Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/19ed3324-788c-3bf4-8985-7dab261c9ade.roa
File:                     19ed3324-788c-3bf4-8985-7dab261c9ade.roa (raw, json)
Hash identifier:          XG75fHz+7WPOBRRn017hYq64q7dgzPeUpN6RpLcmIRE=
Subject key identifier:   8F:C5:77:72:AF:2F:D4:2B:D6:D6:F3:12:1D:A5:2B:1D:DF:83:14:3D
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F34286963018C3531F489B180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/19ed3324-788c-3bf4-8985-7dab261c9ade.roa
Signing time:             Thu 17 Sep 2026 09:58:55 +0000
ROA not before:           Thu 17 Sep 2026 09:58:55 +0000
ROA not after:            Wed 16 Dec 2026 10:58:55 +0000
asID:                     3257
IP address blocks:        23.231.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:28:69:63:01:8c:35:31:f4:89:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 17 09:58:55 2026 GMT
            Not After : Dec 16 10:58:55 2026 GMT
        Subject: CN=3a5d17de-166f-421d-b28c-2e8f431ff0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:25:19:34:6e:3c:e1:51:cf:bd:8d:48:2f:
                    06:27:90:b0:e3:32:07:0a:60:52:31:ea:7d:ab:67:
                    14:de:6f:c2:e8:d5:9f:81:9d:59:ac:9f:71:d5:44:
                    b0:bf:63:79:ed:c1:e7:3f:9a:e5:c8:87:3b:3f:41:
                    c8:54:f1:77:e1:89:d8:3a:32:61:8f:a1:15:93:a7:
                    c0:df:9b:36:1d:db:49:35:ea:16:11:0f:f4:cc:fd:
                    ed:33:42:27:3a:ff:ee:4a:75:a5:75:73:48:94:bd:
                    c7:39:9d:a9:93:78:a5:a5:c8:27:6d:21:87:c2:81:
                    63:3b:e5:ee:84:b0:db:ae:dd:88:df:9c:28:e1:27:
                    32:81:82:78:cf:58:d2:a4:2e:71:8f:11:33:98:c7:
                    b2:41:6c:f6:29:5d:29:50:31:b2:48:79:20:8f:48:
                    81:bb:a4:08:58:af:ca:f9:72:7a:0c:d6:e2:bc:bd:
                    c9:71:43:e5:83:b1:bd:ce:d4:ca:ef:73:18:e9:e7:
                    f0:43:23:36:e5:83:67:8a:bf:35:ee:15:6c:f7:8e:
                    da:95:bf:af:ba:17:24:4c:b9:6b:ec:28:75:f9:ba:
                    d6:f6:09:04:b5:e8:3e:11:26:05:bc:f1:aa:bd:06:
                    e8:b3:7c:3d:b4:c3:d2:3c:85:7c:ff:19:a0:2f:da:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C5:77:72:AF:2F:D4:2B:D6:D6:F3:12:1D:A5:2B:1D:DF:83:14:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/19ed3324-788c-3bf4-8985-7dab261c9ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:d4:40:72:76:24:34:94:c6:9f:bc:61:24:81:5d:4d:63:
         c7:6e:cf:8d:c5:e6:f3:76:81:c0:fc:89:a1:00:48:b5:28:cd:
         78:f0:6b:cb:85:ab:46:db:3f:08:37:bf:44:ce:c3:12:4b:78:
         c5:9c:05:aa:55:0c:ea:55:3f:7a:77:a3:29:c4:7a:a9:2b:ee:
         92:c3:92:ba:b8:10:3d:91:df:7e:31:8f:19:49:fa:f7:91:e4:
         84:27:c7:fe:9e:ff:af:a7:94:82:b3:fb:ab:d2:06:89:aa:6b:
         d3:28:7c:2f:c9:8d:27:55:1c:6e:10:16:3d:14:40:ea:84:40:
         92:c8:1d:e9:1f:3b:0e:46:ec:2d:6c:57:65:7b:36:c9:2a:f6:
         e4:73:ec:4a:e6:3b:ac:7f:e1:c3:4f:70:98:bd:f3:a3:6c:01:
         a6:41:8d:7c:c4:c4:a3:ef:f1:71:64:6f:b7:32:44:e3:02:c1:
         00:6c:91:73:e0:db:4f:34:16:9d:84:02:51:82:67:3d:8a:ca:
         66:51:a2:1a:61:9f:2a:f6:af:fc:19:55:61:c9:da:ed:2d:e2:
         4e:25:4e:ae:c9:f2:20:f6:4a:00:1c:e0:40:20:7c:30:ce:52:
         30:d2:df:4b:f3:db:ae:e4:82:24:f9:12:a2:40:a8:75:7a:45:
         42:8d:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:59:39 2026 by rpki-client