Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/7bd9b70c-6d13-34d3-bc98-712e7054c694.roa
File:                     7bd9b70c-6d13-34d3-bc98-712e7054c694.roa (raw, json)
Hash identifier:          +2LYpztKPrRdRX9YR/4KckPRt41g274Z870aard/cl0=
Subject key identifier:   AF:48:AB:48:C7:6B:28:93:BA:F2:3C:49:D8:D4:A6:8B:33:D9:24:6A
Certificate issuer:       /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial:       010D0C9F4328584E94EA4ED534331664A9CF7F80
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/7bd9b70c-6d13-34d3-bc98-712e7054c694.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     16970
IP address blocks:        23.169.248.0/24 maxlen: 24
                          23.169.249.0/24 maxlen: 24
                          23.169.250.0/24 maxlen: 24
                          23.169.251.0/24 maxlen: 24
                          23.169.252.0/24 maxlen: 24
                          23.169.253.0/24 maxlen: 24
                          23.169.254.0/24 maxlen: 24
                          23.169.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:4e:d5:34:33:16:64:a9:cf:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=555c152d-ad38-4251-bf79-a7c391a6af2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:3e:1e:c3:49:ff:64:db:67:39:91:a7:ce:
                    4b:c5:40:39:18:0f:f6:45:d8:a4:93:d2:79:44:df:
                    39:2f:01:74:7e:79:79:87:14:67:4b:78:95:aa:2d:
                    71:dd:28:60:1a:ee:2c:ff:b4:ea:4b:ab:5d:b0:bd:
                    2a:6a:78:19:7e:59:98:eb:b0:8e:29:05:9b:38:a3:
                    cb:65:8a:c6:9d:68:0c:e7:5a:d7:4b:3c:44:36:29:
                    73:2e:52:fa:75:8a:5f:84:d4:07:f2:4b:e6:7f:43:
                    56:97:85:69:19:b4:cd:e4:5b:c1:85:3e:e2:22:58:
                    7a:2d:34:65:9e:24:09:5e:3e:77:a7:9e:c0:b2:2d:
                    70:a0:b4:5c:d1:c3:7e:4e:b5:df:26:bc:9a:64:52:
                    74:b2:96:cc:14:1f:72:f6:ef:a2:c3:2e:54:ec:e2:
                    fa:c6:a7:a9:9e:22:1c:50:76:70:f8:25:6e:57:72:
                    37:93:b6:3c:83:d1:89:50:f6:05:63:a6:a8:02:17:
                    d6:c7:fa:ab:87:e8:5e:69:7f:ea:00:1e:a2:a1:29:
                    a5:92:5f:ea:ee:c2:fd:d9:4a:b6:c2:45:6f:8b:2f:
                    df:09:8c:f5:0b:b3:99:72:16:54:cc:ab:fc:e4:f2:
                    ea:98:30:ee:cf:4f:91:86:c2:0b:6a:49:62:0c:de:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:48:AB:48:C7:6B:28:93:BA:F2:3C:49:D8:D4:A6:8B:33:D9:24:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/7bd9b70c-6d13-34d3-bc98-712e7054c694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl

            X509v3 Authority Key Identifier:
                keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4e:df:db:25:2f:b7:7b:7a:6f:50:a6:0b:5d:ae:f0:21:14:
         6c:f2:71:d5:e5:11:2b:38:7b:1f:a9:69:41:c4:85:9e:56:b3:
         33:b8:f9:e0:2b:0f:4c:d7:f0:7b:c7:65:71:67:4c:6c:f1:50:
         6b:87:62:bf:35:94:91:50:66:64:4c:83:b2:0f:fc:5f:1a:fe:
         79:bb:bd:31:61:4a:f9:f7:57:95:c2:1c:52:78:0e:12:c6:39:
         69:05:bb:93:36:b4:48:85:51:cc:ce:29:08:7d:89:af:9b:44:
         4c:d1:94:71:28:88:b8:4b:49:30:c6:28:b3:29:7c:9c:7c:fc:
         5b:99:8b:55:fa:1b:7e:48:16:9b:4c:19:4a:df:3b:a6:4e:a9:
         88:6a:6c:e2:f9:0c:9c:eb:74:ad:15:56:6d:00:b4:cb:3d:79:
         5d:3d:4d:f2:6f:72:19:55:41:0c:0e:f5:18:6b:2a:c0:12:bc:
         0a:bb:61:49:5d:bb:48:42:e0:b8:2f:d5:ee:06:7b:45:01:d0:
         0d:b8:0b:17:dc:01:7c:8f:cf:4c:e4:08:00:cc:40:c3:89:c7:
         cd:42:64:5b:66:6d:2e:d0:df:e3:6e:23:7e:39:28:29:60:be:
         49:52:ce:c4:d6:cc:75:85:66:93:ef:5d:b8:e7:cf:72:da:25:
         11:6e:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:11 2026 by rpki-client