Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/061a8a60-26d2-3870-b7ab-ba6bf2acf669.roa
File:                     061a8a60-26d2-3870-b7ab-ba6bf2acf669.roa (raw, json)
Hash identifier:          ocnzWb2aLxguz2B3wutN1eQvJYRGDEhIT6+clAT3KIw=
Subject key identifier:   0C:7C:1D:43:1C:F8:28:0A:7C:5E:D1:8E:08:EB:D1:38:25:B2:0F:E9
Certificate issuer:       /CN=197570da-926b-4348-892e-3ea7821d2f51
Certificate serial:       010D0C9F4328584F8F3DA7A840D7C94A6D000380
Authority key identifier: AF:4B:12:5C:AB:26:3C:89:4C:09:3B:FB:E2:CB:AA:F0:66:F0:8B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/061a8a60-26d2-3870-b7ab-ba6bf2acf669.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     396982
IP address blocks:        23.149.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:a7:a8:40:d7:c9:4a:6d:00:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197570da-926b-4348-892e-3ea7821d2f51
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=02419984-a014-46f8-aba1-c215866fae24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:b4:9e:89:9a:ea:f7:18:1f:fd:e4:35:cc:
                    58:08:36:cf:bf:c6:2f:54:3e:f4:bc:e2:85:8e:c3:
                    bc:04:2d:e5:55:e4:ae:d0:24:73:72:e2:ee:48:cc:
                    7e:35:15:bd:56:7c:89:41:82:36:d7:47:af:cd:9a:
                    b7:4f:92:44:5c:09:82:31:4b:d6:ee:ab:c1:e5:9c:
                    1a:50:13:a4:cf:61:96:74:48:4a:e4:86:5c:0f:d2:
                    96:3e:69:a7:1f:a8:90:c3:19:34:a0:df:87:b7:a1:
                    82:86:9e:1b:49:07:25:91:d9:19:7a:32:17:90:e1:
                    f2:7d:de:47:f9:d9:c1:a4:59:b4:15:d6:ce:fb:a3:
                    06:be:1c:2e:ef:05:4a:31:41:26:c2:8f:c2:bf:e8:
                    7e:fb:12:71:f8:bf:47:ad:bc:1b:8e:7b:17:ff:69:
                    3b:bf:26:36:80:99:ee:85:f2:23:22:77:92:27:d8:
                    10:d0:39:f7:6f:1a:4a:37:f5:fa:44:85:18:da:9d:
                    c9:01:e7:4a:e7:ed:45:bb:13:1f:a3:63:7a:ab:69:
                    7f:aa:ca:44:50:fc:6b:0a:e2:03:6b:3d:38:fe:10:
                    c4:93:56:e6:da:b1:56:c1:b5:20:d5:2a:f0:9b:40:
                    1f:f7:e1:3e:8f:23:e0:15:fb:0d:d4:bf:98:a2:49:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7C:1D:43:1C:F8:28:0A:7C:5E:D1:8E:08:EB:D1:38:25:B2:0F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/061a8a60-26d2-3870-b7ab-ba6bf2acf669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51/197570da-926b-4348-892e-3ea7821d2f51.crl

            X509v3 Authority Key Identifier:
                keyid:AF:4B:12:5C:AB:26:3C:89:4C:09:3B:FB:E2:CB:AA:F0:66:F0:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/197570da-926b-4348-892e-3ea7821d2f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b3:02:69:65:41:90:ac:8d:2c:f9:46:07:5a:39:d7:67:c1:
         f2:e2:7d:bc:67:c4:4c:47:2b:93:3a:1a:ff:e7:3b:b0:ca:25:
         d6:6a:f2:53:ed:c8:dc:59:39:bb:a3:6e:c2:e8:df:40:98:16:
         25:7e:4a:df:7c:89:0f:00:d1:11:7a:72:9f:62:02:c5:4d:3c:
         f3:2d:26:a8:97:4b:ff:40:cf:14:0e:8b:5d:e6:3f:f4:a7:96:
         39:b4:c3:d0:13:57:f9:11:f9:72:32:6d:c8:b2:7a:c6:3e:89:
         ae:b3:42:e0:28:f3:5c:03:bf:c2:d3:5d:d9:24:be:d8:e4:58:
         63:87:89:b9:02:8e:49:f5:a9:b0:0e:d2:38:b7:62:44:31:2c:
         e2:4c:86:c2:0a:6e:9f:a9:3c:39:15:7f:4d:74:c9:5f:dc:ea:
         fd:28:2d:13:ef:72:7d:93:95:33:cb:0e:ce:93:1f:92:28:e6:
         6d:3f:cf:bf:fa:10:c6:d1:ec:5f:31:a7:fa:60:ad:1a:26:f6:
         0b:cc:b5:de:61:b1:8e:7f:c2:84:35:10:5a:e0:66:1e:78:be:
         e3:28:a8:01:ae:5b:5d:7d:9d:59:4e:46:54:fa:f6:a8:41:2a:
         0b:cd:c8:61:f2:42:b2:5c:c0:42:70:94:27:75:b0:7f:c1:77:
         24:19:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:38 2026 by rpki-client