Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/97615475-7e03-30e5-a86b-0258690153af.roa
File:                     97615475-7e03-30e5-a86b-0258690153af.roa (raw, json)
Hash identifier:          O3C5c8QG97GKJF5LmyEJ5V+1ou/KlX299wH+jlcyNy4=
Subject key identifier:   3D:6D:29:0B:E7:F0:3D:C8:1E:1E:82:20:5F:0B:51:D5:B1:6B:D4:70
Certificate issuer:       /CN=8f5572eb-07c1-491f-b1e4-6f63872a6e80
Certificate serial:       010D0C9F4328584F1302354376C55F12D67C5000
Authority key identifier: 59:A1:D7:DE:D7:5D:6B:41:B5:4C:94:B5:DA:AD:5C:83:C0:4D:62:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/97615475-7e03-30e5-a86b-0258690153af.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     55177
IP address blocks:        23.186.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/8f5572eb-07c1-491f-b1e4-6f63872a6e80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/8f5572eb-07c1-491f-b1e4-6f63872a6e80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:35:43:76:c5:5f:12:d6:7c:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f5572eb-07c1-491f-b1e4-6f63872a6e80
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=7c3716e1-3b83-4f71-a1c9-8385a11b13c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:b3:d6:e1:69:9d:55:55:ba:bf:2f:91:a7:
                    80:c7:e5:10:1a:d1:75:cf:70:73:3c:6e:b2:81:e1:
                    a0:40:26:51:07:de:3a:19:91:f0:f9:02:b7:c7:b4:
                    32:27:63:d2:79:6c:58:0f:0c:97:5d:fb:c4:df:cd:
                    75:1e:5a:9e:72:79:a0:58:dd:9e:2f:6c:ac:3f:0b:
                    48:89:e2:72:11:c9:90:59:65:90:96:4d:f7:2c:fc:
                    ff:ce:7e:05:a9:eb:d0:7e:38:6f:7e:68:14:d3:62:
                    94:73:b4:79:be:7e:bd:9f:aa:26:c4:a3:68:cb:10:
                    45:8c:6b:db:15:10:4d:1e:fd:ef:b2:ff:83:5c:06:
                    a7:b8:95:63:2a:0d:8d:45:01:93:01:74:d1:18:d2:
                    dd:a9:33:bb:67:5c:ad:6e:4b:1b:99:56:94:41:02:
                    94:91:8d:18:57:f6:66:b3:46:75:d8:ee:c7:6c:5c:
                    04:90:92:cd:62:a6:b1:32:16:48:d4:2a:f8:ba:2a:
                    22:b5:e7:24:fb:8c:93:c2:57:93:bc:20:f6:f8:1c:
                    d3:10:46:79:92:d9:a3:42:b1:13:88:cf:fe:44:d3:
                    24:37:31:37:ff:e4:b5:aa:b2:79:e9:ed:e0:f5:2a:
                    48:a6:82:20:2f:37:2e:71:8d:0a:67:9d:de:41:0f:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6D:29:0B:E7:F0:3D:C8:1E:1E:82:20:5F:0B:51:D5:B1:6B:D4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/97615475-7e03-30e5-a86b-0258690153af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/8f5572eb-07c1-491f-b1e4-6f63872a6e80.crl

            X509v3 Authority Key Identifier:
                keyid:59:A1:D7:DE:D7:5D:6B:41:B5:4C:94:B5:DA:AD:5C:83:C0:4D:62:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:20:4d:03:f6:a7:1c:1b:95:5a:0e:a3:50:a6:88:90:28:
         dc:bf:42:cf:af:28:6f:d8:03:81:e7:7d:19:da:3c:b1:d8:a7:
         ca:85:c3:a2:8a:c6:fe:6a:82:02:8b:41:d2:24:a8:48:41:8e:
         01:f1:64:14:c5:bb:ce:67:ae:0a:0c:2b:34:e5:ce:13:45:55:
         ae:e5:13:34:98:b5:66:cc:e1:9d:16:4c:9b:85:f6:02:b5:08:
         9b:73:43:39:fa:45:33:eb:85:68:6e:02:75:0d:35:40:0a:5f:
         da:11:aa:82:09:6d:c2:ea:8c:55:4e:93:75:20:77:7f:08:11:
         38:73:4f:22:12:10:24:09:02:04:94:e0:d4:cd:f9:f2:b1:74:
         32:cb:db:ba:b5:de:35:9a:0c:38:a1:c4:e7:bf:8a:ac:5b:52:
         e2:cd:c6:91:08:d0:53:b1:d0:52:ca:55:ba:6c:fa:71:d5:a1:
         2d:d0:d3:f2:17:17:f6:ba:e3:5c:d0:5c:14:3b:9a:4a:c0:0d:
         49:00:90:fb:3f:7e:5f:39:de:61:1d:a0:62:8c:52:3d:5d:2d:
         cc:53:fd:8e:ff:22:c1:6b:a0:29:f2:d0:57:df:3e:21:c9:ea:
         5e:31:40:c7:4f:92:52:af:ba:00:cf:8c:bf:16:ad:c6:7b:05:
         05:f3:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:23:01 2026 by rpki-client