Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/3fd08c83-3fc7-396b-9aec-34581e3efc08.roa
File:                     3fd08c83-3fc7-396b-9aec-34581e3efc08.roa (raw, json)
Hash identifier:          FZpDqzA2rdit/VqukK9HOT5ID5rGJ+fYoRtabAVmpfQ=
Subject key identifier:   CD:E8:6D:E3:A1:01:FE:69:AD:91:98:01:D7:6D:3B:04:73:59:6A:0F
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F4328584F497484E3E401763BC4B4BE80
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/3fd08c83-3fc7-396b-9aec-34581e3efc08.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     206246
IP address blocks:        23.151.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:84:e3:e4:01:76:3b:c4:b4:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f20115fe-9b5b-4b46-abd0-8fa3dcaec00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:31:05:73:ab:40:db:d1:50:25:55:a0:6c:
                    06:f9:36:2a:a4:3b:2a:1c:d6:75:b2:bf:63:a2:68:
                    df:46:f1:15:45:28:30:d4:36:d1:f6:67:e5:b3:24:
                    1a:d8:62:d0:bd:7a:da:cf:4c:c2:87:34:c8:56:ca:
                    11:ce:62:6f:a8:45:05:2e:c4:88:cc:b3:7d:41:72:
                    ca:45:e7:cb:3b:f5:7a:94:7e:de:2f:80:b0:2a:94:
                    1b:65:45:16:fb:53:ef:4a:a1:4d:4c:2f:46:0c:5b:
                    3c:45:e2:8b:3c:ee:95:85:f8:29:55:38:a7:9f:b9:
                    c8:10:59:91:be:07:03:f9:82:ba:2e:47:8f:be:89:
                    65:a0:85:70:45:9a:07:6c:49:26:9a:4f:40:fb:d4:
                    9d:71:c8:7a:50:b9:f3:04:b1:79:f3:74:55:66:d3:
                    c7:6c:f7:cc:80:9c:2d:52:92:39:03:93:67:a6:31:
                    7e:39:32:4e:a5:8c:4b:5e:15:b7:c8:05:12:5f:46:
                    13:9b:e7:a5:df:f9:dc:3c:8d:a8:bb:69:ad:27:90:
                    13:20:0e:eb:21:e9:e1:83:48:73:ab:db:a0:81:7b:
                    c1:b1:e5:19:91:a3:dc:1e:68:8e:57:a3:56:5b:3c:
                    1c:7e:be:e6:55:3a:a0:dc:13:32:f1:ab:cb:f2:5c:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:6D:E3:A1:01:FE:69:AD:91:98:01:D7:6D:3B:04:73:59:6A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/3fd08c83-3fc7-396b-9aec-34581e3efc08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:78:d1:ab:1c:31:01:4c:8f:a2:70:75:99:3d:12:30:7f:
         0c:02:e2:4b:d9:2b:0b:45:e2:e6:8c:4d:6d:d9:b4:21:db:f8:
         ec:f4:2d:73:dd:22:f0:12:78:4e:de:75:1d:79:26:3d:96:c9:
         af:e3:92:f6:e7:dc:bb:f4:79:3d:29:d7:00:e0:74:5a:87:49:
         3e:c2:0d:04:f0:62:0a:a6:0c:a1:ab:c6:2c:e7:11:af:42:76:
         13:7f:eb:cc:be:39:89:7c:5e:a7:5c:02:2b:89:08:c3:13:bc:
         50:a0:34:2c:f0:fa:25:2f:43:c5:1b:00:0e:d4:6f:d5:58:80:
         96:65:8c:ef:6e:19:2b:55:69:fe:f8:33:b6:f9:e1:c4:b6:a1:
         91:32:72:8c:bc:3c:d1:a9:85:65:94:60:8b:1c:c6:6b:3d:6f:
         0a:86:c1:a4:9a:15:d7:38:40:84:f6:ca:92:ea:a5:17:db:19:
         a2:a1:fb:2b:eb:c6:0d:78:6d:c2:e7:74:a3:25:a3:bc:7a:15:
         18:79:bc:d8:ba:51:51:47:e1:f7:dc:72:ba:d7:38:d5:f9:fe:
         b4:78:bc:c8:f5:62:0d:7e:a1:61:a0:2e:69:59:72:7f:87:16:
         7a:77:69:66:87:b5:f1:23:59:a2:0b:80:9c:a9:b8:c2:f1:ca:
         eb:1b:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:29:53 2026 by rpki-client