Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/d35ad0fe-b271-33e7-8193-d9796339f4fe.roa
File:                     d35ad0fe-b271-33e7-8193-d9796339f4fe.roa (raw, json)
Hash identifier:          MZtgoGRlKJNxakWR5I8ETh39X8i5wBkeSmyCAoOXZV8=
Subject key identifier:   A7:F2:82:94:74:2C:85:5A:FF:ED:7C:37:80:BC:8C:12:8B:54:1B:65
Certificate issuer:       /CN=ce634c28-231a-4b71-ad47-43e04779690a
Certificate serial:       010D0C9F4328584F02EB193C3F087E444F601D40
Authority key identifier: AD:81:80:2B:9E:99:D1:56:F5:23:57:FA:68:96:E0:83:21:93:DE:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/d35ad0fe-b271-33e7-8193-d9796339f4fe.roa
Signing time:             Sun 30 Aug 2026 18:40:46 +0000
ROA not before:           Sun 30 Aug 2026 18:40:46 +0000
ROA not after:            Sat 28 Nov 2026 19:40:46 +0000
asID:                     62731
IP address blocks:        23.162.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ce634c28-231a-4b71-ad47-43e04779690a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ce634c28-231a-4b71-ad47-43e04779690a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:eb:19:3c:3f:08:7e:44:4f:60:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce634c28-231a-4b71-ad47-43e04779690a
        Validity
            Not Before: Aug 30 18:40:46 2026 GMT
            Not After : Nov 28 19:40:46 2026 GMT
        Subject: CN=13c99116-f261-48c2-97e4-49e8d4bd2200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3f:e6:96:00:a7:e6:80:ef:55:5a:d8:d9:74:
                    e8:3c:5b:ed:33:06:d7:d9:d7:3c:07:65:2a:5d:c5:
                    f9:aa:f7:8d:a7:de:0a:3c:49:71:4a:5e:b0:3d:a2:
                    c8:6a:35:b2:21:ed:0e:8d:f4:eb:89:8e:4a:a0:75:
                    f6:26:39:5b:e2:bc:6f:1f:f5:4d:b2:eb:ff:16:88:
                    0a:10:25:3d:48:32:aa:76:ba:ad:94:24:5f:94:9d:
                    3d:d2:cf:66:d9:78:8d:6f:e1:c7:28:09:d7:cf:d8:
                    28:cc:8b:15:ea:f4:84:83:3c:d7:1c:07:ba:1f:1f:
                    ce:30:c4:58:92:c3:ab:f2:b0:05:7f:34:13:4d:c2:
                    da:11:a0:3f:13:7e:d9:10:23:8d:2e:db:3e:07:ef:
                    71:44:7c:de:07:8d:b8:64:e4:49:87:d5:0b:bc:7f:
                    ce:86:a9:75:86:d7:79:35:71:1d:73:5a:5c:5d:79:
                    14:9a:8e:9a:40:d6:48:f8:8e:3d:b0:36:5f:7e:3c:
                    af:38:70:04:0b:aa:d0:e0:01:63:e7:06:5f:e3:67:
                    50:d7:5c:19:72:e0:73:2c:66:84:ae:90:55:bb:98:
                    18:0d:9d:ac:fb:c6:1a:78:d6:e6:b0:dd:4d:d4:68:
                    8a:85:ed:44:4e:b9:12:5d:f2:5a:24:85:83:67:5a:
                    7b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F2:82:94:74:2C:85:5A:FF:ED:7C:37:80:BC:8C:12:8B:54:1B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/d35ad0fe-b271-33e7-8193-d9796339f4fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ce634c28-231a-4b71-ad47-43e04779690a.crl

            X509v3 Authority Key Identifier:
                keyid:AD:81:80:2B:9E:99:D1:56:F5:23:57:FA:68:96:E0:83:21:93:DE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:90:0b:62:0c:28:d5:40:f9:23:5b:28:6c:44:4c:cf:e8:af:
         1b:9b:6e:c8:b6:bb:8b:22:b5:92:2b:cc:f0:5e:75:ec:66:f5:
         d9:42:76:9b:0f:0d:f9:cd:05:7c:39:17:22:f8:7e:d8:ee:c9:
         f6:92:c5:40:01:33:48:ce:b5:9c:2d:6a:59:e5:45:55:6e:11:
         8c:ca:b1:aa:c2:67:e5:05:f1:dd:8b:0b:ae:29:84:41:c8:87:
         02:14:78:be:82:a1:9d:6f:07:ed:96:ed:09:df:7c:ed:b5:3f:
         7b:db:0c:c5:60:0b:cc:36:19:0f:7b:f9:87:53:4f:d6:2a:7b:
         e5:3e:fc:c3:ed:4f:b1:d6:fa:ba:14:52:6d:79:36:80:13:ae:
         77:5b:59:50:5c:ba:ec:c4:d0:77:10:c6:75:39:28:6b:55:8e:
         ba:f4:90:5d:0d:5b:de:4b:a6:36:47:83:f1:98:c8:70:26:ea:
         c3:78:e8:f3:e8:45:f0:a7:a8:32:93:21:d8:58:e6:b4:53:ea:
         37:4f:9a:9b:67:f6:70:a5:e9:85:ef:7a:28:d7:3a:5b:d8:34:
         db:a5:d4:04:c2:35:ef:57:32:1d:58:50:63:9e:d6:11:ee:95:
         5d:46:03:47:3f:1c:e4:2b:85:53:b9:99:b8:92:91:7b:4f:18:
         cd:fe:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:27:08 2026 by rpki-client