Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/6b6443a0-cb19-30e9-83ff-997349a7b259.roa
File:                     6b6443a0-cb19-30e9-83ff-997349a7b259.roa (raw, json)
Hash identifier:          f1jBG8raxbQA9Z3xesAs4a24xghjDNHNxWXSXZoDANk=
Subject key identifier:   CF:31:96:75:1F:45:8C:C2:AF:42:3D:62:AC:2E:F8:A3:7D:CC:C4:1B
Certificate issuer:       /CN=04c216c1-5924-4a66-9346-a1f215800ceb
Certificate serial:       010D0C9F4328584F4974100C63163C433459A880
Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/6b6443a0-cb19-30e9-83ff-997349a7b259.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399889
IP address blocks:        23.184.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:10:0c:63:16:3c:43:34:59:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a879e1b6-7507-4a32-9b54-44bc12bf0392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:20:bf:62:6f:12:9a:cb:06:f8:0e:ea:7a:
                    ba:e8:55:46:bf:2d:1c:e6:99:0b:2a:54:64:9d:d2:
                    fe:0d:04:1f:86:a9:d6:4b:f4:b4:09:5f:9d:08:eb:
                    68:02:d3:04:7e:22:88:69:67:80:a8:5f:f9:f5:e0:
                    8b:8c:88:ba:f0:7e:95:cc:e7:36:32:83:9f:cc:86:
                    22:8e:10:56:fa:f2:b4:02:b4:5b:fb:82:35:ac:4e:
                    d2:0d:b4:32:3d:5c:19:0c:e7:f6:85:99:63:16:48:
                    be:e3:75:50:bf:8a:8d:3c:a8:d7:04:95:5b:27:63:
                    bd:61:0c:59:62:99:4e:0f:ac:d1:fc:13:0a:b1:6e:
                    2f:da:c5:8d:28:7e:ba:da:5b:5b:27:ca:4d:ea:76:
                    a8:b1:cd:83:aa:51:73:1b:95:03:3f:26:6e:9c:0b:
                    15:79:3b:15:1f:c7:57:3b:2e:f3:50:67:ce:99:ac:
                    d4:95:c3:b6:68:94:44:11:84:79:ec:d4:b8:24:bd:
                    15:3c:56:59:4e:1c:62:09:15:4b:92:ca:0f:a3:ed:
                    2e:14:a4:87:dd:88:25:a6:2f:bf:fd:91:30:00:95:
                    17:8e:a6:b2:b0:55:31:b8:bc:ae:27:96:9b:7a:e8:
                    7b:b9:4d:d7:2a:7b:d3:fd:00:6c:06:f4:0c:88:c8:
                    46:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:96:75:1F:45:8C:C2:AF:42:3D:62:AC:2E:F8:A3:7D:CC:C4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/6b6443a0-cb19-30e9-83ff-997349a7b259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl

            X509v3 Authority Key Identifier:
                keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:54:18:99:2e:88:62:52:20:b6:22:87:f4:62:a2:8b:ab:56:
         75:38:a3:c1:8d:4d:c6:30:fe:b4:52:1b:0f:c8:46:14:57:53:
         77:b2:c6:23:d2:43:21:ee:ea:f5:18:23:3e:63:4d:43:84:4d:
         b1:a3:20:36:f7:aa:14:97:a0:73:22:5c:d6:5a:41:fb:ea:8c:
         7b:1b:6f:ee:11:3f:9a:a1:5e:fd:ac:27:48:cb:d5:bc:85:82:
         ee:d5:1f:00:4d:9f:69:05:a1:1c:81:49:f0:5a:e5:bd:9e:0a:
         fc:5a:63:fe:a5:39:7d:1e:6f:ff:7d:11:e5:4a:8c:7d:f3:c0:
         a6:e7:b8:21:e2:4b:2d:85:5c:70:a3:80:5d:a1:ae:bd:94:d9:
         36:3b:f8:bc:aa:7b:41:d8:63:cf:db:42:93:3c:c7:25:a7:f8:
         57:d6:b1:ff:5c:21:90:45:d2:b0:c7:c8:61:69:da:bc:16:2a:
         07:6e:b6:a2:dc:10:d7:71:ba:bf:49:5a:08:d6:3f:2f:e2:7d:
         95:0b:10:fa:82:75:d9:04:ca:3d:2a:5a:b8:6b:4b:5e:b2:9c:
         1b:20:0b:78:27:e8:d5:06:ec:f9:d3:ba:3f:4d:86:ad:fd:15:
         f4:5b:64:d9:4a:50:51:4f:65:83:7b:75:19:05:74:c1:08:dc:
         9f:02:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:49:27 2026 by rpki-client