Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa
File:                     3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa (raw, json)
Hash identifier:          o4bVGu3aKgeKIa3LTDmP5Y3fDgM7sJ86mB9BsVZtXAU=
Subject key identifier:   4E:43:93:DF:53:F8:A6:5B:F8:8F:A8:2A:C2:F5:21:99:C9:76:AD:13
Certificate issuer:       /CN=cc0e54e0-cc7b-4a47-961c-77b837f94955
Certificate serial:       010D0C9F4328584F4976C9831C915F17A7987FC0
Authority key identifier: 70:D1:CC:47:A2:EA:6E:3B:97:7E:97:9A:A7:36:1F:D9:77:5D:F7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395243
IP address blocks:        23.185.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:c9:83:1c:91:5f:17:a7:98:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0e54e0-cc7b-4a47-961c-77b837f94955
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d8fdfe22-4f7e-4447-b8e6-82a2f98e2f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:71:85:d1:7a:18:8b:d2:af:a0:59:64:90:
                    3a:3a:2f:b3:3c:63:bc:3f:f7:86:cd:4a:bd:72:23:
                    68:9a:b6:9f:ff:cd:62:6c:0b:10:c4:ef:16:87:fc:
                    d2:af:df:77:2d:40:8d:bd:45:ac:89:da:93:85:bd:
                    98:a1:39:86:9d:e7:8a:ec:40:0f:cf:43:37:5c:4f:
                    5a:c2:37:b4:36:95:af:21:79:ea:62:68:89:84:21:
                    b8:42:6a:89:4c:ad:5d:a1:eb:ee:72:b1:76:ee:0d:
                    23:d2:74:6d:2b:89:4a:07:66:71:fc:ad:42:21:e5:
                    6b:5b:1b:b3:b1:50:e1:70:44:78:19:c7:0c:2f:4f:
                    62:df:1e:5d:53:30:6d:76:b2:6c:c8:c9:27:9f:d5:
                    75:f5:7e:52:9a:4b:f2:e2:e4:dd:e7:f7:1c:5e:62:
                    a8:6d:da:a7:d4:5c:bc:cd:73:a8:b0:2c:f7:6d:f5:
                    32:8e:d1:e5:0f:94:be:2f:b1:62:54:41:22:46:75:
                    67:a9:a4:70:58:a3:1d:fe:86:0c:9b:66:98:20:37:
                    9f:8d:df:b0:37:93:68:8f:3a:f2:c8:88:79:2d:1a:
                    4d:c1:b4:f1:5c:56:ae:ae:4c:a7:78:49:ae:96:be:
                    f8:06:2f:a4:6e:70:03:e2:a4:ba:b9:59:e5:a8:7c:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:93:DF:53:F8:A6:5B:F8:8F:A8:2A:C2:F5:21:99:C9:76:AD:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.crl

            X509v3 Authority Key Identifier:
                keyid:70:D1:CC:47:A2:EA:6E:3B:97:7E:97:9A:A7:36:1F:D9:77:5D:F7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8d:35:3e:00:92:85:95:ec:3f:af:fa:12:e9:65:e9:d8:8c:
         e2:23:04:92:9b:de:11:96:99:f9:d8:aa:5d:fa:c1:6c:28:9c:
         ab:6d:e3:d8:7a:3c:78:92:cd:6c:59:42:e7:6c:27:ce:a6:1b:
         d5:d1:34:7a:b3:3d:c8:d4:30:b1:22:dd:19:41:51:a7:a3:bd:
         3b:8a:a9:2e:12:5e:32:b9:2f:eb:4e:31:26:01:27:7e:28:a8:
         0b:b3:89:aa:ce:12:99:66:75:5a:a1:44:7f:73:33:16:76:4f:
         fe:fd:1c:2b:82:92:80:6c:b6:d6:d0:7c:a1:55:8a:5e:f7:59:
         63:5b:2d:fc:8a:1c:e4:da:ca:f9:ee:ad:22:a6:db:c9:df:1d:
         d0:6e:c2:8f:33:41:8f:d8:bc:05:e2:a4:96:e4:32:5c:aa:25:
         b4:ae:0f:78:ed:d9:6b:e3:9b:fa:85:8f:19:14:25:e7:b2:ec:
         2e:53:ff:81:90:5a:0e:4e:d7:23:d4:58:0a:24:d5:0a:33:53:
         e2:d8:07:09:36:98:fe:df:e5:0b:b4:44:32:77:d9:fa:94:6b:
         ae:d9:73:85:c6:c4:89:19:7c:b1:b1:38:5f:f4:b3:3a:fd:00:
         48:e0:98:2a:f9:a4:f7:d2:0f:63:27:18:61:fe:54:04:1e:10:
         55:b1:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:48:43 2026 by rpki-client