Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1/8b8b6ef4-74c2-330e-bc4a-06599d1524d0.roa
File:                     8b8b6ef4-74c2-330e-bc4a-06599d1524d0.roa (raw, json)
Hash identifier:          K71ASsPi+nbXGJ8a8y486TlwfsZau+EOcOon/utXJR0=
Subject key identifier:   64:71:B5:FF:0E:28:6C:1D:47:4B:35:7E:5F:D0:02:8E:20:92:8E:3B
Certificate issuer:       /CN=ab746410-66a0-4e53-9c62-db51308068d1
Certificate serial:       010D0C9F4328584E94EA4DD0F4EFFA1BFD0D2780
Authority key identifier: CB:83:0D:8F:C9:2B:18:BB:E8:83:5F:67:FC:90:74:CF:C4:7B:99:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1/8b8b6ef4-74c2-330e-bc4a-06599d1524d0.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54721
IP address blocks:        23.163.128.0/24 maxlen: 24
                          23.163.129.0/24 maxlen: 24
                          2602:fef4::/36 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1/ab746410-66a0-4e53-9c62-db51308068d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1/ab746410-66a0-4e53-9c62-db51308068d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4d:d0:f4:ef:fa:1b:fd:0d:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab746410-66a0-4e53-9c62-db51308068d1
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=b7b8ce73-4c87-4166-9b86-2b3e064dad98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:b2:e5:07:c7:8f:c2:ff:5d:8f:64:a7:bc:
                    56:aa:9f:9f:ec:d8:16:42:85:b2:9a:73:70:bd:1c:
                    fa:7a:ee:a0:b9:43:a7:07:e6:75:49:45:a3:e5:ab:
                    cd:5a:d5:c3:bc:bd:95:44:12:88:f7:10:97:06:a6:
                    25:b2:29:82:ab:b7:73:a3:39:8b:6d:55:7d:bf:21:
                    fc:e1:23:a6:c7:93:ca:99:43:38:ec:4f:03:2d:c7:
                    80:6d:40:6b:e3:40:4d:5a:22:c0:30:67:56:6a:0f:
                    b4:c3:79:32:71:61:27:e8:2f:96:14:12:c7:09:db:
                    36:61:7e:d5:f0:af:37:4c:0b:03:fd:06:84:61:f5:
                    68:52:bc:45:de:eb:ca:2d:3a:24:27:7e:0c:3f:01:
                    d9:15:f6:29:55:a4:34:cb:b2:27:54:93:3c:0a:53:
                    9a:00:d1:d9:23:9f:9a:88:f0:ec:e2:d6:2e:b9:35:
                    7c:87:04:ef:74:22:f4:99:3e:1f:40:e3:39:fa:3a:
                    0e:a3:c1:97:11:f7:12:83:03:87:24:d8:ca:8e:d8:
                    f4:fd:69:ed:d4:a1:86:30:5a:a9:4e:68:4d:3e:2d:
                    06:e4:7a:64:dc:e3:d3:5b:25:f0:d3:70:d9:1e:76:
                    5b:fb:67:44:1a:5e:8d:08:ee:12:19:33:cf:01:15:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:71:B5:FF:0E:28:6C:1D:47:4B:35:7E:5F:D0:02:8E:20:92:8E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1/8b8b6ef4-74c2-330e-bc4a-06599d1524d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1/ab746410-66a0-4e53-9c62-db51308068d1.crl

            X509v3 Authority Key Identifier:
                keyid:CB:83:0D:8F:C9:2B:18:BB:E8:83:5F:67:FC:90:74:CF:C4:7B:99:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab746410-66a0-4e53-9c62-db51308068d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.128.0/23
                IPv6:
                  2602:fef4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bc:db:b6:57:22:e0:2d:66:9a:68:87:91:a8:54:86:9b:95:
         45:20:57:a3:93:58:c1:7a:84:f2:76:38:ed:12:d8:46:d9:c0:
         ab:cd:3c:e7:a2:37:a7:51:5f:f9:0c:8c:a4:d4:77:82:fe:0b:
         ff:40:19:9c:5f:29:ac:39:ba:48:84:07:b4:b1:79:c3:eb:b5:
         bf:ad:f5:99:ae:cb:d6:34:dd:76:f7:aa:45:51:3a:3d:d1:45:
         b2:66:60:1e:81:57:9e:72:8b:c6:e6:0e:0f:e9:49:6c:25:b2:
         9a:ff:8f:d2:4b:f2:ad:b9:59:61:49:6e:e9:82:5e:5f:d5:e8:
         91:fe:26:14:21:a3:ce:0b:b7:71:44:0a:9b:6c:2c:bc:c9:78:
         28:41:4b:50:68:db:97:90:35:97:72:50:a7:6e:5f:9b:b0:51:
         51:bc:a8:39:e0:5f:33:18:48:b7:bb:3e:b1:e6:1a:88:07:65:
         0f:62:04:ad:2e:0c:48:6d:e1:e9:07:40:0d:03:ff:fa:7d:38:
         fd:09:de:e4:0b:0e:0e:21:63:d9:a7:9e:3d:b4:82:9e:5e:cd:
         4d:80:50:1d:3b:89:15:64:d7:14:73:89:50:59:4f:54:b0:80:
         11:34:3d:cf:9a:e4:ec:f1:48:eb:a6:b1:bc:0e:48:d8:97:e2:
         cc:35:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:07:55 2026 by rpki-client