Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa
File:                     a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa (raw, json)
Hash identifier:          hqJKmAI8qRux8qSg/eAmNWIhAVhuWBPEVoADpLJTkew=
Subject key identifier:   F0:1B:2D:C5:F3:A8:60:B3:C7:58:F1:21:45:B2:AA:BE:5D:39:71:7B
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584EF87CD4FB28B0EBF27B98ECE0
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     33182
IP address blocks:        67.23.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d4:fb:28:b0:eb:f2:7b:98:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=c1eed480-7666-4b55-9b2d-2fb3c94329fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:87:d7:46:55:1f:e7:e3:6b:f2:79:75:0b:a3:
                    f6:31:57:c0:3e:bc:72:fe:d3:7e:4f:a7:a6:3b:8b:
                    61:b2:86:e2:57:d1:84:1a:a7:66:5e:64:85:2a:0c:
                    e9:37:3b:dc:c9:42:7f:ea:9d:d0:66:c1:bf:49:30:
                    11:df:fa:12:16:99:c9:08:31:49:c8:2b:10:3c:f3:
                    b8:78:9d:a6:e5:09:3a:c9:09:44:d1:61:b5:e3:4d:
                    d4:1e:2f:d6:96:d1:44:6a:aa:b0:ae:0c:68:66:0b:
                    e1:3b:f0:45:c9:ce:0e:72:6f:f2:3a:77:b3:cd:69:
                    bd:ca:a3:d3:3a:52:6a:1d:de:ce:ab:c0:52:a2:5e:
                    62:24:38:02:8b:3d:b6:b3:35:61:3d:d7:c9:57:20:
                    34:f4:ec:c5:96:25:2c:69:ed:f8:3f:8b:43:23:61:
                    c8:75:62:91:63:ca:fb:1d:86:f2:d8:65:17:9b:e4:
                    52:7c:df:ce:c1:63:09:9c:81:ad:58:b3:cd:99:9d:
                    a1:b3:73:19:f1:d1:09:ce:eb:82:d5:b4:af:72:45:
                    63:0d:11:0e:83:51:ce:b0:37:b5:0a:31:83:b0:f4:
                    75:82:4c:22:6d:39:d0:57:fc:5e:be:44:8f:1b:ee:
                    81:2e:c9:86:19:4c:f1:4e:45:94:85:e5:66:6e:68:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1B:2D:C5:F3:A8:60:B3:C7:58:F1:21:45:B2:AA:BE:5D:39:71:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.23.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:24:09:f3:13:86:17:38:9d:d3:68:c3:d6:cc:53:90:45:
         51:86:ff:7f:98:8f:bb:8a:ed:c6:d2:23:1c:ce:11:5e:c7:3f:
         e5:c2:b3:6e:da:04:f9:e5:ad:8f:67:85:51:28:7a:4f:de:f6:
         88:c5:2d:5c:54:df:fe:27:eb:dc:54:8d:6b:ed:ca:1c:75:7a:
         d9:1d:33:bd:c4:bb:0c:35:63:4a:35:ce:c3:d8:cf:68:ad:a5:
         ea:e5:ca:e9:f8:27:88:bf:1f:27:81:1f:0f:e0:0b:39:37:a2:
         89:da:e2:2e:57:d2:59:94:1b:2c:8d:c7:9d:44:63:9f:5c:9d:
         3f:f9:b3:28:cc:6c:85:f5:da:da:16:e8:99:d3:d3:1e:2d:f3:
         3f:2c:b4:76:ee:0a:d1:fc:a7:1f:c6:84:99:19:da:c2:15:60:
         f3:db:17:5b:73:aa:76:1a:2d:fe:8d:66:f9:42:c9:ee:cb:70:
         27:c0:10:49:ef:59:ed:fb:95:cf:70:b2:a1:86:cc:6b:89:50:
         0a:65:8a:d0:3e:d6:a0:69:49:8a:e4:9d:6a:3c:ae:30:88:fc:
         52:5a:83:48:52:83:be:35:79:40:b4:7d:26:95:0d:30:1b:fe:
         24:b6:08:14:fc:47:54:63:4f:54:fe:67:97:89:37:63:0f:06:
         de:56:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:44:03 2026 by rpki-client