Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/c75ddbb1-cb1b-390e-9a7f-d265f8a46512.roa
File:                     c75ddbb1-cb1b-390e-9a7f-d265f8a46512.roa (raw, json)
Hash identifier:          6U11zOJGFeamC+3pgxo+ZKhwdkh4rYoI+7QYFzwm0j4=
Subject key identifier:   9D:A9:51:E9:68:5C:2D:AA:8C:F1:C4:D2:74:44:81:92:75:C1:BE:93
Certificate issuer:       /CN=a1ff4338-4c9d-4606-914c-3240a23a01be
Certificate serial:       010D0C9F4328584E946A619E6B96B0F3E56CA380
Authority key identifier: B5:73:4C:62:C9:2F:CE:4B:95:B6:04:5F:B2:5F:29:F6:A2:C9:F3:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/c75ddbb1-cb1b-390e-9a7f-d265f8a46512.roa
Signing time:             Wed 22 Jul 2026 04:42:30 +0000
ROA not before:           Wed 22 Jul 2026 04:42:30 +0000
ROA not after:            Tue 20 Oct 2026 04:42:30 +0000
asID:                     402789
IP address blocks:        23.161.44.0/24 maxlen: 24
                          2604:d890::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/a1ff4338-4c9d-4606-914c-3240a23a01be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/a1ff4338-4c9d-4606-914c-3240a23a01be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:6a:61:9e:6b:96:b0:f3:e5:6c:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ff4338-4c9d-4606-914c-3240a23a01be
        Validity
            Not Before: Jul 22 04:42:30 2026 GMT
            Not After : Oct 20 04:42:30 2026 GMT
        Subject: CN=36880c4a-fe20-4b0c-9dfc-e1dd1d8f5a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c2:5e:ff:38:90:6c:6b:12:72:de:cd:4d:f9:
                    6b:59:5a:fc:bd:24:52:72:a7:01:1b:ef:62:b2:cc:
                    17:e8:a4:ab:19:4e:ba:10:fd:74:8e:90:55:11:7c:
                    47:0d:f9:6a:f2:71:b1:40:90:15:c0:8e:d3:a1:0d:
                    23:77:74:f3:a9:91:85:b8:27:57:04:68:ff:40:71:
                    20:82:31:2d:21:3d:c0:55:5b:55:c7:30:75:78:b8:
                    d2:20:2a:36:a9:e8:ad:c4:4e:ea:4c:27:e6:e3:73:
                    2e:be:42:31:de:0f:0c:ce:58:d1:69:c1:63:db:cd:
                    bd:53:9b:ec:c7:80:22:b2:c5:2c:5a:2d:10:49:fb:
                    35:1e:97:ae:c1:9a:b9:37:4c:31:90:51:93:21:83:
                    02:85:21:78:ac:d1:28:ce:e5:d1:a9:c6:12:65:f8:
                    b4:99:cb:31:ca:bb:66:27:9e:c8:b7:f7:d8:da:81:
                    92:44:30:16:b2:90:92:a1:51:16:f4:af:b6:5b:26:
                    d3:6a:b8:4e:16:8f:10:cc:c7:bd:79:48:30:63:99:
                    f9:ca:fc:11:14:88:16:85:6f:55:8a:ff:36:2f:97:
                    76:ca:dd:5b:24:38:a8:80:a5:f8:87:7b:45:ff:1b:
                    2e:f0:24:9d:f1:88:67:af:57:ce:21:da:2f:1f:9b:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A9:51:E9:68:5C:2D:AA:8C:F1:C4:D2:74:44:81:92:75:C1:BE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/c75ddbb1-cb1b-390e-9a7f-d265f8a46512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/a1ff4338-4c9d-4606-914c-3240a23a01be.crl

            X509v3 Authority Key Identifier:
                keyid:B5:73:4C:62:C9:2F:CE:4B:95:B6:04:5F:B2:5F:29:F6:A2:C9:F3:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.44.0/24
                IPv6:
                  2604:d890::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:d5:63:6e:46:38:9f:9e:c7:28:3b:88:55:52:01:d2:5b:
         2b:05:40:68:a6:1c:6b:08:ea:74:51:71:ea:90:61:35:4a:d9:
         1c:35:4b:c3:c3:54:35:1d:c8:c1:2c:82:e7:94:aa:5a:4f:15:
         ba:19:02:8e:21:5b:0d:e4:ec:c8:71:8c:96:97:ba:86:8e:ad:
         1b:ef:94:d6:89:06:1a:3d:d4:a7:dd:d5:9e:d6:a1:51:3d:3d:
         66:a8:64:5e:7b:72:a9:e8:9a:1e:16:1d:be:e7:5e:df:d9:fa:
         88:b5:e4:c3:4f:3d:2e:9a:ec:06:59:de:b7:ca:0f:58:db:0a:
         6e:a8:bf:64:67:d1:f7:13:0f:ee:40:e6:50:a1:9b:2c:d1:b3:
         aa:9f:6e:d4:0a:65:c0:ee:ff:41:e8:95:b1:8b:c1:46:35:43:
         92:85:08:40:59:8e:d3:1e:97:cd:25:0f:01:e1:ea:82:61:44:
         b6:e2:78:b5:bf:30:02:0f:0c:7d:eb:cc:03:54:fa:42:b7:be:
         19:c9:bc:d5:1a:05:87:cc:46:a2:66:67:aa:50:06:7d:87:e7:
         84:36:bd:b2:ae:42:82:4d:69:06:68:7c:db:20:ad:4c:10:ae:
         8b:53:66:48:05:f2:15:f2:e6:ba:a7:26:db:c9:78:69:46:40:
         d1:82:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:32 2026 by rpki-client