Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa
File:                     7c79eb9f-d88c-3305-8247-4977e174ee96.roa (raw, json)
Hash identifier:          2mUrFiJsFQWLY/rghC/WhA2L2oOrKrjQNA3tyjGn0nM=
Subject key identifier:   20:BB:1F:76:A4:15:74:28:6D:DA:9E:C0:15:B5:26:40:E6:CF:9D:62
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F4328584E4AEF6E380DFBA57A6A598452
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     399525
IP address blocks:        23.185.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:6e:38:0d:fb:a5:7a:6a:59:84:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=3a3e0a77-18f2-4666-b9af-8f3ee8ab0d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:4d:b8:aa:65:32:9e:08:77:c4:91:ef:6e:
                    4a:d0:d3:4c:06:ac:63:c2:80:e5:f5:9c:09:1a:68:
                    97:87:89:4a:20:b9:82:90:09:40:30:5b:99:4d:0f:
                    df:07:c5:73:9e:23:58:d9:6f:95:ea:0c:d0:61:50:
                    55:85:d9:82:6b:a4:45:16:c9:0c:d2:3f:b5:f3:ba:
                    a4:25:fa:f9:9d:af:2a:6a:82:94:91:b2:34:5d:55:
                    43:40:59:08:6a:36:7a:c8:be:49:9e:f5:55:3e:4d:
                    8f:f2:4c:25:25:39:0d:9b:e0:ce:77:9f:97:67:34:
                    0d:f9:a3:b8:93:f3:3e:19:76:dc:58:7f:45:0c:06:
                    0c:f1:20:78:2d:0a:46:0b:07:7b:3a:8c:85:72:e9:
                    53:0f:8c:09:83:7b:cc:0a:1b:b8:59:86:5e:0b:2f:
                    ab:27:f5:8f:30:54:28:7d:da:eb:82:8e:90:34:fd:
                    ee:37:a2:01:10:3a:9d:70:9b:cd:99:9b:15:cf:c2:
                    3b:62:05:02:15:d2:f7:61:34:c4:47:55:36:00:d7:
                    db:d0:cf:cb:db:1f:46:6d:e7:1c:f8:26:fc:f8:81:
                    05:76:68:9d:f1:d5:77:22:95:d9:f4:b2:37:0c:2b:
                    48:e3:83:d6:35:dd:d7:b7:31:ed:3d:fe:80:04:51:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BB:1F:76:A4:15:74:28:6D:DA:9E:C0:15:B5:26:40:E6:CF:9D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:a0:81:6e:a1:0b:e1:88:f9:41:89:09:d7:04:d4:72:99:
         b6:d7:a8:06:29:a5:9f:6d:ce:c7:e8:0e:1f:da:7b:1d:4c:d0:
         bd:00:b8:b2:b6:58:39:2b:b1:9e:66:a1:88:ac:9c:37:11:57:
         1a:6f:0d:49:5b:25:ec:ae:83:05:2e:b3:c9:db:04:6d:14:78:
         20:28:8f:22:ce:62:da:d7:2e:69:64:75:7f:a1:77:c4:73:bc:
         8e:06:8f:a5:97:0e:6d:30:7b:af:58:df:35:ad:e0:c4:2a:55:
         df:86:c6:3f:74:39:79:dc:07:da:9a:8c:8f:27:29:79:80:c0:
         91:26:26:e1:eb:7f:87:d9:27:56:b6:4d:cc:17:eb:37:29:32:
         39:26:f4:d6:8b:40:03:fa:69:81:00:cb:b0:2d:cb:b5:f5:07:
         4d:3d:a5:23:fe:7c:35:59:5f:89:43:8b:40:03:fb:02:19:23:
         0e:f1:f5:99:61:91:f6:37:81:91:0d:00:8d:0b:71:81:21:89:
         a6:bc:ca:a9:0c:7f:26:0b:d3:ee:32:bc:a2:ca:ba:e9:07:9e:
         a2:e0:9a:19:d6:ac:fd:44:27:df:43:81:93:a1:9b:56:17:5e:
         b7:ef:31:96:3b:2d:20:5d:0f:eb:a1:77:87:9f:10:1f:b7:5c:
         d5:9c:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:40 2026 by rpki-client