Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/e70755b2-f5a6-3030-80ad-9264aa9f327d.roa
File:                     e70755b2-f5a6-3030-80ad-9264aa9f327d.roa (raw, json)
Hash identifier:          sBHu1C1zSgOGwf+9DEnMs8OfD/3MoJqWDzbtRhUqRlY=
Subject key identifier:   D3:3C:B3:59:59:A8:81:47:34:CF:4D:71:76:8D:9E:B1:98:AC:7E:AB
Certificate issuer:       /CN=2e1b86a5-b675-4849-9586-a8fb4cb2983e
Certificate serial:       010D0C9F4328584F3E48016A1DC42D0EEFAD4290
Authority key identifier: FC:60:E8:7A:98:3E:D1:3B:67:E1:A2:AA:D1:AE:80:00:3B:B8:3C:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/e70755b2-f5a6-3030-80ad-9264aa9f327d.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     7361
IP address blocks:        23.177.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/2e1b86a5-b675-4849-9586-a8fb4cb2983e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/2e1b86a5-b675-4849-9586-a8fb4cb2983e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:01:6a:1d:c4:2d:0e:ef:ad:42:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1b86a5-b675-4849-9586-a8fb4cb2983e
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=1fa1c19f-28ee-4633-8b3b-8338e8b400b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:b8:82:52:db:9e:bc:69:73:2e:a4:47:6b:
                    5c:fe:c3:dd:92:90:b4:7f:81:e2:11:ae:39:cc:23:
                    ea:1d:be:9e:65:e3:e7:0d:39:8a:d4:67:c4:5d:2a:
                    06:db:9a:39:bf:39:b0:7b:37:45:d6:49:c7:84:e4:
                    e3:5e:7b:39:e3:b3:6e:72:fb:4b:c1:d6:16:ae:e8:
                    80:a7:4a:9d:ee:e9:36:50:13:c3:4d:e8:55:9d:2c:
                    b5:3c:26:df:e3:28:e2:5a:91:f0:d0:29:30:91:66:
                    2c:cb:4d:b1:1c:bb:b8:08:01:86:27:b7:e2:55:c8:
                    d0:31:9d:ea:2b:d6:22:46:0f:89:79:13:be:c5:05:
                    d8:b6:fb:96:67:aa:84:f0:64:10:7b:52:37:25:46:
                    ca:3c:65:7b:b9:d1:98:18:51:dd:b4:f0:07:e4:2d:
                    41:eb:8b:bc:d8:06:b0:13:2b:f5:10:74:de:69:f5:
                    84:ec:62:c0:be:98:d8:4a:62:1f:f0:0c:5d:6a:27:
                    8e:c1:f3:b1:5c:7c:1e:0c:9d:02:67:b6:5e:b5:a4:
                    3d:cc:a7:95:36:83:73:33:f4:c9:25:19:0b:7c:e5:
                    ac:f8:b3:ac:7a:56:7f:3b:f3:a9:01:a7:9b:4a:b8:
                    d7:24:f8:21:82:87:ee:53:80:fc:39:ac:ea:8b:ed:
                    07:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3C:B3:59:59:A8:81:47:34:CF:4D:71:76:8D:9E:B1:98:AC:7E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/e70755b2-f5a6-3030-80ad-9264aa9f327d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e/2e1b86a5-b675-4849-9586-a8fb4cb2983e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:E8:7A:98:3E:D1:3B:67:E1:A2:AA:D1:AE:80:00:3B:B8:3C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2e1b86a5-b675-4849-9586-a8fb4cb2983e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:e7:8e:79:6b:0b:4d:59:3b:35:11:7d:a8:59:9b:ec:ce:c1:
         53:81:5b:b3:bf:c5:43:7c:40:02:43:ed:8a:71:68:e4:14:35:
         ef:62:f9:f1:2f:c1:fa:27:44:08:c7:5c:07:ae:3f:bc:1b:cc:
         c2:0d:a6:7a:94:c0:5d:47:0d:21:4a:5a:cd:33:22:35:0f:5d:
         3d:3e:b0:02:93:04:65:84:da:1f:07:08:80:c4:7f:b6:ee:1e:
         e6:2e:84:b6:c8:07:8f:91:fe:03:16:56:ab:f4:a1:b1:7d:cc:
         6f:b4:98:87:f9:cb:83:c5:50:3a:3e:92:8c:a9:45:f1:e0:8c:
         09:db:20:d9:75:ce:f1:ad:7c:fe:ac:eb:bd:43:64:ef:a7:d3:
         57:26:6c:41:70:f0:e2:9f:5b:63:96:cd:12:f4:57:03:97:b8:
         ab:52:8a:b6:46:1e:77:51:91:f2:b6:aa:8d:02:30:f1:7d:13:
         0e:28:58:69:1c:27:52:57:9e:23:db:e0:4a:d2:eb:de:27:05:
         c9:95:91:ef:f8:18:d7:eb:ab:71:77:fe:3f:fe:43:a8:d8:87:
         21:67:54:4e:7c:44:3a:3b:f3:8b:ad:28:14:c4:01:d3:ac:33:
         fe:24:2c:5d:1d:9d:86:50:fd:10:90:84:05:aa:37:a0:75:ad:
         96:9d:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:42:38 2026 by rpki-client