Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/7804c4fb-4aa6-31d2-b2fe-68c8c57a27f9.roa
File:                     7804c4fb-4aa6-31d2-b2fe-68c8c57a27f9.roa (raw, json)
Hash identifier:          9jOW8EGMHwKjtecIYAde5pLi+7gT6Ob9VSf33HAZumQ=
Subject key identifier:   1C:D7:C6:78:F3:EC:3D:47:81:5E:6D:2C:39:39:77:4C:80:2B:54:63
Certificate issuer:       /CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3
Certificate serial:       010D0C9F4328584E9384FD6D9860E5367095F7C0
Authority key identifier: 35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/7804c4fb-4aa6-31d2-b2fe-68c8c57a27f9.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     54255
IP address blocks:        23.128.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:fd:6d:98:60:e5:36:70:95:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=dbae5a69-041b-45ac-9162-7549eb2f2bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:64:e9:09:2a:e3:58:8d:fd:f9:48:fb:a8:
                    3b:53:1a:82:03:98:a1:39:56:cf:8d:b8:8e:0b:ae:
                    ad:7a:e6:b8:bc:1b:24:18:c1:a3:b5:24:33:70:89:
                    a4:5e:59:36:4a:26:7b:5a:aa:d5:3b:c4:f9:73:2e:
                    08:a9:7e:00:59:d8:78:73:ea:5d:0a:c9:a4:ee:86:
                    5f:09:2b:d1:af:56:57:d0:64:94:05:00:84:59:cb:
                    87:82:72:18:8f:e5:0e:96:9c:44:b6:fc:8f:ad:e9:
                    65:2a:2d:a8:9d:ec:b8:c7:c9:d0:f4:d0:f7:95:83:
                    31:3c:af:30:cf:75:8e:5d:e2:ac:b6:8d:99:3f:e3:
                    50:af:7c:38:d3:da:a3:51:0b:9b:17:ff:07:17:0b:
                    7f:bb:9d:c7:1d:e0:91:c3:5f:2f:9e:f0:c4:6d:7e:
                    af:57:b5:87:92:73:0a:50:eb:af:99:61:04:2b:fb:
                    17:73:79:8d:34:fa:5a:9e:f0:49:6e:f4:c2:9c:eb:
                    ec:0f:d5:4f:b8:3f:2a:9b:5c:76:ce:df:c2:f4:cd:
                    fb:9f:3b:f2:a0:81:5b:2c:5b:08:b7:07:b8:0d:a8:
                    74:d9:14:93:d2:e9:d7:c6:dc:5f:b6:e6:67:c2:60:
                    36:9a:e0:8c:2f:ec:c0:8b:17:d3:cd:c3:90:60:ee:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D7:C6:78:F3:EC:3D:47:81:5E:6D:2C:39:39:77:4C:80:2B:54:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/7804c4fb-4aa6-31d2-b2fe-68c8c57a27f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.crl

            X509v3 Authority Key Identifier:
                keyid:35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:46:73:fb:d8:85:5c:a2:e5:81:35:fc:52:d1:f7:1e:da:
         29:80:f8:88:bd:61:45:b6:93:c6:a8:93:31:d8:68:5d:2e:5e:
         8b:8b:e3:e3:be:82:12:59:1e:b9:d8:ca:0f:54:d0:35:ea:e8:
         53:78:c8:6a:5a:ab:f4:61:ae:ea:5d:8c:cf:58:cd:c9:ec:f1:
         9e:79:e2:3c:b9:0b:d4:0d:7e:25:dc:9f:51:68:9a:20:1d:ad:
         7f:d0:14:e4:0c:7b:7a:1e:c2:2e:da:9f:1a:ce:60:da:3a:ab:
         e9:37:54:68:79:87:b1:b4:c7:2b:4a:b2:f2:8b:e7:83:98:d0:
         47:a6:2e:27:fb:43:22:b1:a8:6a:44:c1:34:15:8e:32:0a:39:
         43:8a:85:5e:7d:43:27:de:88:ce:f5:70:46:e8:35:8c:64:48:
         3e:79:13:42:1d:d2:27:f8:14:ae:f4:b7:a1:6b:51:1a:ef:fd:
         04:d9:fb:20:8f:7e:13:8d:b5:59:43:5e:b4:1b:ae:92:57:3b:
         cf:34:39:51:1e:23:91:12:69:60:6b:52:ee:68:63:98:41:b5:
         66:c1:43:a7:aa:cc:fa:9f:9e:64:0f:b6:54:23:79:4d:1d:5d:
         de:19:07:8b:be:c4:85:c1:18:de:32:74:f0:fe:1c:59:43:91:
         65:c9:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:54 2026 by rpki-client