Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa
File:                     726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa (raw, json)
Hash identifier:          sR+S8M55atqcM63xos25HZpoQbUNuIDPgXkCZoI2OcM=
Subject key identifier:   47:01:EF:82:57:8B:0F:59:66:7E:7C:2D:C0:57:B9:1F:D3:9D:FA:1D
Certificate issuer:       /CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d
Certificate serial:       010D0C9F4328584F1897C23E92F83660ED047BE0
Authority key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     32205
IP address blocks:        23.148.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:c2:3e:92:f8:36:60:ed:04:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=d6eaba4e-9998-4955-a5e8-79e20568de36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:81:0a:73:02:f9:61:d2:3e:06:2e:44:ac:
                    2f:d3:15:99:32:fa:22:50:08:b8:7c:ff:7d:44:f5:
                    bb:b1:63:f5:c2:c6:7c:e0:32:00:e6:3f:13:9e:23:
                    83:26:bc:f2:12:4b:0b:b7:4c:0a:14:bf:f1:5a:a7:
                    74:a9:ec:3e:80:62:33:d7:ee:46:bc:c8:13:ed:9e:
                    6b:af:7d:a8:64:bc:9e:6a:1f:ad:ea:64:d5:9c:f0:
                    ee:91:76:02:27:cd:97:06:3d:f3:9b:a8:42:06:74:
                    48:d3:2b:ea:da:ae:c9:d8:a0:86:7a:e8:2b:90:ee:
                    a0:60:17:44:6d:ee:1a:4c:0b:80:8d:59:ea:c8:8a:
                    65:53:cd:33:67:2d:ff:17:78:c8:62:ec:a0:a4:48:
                    f9:6c:41:27:83:f4:2b:ed:36:85:65:8a:0b:31:46:
                    5a:e7:2a:17:03:e0:ef:ea:a6:5d:bf:a4:6b:e6:db:
                    fb:3d:1a:e8:d9:9a:9c:e4:f7:fd:1d:ff:2a:39:0a:
                    df:e2:b6:38:99:c5:6c:08:87:f3:f3:b5:1a:ef:51:
                    c3:5f:19:25:ae:68:f7:6b:3c:83:00:62:26:00:ef:
                    e1:1d:91:9f:86:f3:bd:6f:41:c1:a1:a1:28:12:6a:
                    de:b3:2e:34:32:a5:2d:ef:8f:f4:d0:fc:33:42:da:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:EF:82:57:8B:0F:59:66:7E:7C:2D:C0:57:B9:1F:D3:9D:FA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl

            X509v3 Authority Key Identifier:
                keyid:09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:c3:b8:1b:da:f5:d2:e2:c5:e3:6e:55:10:f1:e5:e7:a9:
         af:86:b6:6d:1d:5e:97:6a:88:5c:4f:b5:62:7a:ac:c8:e3:0a:
         8e:5d:f5:95:53:56:62:b6:78:45:74:b3:7b:dc:65:d5:d4:83:
         e2:f8:2a:bd:e3:0b:0c:94:cb:97:3c:86:c7:05:72:13:94:b4:
         eb:e2:d8:55:dd:6f:ed:ad:07:6a:34:29:98:ca:b2:3b:09:f3:
         c7:20:13:72:ba:9c:9d:f5:70:5b:96:61:0a:aa:4d:95:99:9b:
         ec:73:d2:0f:13:16:a1:91:52:c1:93:72:e5:90:2f:79:2b:9c:
         e1:16:fd:94:3b:11:fa:cf:7d:28:ff:1e:0d:9d:39:7c:fb:e9:
         34:e0:fe:da:aa:24:30:0b:0a:9b:bd:b4:0c:8e:c6:62:6b:87:
         56:e1:b8:30:80:1d:48:cd:14:52:dc:f9:ec:e0:74:db:6e:15:
         bd:43:af:25:a6:1c:9a:e7:49:39:c5:01:d8:a4:80:b7:ff:bd:
         f5:30:40:8a:bd:7e:56:36:fa:ea:59:cd:06:f1:10:3d:25:7b:
         cc:1c:0a:93:d0:52:47:73:f6:ab:f5:b7:1a:21:17:bb:d7:98:
         d3:8b:96:f6:aa:8c:63:bd:c7:a8:22:85:94:41:b1:11:f1:8b:
         7f:1e:86:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:39:11 2026 by rpki-client