Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/08d290d6-558a-31e0-b42d-51ab17937ab7.roa
File:                     08d290d6-558a-31e0-b42d-51ab17937ab7.roa (raw, json)
Hash identifier:          b+Tx71Or1uJcaLj5aP5Jd8hJUp2bZIL/c0n59D35eLQ=
Subject key identifier:   B5:8E:F5:D4:E4:2E:FB:4D:16:F7:F8:75:65:95:8A:60:D1:76:93:5E
Certificate issuer:       /CN=3878fd50-eae1-4b38-a142-8eff8910579b
Certificate serial:       010D0C9F4328584F4975AC461C7B5ECFA4DEE280
Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/08d290d6-558a-31e0-b42d-51ab17937ab7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14807
IP address blocks:        23.180.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:ac:46:1c:7b:5e:cf:a4:de:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ed70a228-1ed1-4ad1-b9b2-3b6c67a7c8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:b4:85:e4:09:fa:ae:7c:e3:a1:e5:10:5d:
                    38:cf:d6:e4:0b:c5:d1:62:3c:cb:3a:15:a3:a9:f7:
                    ca:76:6a:4d:07:db:e2:62:2c:a6:c7:14:3c:08:e4:
                    5f:19:78:ec:25:5f:59:ec:57:af:55:63:1e:60:ab:
                    3e:6b:8c:fb:72:c1:97:06:26:ca:b2:95:a2:87:37:
                    dc:a7:26:3e:c6:56:bf:00:c9:77:79:25:8b:94:b7:
                    3f:8b:b5:61:6e:09:c1:26:59:ff:1f:59:94:ee:18:
                    ac:6c:72:1e:eb:63:55:ae:11:39:fd:57:8e:a3:55:
                    dc:33:4f:6e:0e:df:d1:28:9b:cd:4d:d3:f7:13:f6:
                    c3:27:7c:2b:82:d1:c2:1e:9f:4c:8b:25:7f:22:a1:
                    c6:4d:5a:48:c6:4c:3d:46:e9:ca:99:5c:f1:14:b2:
                    c7:a4:b0:b6:fc:db:34:b3:54:67:a2:bd:91:e7:05:
                    66:af:f2:3a:90:a2:97:58:8f:a8:b6:b5:21:f7:47:
                    83:cd:02:52:8b:8f:e0:92:3d:a3:db:15:ba:ba:90:
                    33:10:f2:45:ac:25:91:8f:29:d9:18:ee:8a:26:d0:
                    54:68:36:8e:c7:f5:63:77:79:ed:d6:0c:cf:8b:c7:
                    a8:1c:4c:0f:d8:2a:01:79:6d:c9:ad:11:1a:da:11:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:F5:D4:E4:2E:FB:4D:16:F7:F8:75:65:95:8A:60:D1:76:93:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/08d290d6-558a-31e0-b42d-51ab17937ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl

            X509v3 Authority Key Identifier:
                keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ad:1e:76:49:64:0e:e6:bd:94:bc:be:dc:ac:d9:01:4b:21:
         7b:7b:bd:07:4f:8b:4e:aa:b4:e3:14:e1:25:60:0a:b6:d7:50:
         fa:d6:47:65:77:26:b0:cc:b7:66:02:9e:9e:9a:3e:20:b5:0f:
         15:d8:9f:92:4a:59:e0:82:f4:19:94:5f:fe:18:59:45:ac:dd:
         c3:18:7e:1d:39:ef:0b:7d:8e:0e:3b:0c:04:d2:c8:f1:e9:a3:
         c5:ec:72:f6:df:fd:d2:68:41:18:72:1b:8b:46:6a:49:6b:25:
         fd:e3:ef:29:ca:c8:12:91:8b:28:d0:b3:0c:24:76:04:b0:9b:
         2e:57:42:a1:f5:19:6a:7d:26:25:33:38:df:16:b8:89:60:59:
         45:26:e8:d4:25:03:61:2b:39:51:5e:a3:30:d4:a8:77:7b:2d:
         f9:1c:6d:cb:32:7d:54:3e:56:1a:19:e8:95:c2:f3:3d:c7:b5:
         38:c8:8f:6d:c2:c8:fc:df:61:53:10:0d:63:3c:ff:7b:2c:ad:
         3f:8b:85:b8:6b:a9:a4:70:0c:a3:29:05:8e:3b:9b:e1:1e:89:
         92:1c:94:48:3c:e6:2e:5f:f1:c7:81:0a:b5:cc:90:34:ee:b9:
         ff:39:c3:d9:3d:14:44:3c:4d:9d:87:3e:ae:db:98:6e:98:8e:
         57:80:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:00:01 2026 by rpki-client