Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa
File:                     feaece30-d037-38af-8e64-48ea4333f827.roa (raw, json)
Hash identifier:          bcLZfH6OC6hAIKqk/KeXeTsAha8I1bMPuShM2f4DCx4=
Subject key identifier:   77:1A:44:68:A8:A5:62:0A:EB:70:B3:39:28:AE:D9:71:20:EC:43:68
Certificate issuer:       /CN=8c36215c-1577-42c1-a44f-f836bc4d03b3
Certificate serial:       010D0C9F4328584F506D51AD4C9ADD1722CB2B00
Authority key identifier: 4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     62563
IP address blocks:        23.162.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:51:ad:4c:9a:dd:17:22:cb:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36215c-1577-42c1-a44f-f836bc4d03b3
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=ab998cc9-06f8-4795-afff-b4606cb2710c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:74:a5:ca:5f:2f:2c:c0:b5:97:0a:84:32:d1:
                    dd:7d:07:53:bd:f2:54:0f:72:95:d3:99:17:95:51:
                    c9:2f:15:f2:4d:0f:0d:ae:b6:9d:b7:8a:45:46:ec:
                    2b:fb:a2:7e:4c:d6:3a:60:cf:8f:13:41:8f:d4:af:
                    ae:ab:e3:69:84:87:46:35:f8:8e:4c:49:60:e4:be:
                    38:18:d6:e3:46:c9:d8:8f:81:c9:da:6d:f4:7b:c4:
                    54:28:c7:9b:d6:79:3c:9b:45:72:38:33:90:f7:07:
                    19:d6:20:19:1f:9d:f1:db:4f:c6:89:09:39:0a:37:
                    17:82:93:a5:61:9d:52:11:53:4c:f7:60:f8:26:51:
                    d7:fd:7e:fa:ab:6a:ce:51:32:d4:f4:79:c5:3b:20:
                    6b:31:52:18:d0:14:aa:6a:2d:18:27:a3:26:43:75:
                    6d:b1:01:59:9d:ba:e7:90:f3:19:e5:90:65:81:df:
                    99:1c:f3:a3:eb:13:b5:b2:4f:4e:1f:b3:9c:ab:0d:
                    b9:72:62:2b:d3:6d:e2:7f:8f:81:48:ce:78:db:26:
                    26:8a:54:3c:ac:23:1d:ba:68:c3:58:66:90:fc:5c:
                    e5:ba:f4:74:32:cc:44:dd:0a:bc:42:7c:c6:03:b9:
                    95:d0:eb:05:46:f5:81:0f:17:f4:53:88:a5:28:df:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1A:44:68:A8:A5:62:0A:EB:70:B3:39:28:AE:D9:71:20:EC:43:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.crl

            X509v3 Authority Key Identifier:
                keyid:4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:57:75:74:cd:93:8b:d8:97:68:8e:56:ca:27:1a:e4:9f:26:
         2c:14:f6:81:83:4a:0f:1f:a9:c3:46:40:db:17:30:ec:28:2a:
         19:19:e0:cd:5d:e8:04:ae:4a:eb:2e:b9:79:b5:4e:48:0b:5e:
         e0:76:17:f6:d0:14:98:cd:bc:fb:45:0a:42:d2:60:28:b7:61:
         ae:05:ef:05:9a:3c:2a:9d:37:43:2a:06:34:b5:90:ab:e3:8d:
         15:37:22:97:95:a8:b2:57:ca:e6:87:b8:7f:1c:a1:50:4c:d1:
         36:13:f6:42:a0:01:49:05:9c:f5:be:52:6d:8a:74:7a:09:a9:
         f4:5c:3f:69:57:90:d6:43:c7:69:e0:44:c9:e5:66:4c:09:a4:
         fd:d1:34:6a:56:60:fa:c1:24:83:ac:a8:35:34:a9:55:bf:ef:
         8c:97:f2:8f:d6:57:58:f8:91:b1:d2:82:0c:7b:70:9c:da:f7:
         f9:4c:f1:49:47:af:92:94:75:5e:a4:ca:99:27:0d:bd:f2:38:
         ae:1a:81:3f:db:2d:9c:a8:17:cc:bf:72:f1:95:8c:01:3a:2b:
         83:8d:58:e8:d5:7e:1c:c1:c1:97:89:d4:39:19:95:72:29:f7:
         f2:24:12:77:52:f1:56:8c:73:b1:a2:07:72:f2:90:7e:3f:bd:
         ae:6b:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:34:38 2026 by rpki-client