Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/c71fc4c0-d11b-35c9-955a-43eccdb1143e.roa
File:                     c71fc4c0-d11b-35c9-955a-43eccdb1143e.roa (raw, json)
Hash identifier:          m5+xINhVdyXgjCAoVex5K3GBjbdXHYRH7WxYVtLBzmc=
Subject key identifier:   57:39:6A:1C:1F:F7:EB:FC:68:03:F6:6A:11:66:88:95:2D:AF:51:99
Certificate issuer:       /CN=3057ebcb-33e6-4734-8aed-0486104b2865
Certificate serial:       010D0C9F4328584F4BE87A9D5A68BE0459BF7780
Authority key identifier: 83:B3:A8:7D:FF:77:85:F1:23:CF:48:8D:B9:DA:81:F6:A2:8A:0E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/c71fc4c0-d11b-35c9-955a-43eccdb1143e.roa
Signing time:             Fri 25 Sep 2026 22:09:30 +0000
ROA not before:           Fri 25 Sep 2026 22:09:30 +0000
ROA not after:            Thu 24 Dec 2026 23:09:30 +0000
asID:                     401673
IP address blocks:        23.164.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:e8:7a:9d:5a:68:be:04:59:bf:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3057ebcb-33e6-4734-8aed-0486104b2865
        Validity
            Not Before: Sep 25 22:09:30 2026 GMT
            Not After : Dec 24 23:09:30 2026 GMT
        Subject: CN=edc86cf3-c30b-4f7b-8578-84b49460a9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:ac:3d:c1:74:05:30:28:5c:65:64:25:c0:
                    37:f7:fc:66:2b:ce:df:e9:33:08:9b:1f:7d:e1:ca:
                    58:06:d3:3f:5d:f3:f4:77:2c:d5:fd:63:db:0b:c0:
                    11:ee:b3:ff:2c:d3:53:dd:3b:3a:d3:27:db:e5:c3:
                    77:8f:62:6d:c2:b3:97:77:5c:2b:93:31:49:84:2f:
                    21:ad:e0:ef:58:26:8d:1b:7f:b4:6b:05:24:76:d4:
                    08:ca:24:f5:93:8d:0e:87:8f:26:f6:71:2c:7f:b6:
                    83:16:cb:1f:39:37:b1:d3:b5:65:15:a5:6f:22:2b:
                    4f:10:3e:a4:71:36:de:54:9a:90:fc:e2:d6:af:d3:
                    1f:7b:31:a4:3e:20:6c:2f:b2:66:64:e3:db:e1:7e:
                    90:a9:47:ef:54:e3:65:ed:02:64:42:f2:24:d3:45:
                    61:b2:cb:70:23:12:7c:25:f9:b8:a1:7a:9b:87:2d:
                    1a:37:76:45:73:d6:b8:66:e4:e3:86:98:15:cb:33:
                    e9:81:8c:31:ba:33:10:8d:26:ba:c4:d8:3b:b8:81:
                    b7:c0:1e:e8:8c:1b:50:25:e2:f8:45:09:a2:a7:63:
                    b4:bf:4e:90:5f:af:85:53:a5:01:82:3e:65:3d:c8:
                    00:75:b0:e4:76:94:fb:38:eb:31:e1:0d:cb:21:86:
                    1a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:39:6A:1C:1F:F7:EB:FC:68:03:F6:6A:11:66:88:95:2D:AF:51:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/c71fc4c0-d11b-35c9-955a-43eccdb1143e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865/3057ebcb-33e6-4734-8aed-0486104b2865.crl

            X509v3 Authority Key Identifier:
                keyid:83:B3:A8:7D:FF:77:85:F1:23:CF:48:8D:B9:DA:81:F6:A2:8A:0E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3057ebcb-33e6-4734-8aed-0486104b2865.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:05:3e:c8:41:16:5f:82:a4:78:f7:c8:b7:76:6b:2b:26:d3:
         0c:d0:72:6d:ea:b4:ff:ec:bc:04:e6:53:b9:a1:d2:31:78:9d:
         62:17:42:92:a4:aa:12:8b:33:4c:20:45:a7:87:9f:cf:8e:3a:
         f9:50:ad:29:be:ae:c1:67:5f:4b:9f:52:ba:4a:fd:98:a4:ea:
         82:1b:41:21:57:60:b7:e2:45:f3:ff:fc:41:ae:d2:c2:03:a1:
         65:7f:b6:f2:52:2d:0c:41:af:1f:c8:65:af:64:ad:f4:25:58:
         01:12:08:54:b6:03:09:a5:8a:96:5e:19:f8:44:13:53:06:ee:
         3f:6b:f2:71:8b:1f:82:56:e4:69:f7:bb:4a:e7:30:73:4c:50:
         b5:6d:9a:9e:e6:2f:72:99:75:bc:fd:32:be:63:87:fd:2c:12:
         d0:16:97:57:24:29:a3:4c:02:08:87:bc:36:00:09:09:b7:ce:
         2d:d4:b1:9a:42:64:ee:0b:60:c1:b4:50:cb:6c:ce:a1:48:67:
         32:71:63:40:20:ef:a8:db:ba:c1:c6:cd:15:0c:35:1c:cc:97:
         aa:06:59:01:a8:df:5d:e3:02:ae:a6:16:05:d6:14:a8:52:07:
         4c:06:5c:d1:8c:22:10:14:3d:dc:45:93:14:dd:c2:cc:eb:ce:
         5b:e7:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:41:50 2026 by rpki-client