Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/36c1c086-88da-3914-b0ba-47185d26c639.roa
File:                     36c1c086-88da-3914-b0ba-47185d26c639.roa (raw, json)
Hash identifier:          qSiBnFNDOtChSEicVrYjocmewDYVC2dM8j/XZ2ReVqQ=
Subject key identifier:   BB:28:9E:3F:7B:5F:A3:03:17:A1:75:FD:8D:3E:D7:BB:24:51:0E:C4
Certificate issuer:       /CN=00bdc54c-4822-4df3-99e6-85920125a480
Certificate serial:       010D0C9F4328584F4C3D65406AAD130FF5877400
Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/36c1c086-88da-3914-b0ba-47185d26c639.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     16509
IP address blocks:        23.161.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:65:40:6a:ad:13:0f:f5:87:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=a64a6c35-fc8e-411e-9cd0-71c84ea33e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:18:e1:85:3e:96:4b:34:38:fd:12:42:65:
                    fe:2c:3e:45:61:d7:a6:d0:99:7b:6e:c5:be:60:36:
                    1f:03:68:fc:f3:cf:7a:3d:67:e4:d1:e3:00:dd:ba:
                    f7:ce:bd:2f:76:68:de:25:4b:3e:44:38:06:2e:0a:
                    da:e0:4b:92:70:41:92:cc:bc:3d:07:f4:77:d7:07:
                    e3:2c:0e:7a:5a:64:74:c7:14:df:bb:ef:4d:6a:65:
                    6f:b9:b3:50:16:a2:34:2d:f3:be:d9:fa:49:54:35:
                    65:1f:65:d9:da:77:a0:99:f6:aa:c1:50:c9:f4:00:
                    2c:54:fd:07:f6:54:b8:25:bf:26:5d:30:b4:70:03:
                    32:45:d8:7f:c1:d5:c2:db:63:01:61:31:fa:40:50:
                    44:9b:f9:1f:3c:c5:16:e4:e6:6f:80:90:71:90:09:
                    52:c6:9e:47:e2:69:e5:21:09:d2:73:88:79:c0:0e:
                    bd:67:06:59:3f:4e:ae:47:84:1b:b2:11:17:a7:2c:
                    22:f7:fa:09:91:a6:95:98:c6:f0:f0:44:ef:1f:8e:
                    4f:a9:98:d1:ea:cb:79:06:ea:82:c7:57:33:1d:72:
                    28:2d:8b:4e:43:ee:90:fd:a5:f5:2e:a3:b0:72:74:
                    25:bd:a1:12:c1:12:ba:07:26:50:62:a4:83:8b:ec:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:9E:3F:7B:5F:A3:03:17:A1:75:FD:8D:3E:D7:BB:24:51:0E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/36c1c086-88da-3914-b0ba-47185d26c639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl

            X509v3 Authority Key Identifier:
                keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:84:b1:ee:0b:68:2d:22:4d:23:bb:18:f7:3c:05:32:0e:37:
         73:9d:58:2a:0d:23:73:b8:f4:c2:4c:6d:39:d6:0d:3c:7e:e5:
         97:2f:6c:cb:e4:03:66:cc:3c:70:b6:43:ad:4d:f6:ae:cc:43:
         b4:94:76:92:12:3d:90:8d:35:46:1b:53:de:cb:08:d5:59:25:
         8b:c2:75:8d:aa:f9:3d:b4:8b:c8:bb:c5:25:31:c8:08:34:e7:
         69:4a:6a:a3:62:37:78:36:03:b8:7f:3a:96:bd:cc:04:45:2b:
         5e:b7:53:9b:a2:e3:91:b3:4e:54:48:a1:cb:dc:ee:26:fb:a5:
         4d:b7:31:3f:d0:7e:9c:dc:b0:49:7a:16:6e:71:6e:d3:d6:ce:
         9f:44:9c:fb:18:c6:0a:27:46:50:4f:e2:2a:bd:6b:2f:63:84:
         54:96:51:2d:1e:21:06:d0:21:0a:dd:7e:e0:3a:00:b1:d1:da:
         a8:6c:5d:da:1d:0e:40:56:50:9c:0d:51:36:aa:8a:31:af:d7:
         90:47:e6:e6:eb:a9:9c:db:eb:09:26:85:d8:54:e8:dd:2a:a2:
         fd:58:46:fe:38:1e:66:72:50:7a:8c:09:1f:72:8d:ae:2d:54:
         e1:b2:91:c7:41:f8:ff:bb:ce:87:dc:e1:e4:d3:ab:9c:8b:16:
         1a:66:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:02:40 2026 by rpki-client