Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/cf805fe3-0d09-3847-aa9a-77380429d203.roa
File:                     cf805fe3-0d09-3847-aa9a-77380429d203.roa (raw, json)
Hash identifier:          KnIVBHYZw+zzdkDPIRFtY6nVJFfwMSOMfDacfWTBxGk=
Subject key identifier:   56:BB:A0:02:28:7A:15:F1:1C:19:D3:01:1F:F2:F3:83:1F:01:0B:A8
Certificate issuer:       /CN=914db202-4885-454b-97f8-223de4bf2ca8
Certificate serial:       010D0C9F4328584F57681C64F8A8799353980680
Authority key identifier: C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/cf805fe3-0d09-3847-aa9a-77380429d203.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     45691
IP address blocks:        23.137.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:1c:64:f8:a8:79:93:53:98:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914db202-4885-454b-97f8-223de4bf2ca8
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=7975783f-7a5d-4528-9947-64e6d8b577a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:90:07:b8:4f:a1:db:0c:ae:a6:a6:4b:59:
                    bd:94:26:4f:9f:4c:8e:07:e1:e9:a9:c0:2a:a3:a1:
                    c3:26:9e:58:d1:04:17:b7:f7:76:a9:2e:da:cb:32:
                    c6:ea:0c:5e:94:1b:4d:57:a0:90:af:1e:7b:26:19:
                    66:45:11:58:6c:a6:f7:d3:03:6d:01:fe:f6:d8:50:
                    ed:c7:81:bc:15:dd:92:07:66:0f:f6:21:3a:2d:23:
                    c3:78:60:31:27:aa:98:b6:cb:98:55:4a:69:c5:74:
                    61:84:0c:38:b7:53:c4:d3:40:e3:6b:4a:08:3b:91:
                    0a:40:23:5e:a1:f0:56:8f:6f:61:04:38:c1:df:05:
                    bb:4a:45:d5:71:87:c2:a7:32:97:08:84:f5:35:f2:
                    ad:c9:e0:06:07:73:60:91:68:5a:60:da:b5:e0:5d:
                    c4:e1:83:c2:3c:45:e8:51:3d:3d:ca:cf:94:52:62:
                    8a:16:5e:ed:f4:13:36:cc:e3:9f:6b:3c:56:34:56:
                    a7:17:80:7a:34:d6:3d:ea:20:a8:16:59:7d:ba:1d:
                    df:95:a8:0a:16:4d:18:5b:ef:23:51:52:04:94:a0:
                    c0:7f:0f:fd:63:b3:40:6a:9e:67:1f:b4:28:5b:57:
                    98:6a:33:8e:2d:9e:af:46:04:f0:a2:f8:05:f4:b2:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:A0:02:28:7A:15:F1:1C:19:D3:01:1F:F2:F3:83:1F:01:0B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/cf805fe3-0d09-3847-aa9a-77380429d203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8/914db202-4885-454b-97f8-223de4bf2ca8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:03:06:92:E5:A8:64:2A:BA:D2:9B:7C:0D:C8:EE:06:FD:A5:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/914db202-4885-454b-97f8-223de4bf2ca8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:17:3c:4e:5f:1a:ac:e0:11:cd:47:09:59:2d:d7:1e:30:d6:
         c5:8b:b3:7a:9a:40:b3:be:91:b8:17:2f:83:13:ef:51:b5:f0:
         79:ab:a5:bb:32:66:9d:96:0b:5f:d6:e6:dc:74:51:24:89:3d:
         b7:5f:f8:59:31:3a:45:63:d1:0c:1a:ee:08:fd:93:fd:b2:e6:
         55:57:85:0d:63:55:1b:d8:a8:fd:57:2b:ba:be:c0:a4:69:85:
         b3:a7:9d:93:f6:2d:51:72:bc:3c:c8:64:bb:82:05:ef:5e:8f:
         09:91:09:3d:99:1d:69:e6:4c:e6:df:15:85:84:a4:af:15:3c:
         46:a6:b1:f7:61:81:53:3c:65:83:f7:52:7e:41:88:6f:c8:03:
         f2:bc:f8:b8:6a:61:2c:0e:c9:a5:60:bd:e3:fe:e8:5c:3c:79:
         f4:35:e6:0d:9f:a1:c7:fe:19:59:c8:6c:d9:fc:97:a7:36:ec:
         82:85:f2:4d:04:a9:5d:e8:b5:26:1c:91:92:22:2b:a4:d5:3b:
         f2:db:96:d3:b3:72:b0:17:26:14:41:ea:73:9d:64:b3:73:5f:
         b6:af:0d:f6:a2:bc:2e:c2:f1:3e:39:7a:97:f9:f0:9e:81:0e:
         22:35:1d:e7:ef:83:b0:ea:06:3d:59:d4:d0:f4:d0:73:9a:b9:
         dd:dc:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:20:13 2026 by rpki-client