Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/be79abf8-beba-38e3-a7df-b61dc8164cc7.roa
File:                     be79abf8-beba-38e3-a7df-b61dc8164cc7.roa (raw, json)
Hash identifier:          XUl89fWC8g4CPIT/5V4kDlOaHs4k5DV2wvltjX2xgLI=
Subject key identifier:   F4:89:4A:06:B7:A6:99:F3:5F:4F:84:53:FB:39:22:1C:02:D7:BB:2D
Certificate issuer:       /CN=b1896033-ca2b-44a4-b67f-7160d614cf31
Certificate serial:       010D0C9F4328584EED523DCFC87A50C25C7B65C0
Authority key identifier: 58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/be79abf8-beba-38e3-a7df-b61dc8164cc7.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     12186
IP address blocks:        23.138.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:3d:cf:c8:7a:50:c2:5c:7b:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1896033-ca2b-44a4-b67f-7160d614cf31
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=580f5933-5211-44de-a87a-9028dbf68155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:0b:82:e8:e5:3e:1b:91:ad:67:33:94:ae:
                    2b:61:ee:81:90:40:65:01:70:86:56:c4:bd:ff:fc:
                    0c:ad:4c:44:9a:fe:3e:78:b5:83:92:fd:cb:e9:8b:
                    cf:fc:c3:94:27:12:a3:96:8f:51:c1:bc:65:d1:22:
                    ca:7a:8b:66:1e:ac:36:cb:c4:a0:55:62:68:6d:1c:
                    2d:cc:b9:73:9b:5c:36:77:49:23:8b:12:09:98:82:
                    c9:3c:71:31:b0:3a:b9:8e:ff:12:49:01:a5:c7:b0:
                    b8:87:99:c4:9e:44:75:f4:de:a9:21:bd:a1:26:e7:
                    71:d1:e9:72:de:4b:05:77:22:27:1d:21:bf:c0:93:
                    f9:73:9c:45:7c:a5:c5:6e:6d:1f:42:c8:3f:ef:ef:
                    39:b5:bb:b4:b8:8f:6a:88:df:6b:5a:cf:f1:e6:19:
                    0b:c5:7a:b9:bb:a0:d1:42:ad:e5:c0:21:43:2f:e5:
                    4f:3d:be:2c:e2:b8:c5:3a:8c:13:ff:44:d0:f0:64:
                    62:c3:17:27:87:ff:81:d1:96:ee:2a:0b:71:97:41:
                    c7:d7:06:cf:5e:c4:fb:49:f1:19:05:a3:35:f3:83:
                    9c:3a:49:ce:fa:32:64:00:47:1c:40:3b:79:31:10:
                    df:48:41:0f:8b:bd:ec:6a:d2:5c:57:ef:cd:97:df:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:4A:06:B7:A6:99:F3:5F:4F:84:53:FB:39:22:1C:02:D7:BB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/be79abf8-beba-38e3-a7df-b61dc8164cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl

            X509v3 Authority Key Identifier:
                keyid:58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:33:91:df:76:75:94:b0:95:e0:e6:7f:e8:3c:14:ec:d7:
         74:87:a9:05:35:6a:db:68:55:d6:39:ca:51:f6:25:c7:73:cf:
         06:14:c9:7d:5e:37:d3:7d:de:ad:88:79:a4:e9:fb:c6:9a:fd:
         9b:65:d7:6c:5a:df:e2:a8:25:ab:fb:26:8d:02:c5:29:0f:ba:
         8b:d0:02:df:0a:2b:a8:74:99:d8:52:8c:5c:fc:50:52:c4:4e:
         5e:a3:d2:66:54:35:5d:7c:5b:d2:57:b1:4d:68:46:07:34:e4:
         15:54:e6:24:93:b1:73:a9:2c:d1:4b:08:71:0f:9a:0f:7d:33:
         b7:d1:4b:9e:38:92:5b:e3:14:ef:3d:a7:09:46:e6:3e:ae:f2:
         8a:34:14:64:f9:51:f5:ce:d9:ca:54:4b:95:c1:ae:9c:70:01:
         97:22:07:e2:26:77:dc:f4:f7:96:f3:1b:74:79:da:d3:4f:d1:
         a6:9c:e9:dc:4d:a7:e7:f7:48:dd:75:e5:b7:7a:ff:79:41:55:
         18:63:84:61:77:c1:b0:22:3c:09:86:f2:09:4d:5e:50:20:52:
         e9:3c:44:4b:31:ee:e5:73:fe:9e:f2:d9:9d:82:72:2d:74:58:
         c8:3f:16:cb:36:20:fd:0a:cb:55:47:cf:8b:3d:fa:f1:ed:93:
         30:f2:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:43:55 2026 by rpki-client