Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa
File:                     a1bc269a-e265-3234-b628-e9d71b3d725d.roa (raw, json)
Hash identifier:          mmte/XCAisSFPs5tg/w9m2Wf2JOUkcDE0UG5S47rZ0A=
Subject key identifier:   E8:6E:E2:2B:A3:B1:AA:B3:06:F9:33:03:EE:CA:E3:8C:78:05:35:AD
Certificate issuer:       /CN=c8252214-88a3-4807-bbe2-b344c3be7f19
Certificate serial:       010D0C9F4328584E6F3A23EC6FEEC7A484EF0F78
Authority key identifier: 62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     25639
IP address blocks:        23.152.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:23:ec:6f:ee:c7:a4:84:ef:0f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8252214-88a3-4807-bbe2-b344c3be7f19
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4c4d9b85-d739-48b6-b6e9-03662be7833e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8f:07:70:74:37:76:d2:3f:5a:68:b0:37:23:
                    80:0e:87:1b:63:cd:75:16:40:bd:f4:3b:6d:19:32:
                    0d:28:aa:72:2d:12:85:c1:f1:fe:b7:46:45:f6:40:
                    ed:87:4a:28:23:f0:37:fc:7f:1a:be:14:03:c1:cb:
                    12:22:2b:b4:ec:f0:3e:56:4e:bd:c8:d4:d1:28:f5:
                    c8:ec:f2:99:90:7d:d1:79:8f:48:40:e3:0c:86:10:
                    47:df:8a:ee:5e:34:e2:0d:2a:f9:be:fb:fc:e4:5e:
                    01:c4:19:88:b2:96:cd:fa:98:e8:6c:f6:15:41:b2:
                    be:99:88:fc:2d:3f:db:bb:4b:dd:6b:9c:7a:d2:1a:
                    60:7b:95:f4:4a:c8:e4:6c:65:16:24:ed:3c:d4:4f:
                    e8:a6:05:d4:7f:e7:cd:87:8e:73:ff:62:09:fd:a7:
                    72:5e:a5:d4:fe:32:ec:8f:92:27:c4:91:3b:b2:ef:
                    ce:3f:93:d1:8c:76:06:3e:0c:f1:b8:fa:67:ac:55:
                    68:0a:bc:b0:81:24:b5:4b:d1:73:4b:22:ac:03:27:
                    3c:11:28:18:d5:03:e1:e9:43:e5:e8:5c:f4:a1:b6:
                    06:09:3e:aa:5f:ec:bf:25:61:6a:27:78:d1:72:9a:
                    0a:26:dc:5e:a4:0e:55:60:5a:2d:96:2f:d6:fb:9b:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6E:E2:2B:A3:B1:AA:B3:06:F9:33:03:EE:CA:E3:8C:78:05:35:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl

            X509v3 Authority Key Identifier:
                keyid:62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:71:54:c5:01:3b:ae:04:3b:66:ec:ef:98:8b:27:af:3c:85:
         b0:4f:a7:13:1f:98:0a:b5:68:d3:7d:84:e6:70:fe:cb:9e:7c:
         59:a5:77:b5:4d:e4:c7:c3:5c:d4:97:07:28:f6:80:97:65:79:
         3a:10:df:ad:c9:49:69:47:b9:72:f9:72:00:c4:04:48:25:09:
         25:b5:38:5c:36:8d:e3:5f:07:44:b4:77:88:6d:8c:a0:d8:6c:
         c7:8c:ab:b5:f5:11:d0:6d:e7:39:03:53:b4:32:4b:1b:c7:31:
         c6:52:9e:91:48:41:08:4a:08:6f:e3:6b:ec:bd:2b:f6:4e:eb:
         ae:9e:2b:e5:23:97:45:a4:e1:72:a5:e1:f0:21:b8:9e:de:77:
         15:14:1c:99:b1:9c:53:2e:f9:ac:16:ab:10:63:e7:b7:f2:d9:
         c1:15:89:d6:5d:d4:f5:f4:9d:7c:b1:f4:8d:6a:ce:85:46:84:
         a5:3b:16:c2:19:fd:0e:d9:3b:c6:a9:fe:4f:56:ab:73:e5:5c:
         cf:4c:e9:f9:a6:c3:7b:93:c9:95:26:fc:39:30:11:cd:4d:89:
         e7:dd:dd:0d:76:33:29:a9:9b:cb:b2:19:1a:e7:41:88:fd:db:
         61:91:e7:52:fe:73:b0:8d:e3:2f:10:a4:29:01:c7:7b:9b:00:
         d6:a3:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:05 2026 by rpki-client