Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa
File:                     993932e0-9297-34e0-88e7-491c5545bdc4.roa (raw, json)
Hash identifier:          0YAzDtrItJC4gAT1vVPH22KR3cItBB9ZNQsFt3Cmt94=
Subject key identifier:   E5:53:40:4D:05:48:53:42:F8:13:A7:30:30:DA:6D:94:A6:0C:DE:3E
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F4328584F4974EFBFF22815AF1781DA80
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     51082
IP address blocks:        23.177.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ef:bf:f2:28:15:af:17:81:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae7cd791-ff44-489c-a67d-ceaf31b2a87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:93:b4:81:5d:42:88:ee:0c:56:e2:af:97:
                    6d:85:d9:87:44:d9:ac:e6:b0:b4:dc:5f:a0:40:97:
                    b2:58:14:4d:9d:5e:5c:ee:1d:27:8f:99:69:2b:c7:
                    58:2c:9e:d1:a9:52:a2:c3:ad:dd:ed:51:3d:54:42:
                    27:cc:ba:87:b0:54:8d:73:0b:fe:79:97:fd:13:0a:
                    9c:7b:4f:ea:7b:a4:1a:01:f9:6b:f7:a5:57:80:19:
                    3d:ab:81:28:ef:2a:66:53:2f:3f:5d:04:bc:df:90:
                    4b:85:ee:69:b8:c2:53:c1:c5:b3:52:7e:c8:a6:af:
                    92:c4:26:98:2b:52:b4:4d:f9:e4:02:2d:0b:0c:71:
                    8f:a3:aa:20:75:9c:14:d6:c7:9e:fc:ab:7c:7c:f9:
                    2e:85:af:d7:21:95:24:25:4d:1c:1b:83:28:87:ab:
                    53:20:63:69:c8:67:2c:84:53:79:93:78:03:a1:c8:
                    09:6a:0c:ae:51:1d:ea:de:bf:8e:fb:2b:3f:77:f9:
                    2e:47:78:2f:08:95:4f:9a:f8:29:e2:1f:e1:28:c1:
                    4a:b5:92:ee:18:d7:67:28:9c:0e:f8:be:2c:c8:28:
                    cc:ef:35:e8:1a:d8:44:59:1d:2b:8b:17:3a:ee:18:
                    07:23:af:d7:11:06:84:3f:d8:d7:30:0c:62:69:27:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:40:4D:05:48:53:42:F8:13:A7:30:30:DA:6D:94:A6:0C:DE:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:bb:47:17:07:a8:5c:59:d0:da:35:37:8e:55:07:66:fe:
         e0:bd:30:0b:d7:2d:a4:ce:ff:bd:11:bc:78:b8:06:9b:17:9e:
         ec:ea:42:f8:3c:fd:7a:d6:7b:e9:49:a1:c5:95:1c:1b:2a:d9:
         ae:d4:b1:13:4c:a0:91:d3:3a:3d:52:c0:98:20:d2:c8:10:33:
         55:88:43:0e:65:6a:7a:83:24:b5:db:b0:d7:95:d8:75:d6:4d:
         49:0f:df:a6:4c:b8:0f:86:84:d1:3f:d9:fe:f0:6e:51:6d:ab:
         75:33:8a:4f:d5:62:8a:56:0e:44:86:59:51:b3:75:61:1d:7c:
         64:94:35:47:fb:63:70:5f:f7:8b:4a:04:94:fb:11:60:97:b3:
         c3:f9:7f:08:72:51:ee:65:3c:fc:b8:cb:c2:40:0d:98:5e:72:
         de:5b:63:4b:26:5f:49:92:61:75:e9:14:73:18:2f:d9:3e:d2:
         42:a8:85:fd:e7:75:93:b9:2a:83:7b:74:7e:6b:a2:fc:00:fc:
         b5:6d:4d:f0:f0:d1:7c:4b:59:2c:ac:fc:b9:e6:5f:f1:3a:88:
         ac:02:75:b2:c6:5d:82:95:74:c3:c4:6e:3c:40:23:c8:6a:c7:
         a9:24:4a:d1:c4:c7:77:f9:b3:ba:f7:d2:91:c5:f2:ad:64:c5:
         de:16:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:59:23 2026 by rpki-client