f0:
         2c:7d:d5:05:29:e1:e8:cc:72:88:b8:79:44:2e:39:9d:bf:72:
         55:00:ed:09:b5:76:22:5a:cd:97:66:92:26:73:dc:e3:61:ca:
         e9:d1:37:5b:3f:2c:47:95:fb:82:98:0f:43:b5:6e:57:f4:ea:
         f7:de:cf:75:7f:92:46:78:24:bc:4a:fc:ec:8b:9d:90:7c:5e:
         40:3f:7b:a0:5a:d7:16:d4:c2:fc:e2:57:5d:72:1f:fc:6b:5f:
         af:c8:3c:e1:0b:1f:ec:e5:7e:eb:cb:19:bc:19:f7:22:12:91:
         24:94:0b:58:a5:12:56:99:8e:3b:3f:b2:5f:45:a6:cd:59:d2:
         7f:a1:b1:84:3e:f8:61:e2:59:ec:cf:92:88:e5:54:02:f7:d5:
         96:21:57:ca:6e:8d:73:64:8d:dd:91:fe:3a:29:4e:06:8c:9a:
         93:16:f0:e4:81:8b:a4:57:c6:ee:14:fe:4d:65:03:5a:cf:86:
         c3:94:4d:3e:e1:45:62:26:53:97:23:b3:9b:94:6b:af:c5:d2:
         6f:05:d9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:52:42 2026 by rpki-client