Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/04cece74-7cb3-32ad-aa95-08a314b34897.roa
File:                     04cece74-7cb3-32ad-aa95-08a314b34897.roa (raw, json)
Hash identifier:          wL9H7zfhEC0oZHJEhmKvPsh/cdPOYXKiATbfbViuxNE=
Subject key identifier:   A6:BE:10:F0:AB:EE:A4:C5:0E:A1:7B:CC:0E:79:75:04:8D:7D:16:39
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F5923D4F71E861ED20776E940
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/04cece74-7cb3-32ad-aa95-08a314b34897.roa
Signing time:             Wed 30 Sep 2026 15:54:35 +0000
ROA not before:           Wed 30 Sep 2026 15:54:35 +0000
ROA not after:            Tue 29 Dec 2026 16:54:35 +0000
asID:                     25198
IP address blocks:        23.231.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:23:d4:f7:1e:86:1e:d2:07:76:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 15:54:35 2026 GMT
            Not After : Dec 29 16:54:35 2026 GMT
        Subject: CN=ae141a2f-9672-4edd-b244-17bb9ed70314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:71:73:8d:0c:ea:30:49:34:5d:5c:73:56:
                    41:28:d9:e1:6b:8f:32:12:dd:f2:98:6e:41:36:a7:
                    9d:3e:14:1c:e7:13:1f:8b:02:72:88:f8:b0:28:a7:
                    0b:1f:1f:9f:fc:9e:fd:b5:a1:17:3e:14:f1:4c:fd:
                    28:5a:bf:d1:19:3b:71:fe:cf:fa:f2:b1:91:0f:f7:
                    cc:2a:dc:a8:b4:ec:9b:bc:1c:6b:39:42:2a:cf:c1:
                    cf:86:55:c0:b8:f7:1e:b1:97:a7:4e:02:df:9c:2f:
                    3e:2d:94:1d:80:f0:de:93:bc:cc:0e:52:4c:0b:9f:
                    10:ff:48:b3:3f:06:57:bd:0f:6a:40:13:b1:9c:be:
                    a2:e4:75:29:19:4f:b1:76:be:86:cb:3f:10:02:25:
                    4e:34:4b:02:33:dd:97:26:0a:61:4d:fc:80:a7:c2:
                    87:b9:6c:08:94:84:77:69:58:98:90:fa:f7:78:78:
                    3d:64:1f:85:60:c5:4f:6b:8f:8f:59:5f:f0:ee:79:
                    c7:1f:89:7f:5d:00:05:ec:e2:5d:64:0f:21:da:f6:
                    81:0e:7a:67:e1:64:ff:ce:88:59:82:32:3a:94:1d:
                    c1:d3:60:ae:83:8a:1b:b3:fb:c0:6b:a4:da:5b:0a:
                    25:6b:a0:70:65:77:5c:32:ec:03:2c:eb:f9:e2:a6:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BE:10:F0:AB:EE:A4:C5:0E:A1:7B:CC:0E:79:75:04:8D:7D:16:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/04cece74-7cb3-32ad-aa95-08a314b34897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:a2:f5:11:a6:1a:43:38:da:6d:a7:3f:9b:48:a4:cf:6f:
         49:cb:1e:89:54:a3:81:07:44:bd:4c:39:31:69:4c:b7:00:eb:
         b6:31:83:69:db:01:92:4a:cd:4b:de:a7:07:b2:38:fb:e3:28:
         be:c0:f5:5b:d9:dc:3c:7b:42:b1:03:24:02:c6:13:8b:57:76:
         4b:b8:20:14:3b:93:e9:a2:e4:11:49:6b:5f:c1:ac:77:f3:b0:
         da:17:0e:5a:b8:0c:09:b9:eb:29:d0:ad:b3:3e:99:fe:89:16:
         7a:68:cb:56:67:d8:b9:9f:bc:22:86:fc:03:9c:0c:16:42:3e:
         7d:9c:df:34:5c:4d:08:f1:f7:32:1c:9d:a1:15:89:5e:f0:51:
         46:ca:3a:6d:18:a7:e8:3c:3c:70:18:d2:01:64:50:93:3d:68:
         82:f4:e9:4f:49:56:fb:eb:9a:c7:36:2b:f5:a4:61:ac:e9:e5:
         10:33:f0:07:f2:02:9a:d8:b1:ba:49:ce:83:52:3b:9d:4c:28:
         2a:a2:e4:a8:66:82:35:9d:4a:ff:83:c9:6a:db:47:e7:d6:37:
         79:70:62:f0:97:32:17:7e:fb:52:1f:2e:a8:2b:56:25:0d:55:
         01:4e:ac:d6:3e:ba:b4:08:42:37:26:c5:10:26:36:62:a2:26:
         da:67:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:41:12 2026 by rpki-client