Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa
File:                     79d50f22-3431-3294-9576-851a087acf8c.roa (raw, json)
Hash identifier:          CtYgnDAXGDCc4xcv91ytpWjEA1ad1sbY25KQ4DU6hUg=
Subject key identifier:   EA:7E:EB:3F:C0:48:8F:BE:FC:3B:B3:8B:2F:7A:8A:14:5C:5F:AF:3D
Certificate issuer:       /CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe
Certificate serial:       010D0C9F4328584E7FFA34B4EDC66EE88EA9E880
Authority key identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     21557
IP address blocks:        23.128.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:34:b4:ed:c6:6e:e8:8e:a9:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=3b329dd1-546f-4225-8631-73def4751d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:5c:6b:df:0c:f1:32:e3:11:1d:c9:b5:b6:
                    66:68:47:9c:57:68:1d:b0:29:f7:29:9b:3b:43:2f:
                    b6:d9:8c:47:fa:61:12:12:6f:f8:03:f8:86:db:11:
                    96:ae:a6:0c:be:a3:93:02:71:05:e5:fe:03:f7:42:
                    84:08:65:b6:dd:a6:7d:08:f3:9f:4b:a4:17:3c:5f:
                    f6:ab:43:24:28:9a:5c:14:b3:1c:23:75:1e:77:a2:
                    41:7e:13:60:75:1a:73:b1:34:b7:10:ec:5e:14:23:
                    47:81:da:3c:9b:32:e2:67:10:04:84:4f:1b:d6:0f:
                    f0:2e:c7:7c:e9:6c:27:69:13:30:6b:45:f1:35:83:
                    cb:3c:20:82:37:de:4a:33:06:6b:fb:d2:a5:2b:04:
                    ff:01:a8:37:0c:7d:10:47:54:58:bb:5e:2e:39:da:
                    44:c5:4e:2d:92:1d:9e:76:5f:1d:9a:a2:d1:f8:b9:
                    90:5a:ed:8c:b2:ce:e6:f3:f6:84:5b:74:a5:86:2b:
                    40:83:25:6d:02:34:7f:c4:37:3d:2b:90:16:23:a5:
                    91:53:11:d8:9f:c8:ba:fc:b7:35:84:e7:7a:d9:1b:
                    34:ff:67:50:7b:ce:2b:ce:c6:67:91:22:8f:aa:05:
                    37:5e:fb:d7:6b:1d:59:d4:89:06:c8:d7:fa:80:30:
                    73:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7E:EB:3F:C0:48:8F:BE:FC:3B:B3:8B:2F:7A:8A:14:5C:5F:AF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl

            X509v3 Authority Key Identifier:
                keyid:49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4c:b4:e5:5a:44:60:3e:a9:68:af:f1:19:0e:12:3b:53:33:
         6b:ba:16:ad:1e:eb:42:d9:36:44:62:d4:ca:5c:ad:b9:c3:9f:
         1b:83:d3:5e:fd:e3:d1:42:fd:49:82:6c:ad:92:d4:0a:0c:8f:
         63:2a:94:cb:fe:e3:82:cf:de:c1:96:a1:07:da:4f:1b:ae:af:
         cf:5b:a8:52:77:f3:99:f9:9f:ea:6d:71:60:ee:9c:b5:95:16:
         e1:98:83:c2:84:14:b0:dd:1a:22:e6:ba:48:7c:08:16:64:84:
         62:54:42:fa:98:7d:46:dc:26:b5:3e:1a:08:fe:e6:99:48:52:
         3d:d3:09:b7:ef:4c:9f:e4:4c:84:1e:f1:d2:10:0b:db:50:64:
         48:73:31:d2:63:7f:7c:72:fe:de:0a:95:87:9e:db:1a:43:f4:
         10:63:4a:d3:44:73:55:1f:83:58:72:31:f5:64:86:e2:02:31:
         ff:28:9f:74:70:dc:9a:64:59:0d:f3:22:e4:03:60:10:29:19:
         c1:bf:fd:55:ad:51:30:1a:16:6e:69:22:dd:26:65:fa:23:2a:
         56:7a:d6:e2:ea:1c:4c:ec:ab:a0:20:22:f9:37:1d:10:41:78:
         54:74:0d:c4:7a:3b:27:ba:c1:a4:40:b0:67:79:f1:52:16:c0:
         8f:8c:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:33 2026 by rpki-client