Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa
File:                     957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa (raw, json)
Hash identifier:          S9ciR/Z6tCud5J0hJ1JWM0HhDENbfHSIA74OS3MQh4g=
Subject key identifier:   39:E8:8A:48:30:09:17:DB:E9:7F:E3:79:A3:D4:0B:30:D0:43:83:84
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584E5BAF4721BEDDD1D9E8916380
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        23.179.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:47:21:be:dd:d1:d9:e8:91:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=881bbd4d-2df0-4fb7-bc44-1f4a41bf42d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:e4:ed:09:c4:6e:d8:94:90:27:7e:51:f1:
                    e6:2a:7a:25:04:a9:93:b9:5c:00:8c:62:11:7a:96:
                    c8:fc:f0:ce:7c:87:b2:d9:49:fb:f6:66:bc:d3:3f:
                    24:d0:79:0f:df:0f:a2:ea:41:d2:68:33:59:b5:cf:
                    9f:67:2f:f2:fe:93:ac:7a:04:63:02:03:a6:b3:0b:
                    cc:3e:15:2a:3b:d9:e0:fc:f0:9e:31:74:4e:89:c0:
                    1d:1f:cc:b1:ce:15:0a:d7:57:44:db:69:1c:a4:d5:
                    8a:af:97:9c:45:ab:03:bb:ad:64:04:5c:82:e4:17:
                    dc:6c:2a:8d:d9:5e:d4:30:b6:6c:5f:bf:1c:0a:8b:
                    d1:fb:c3:1d:78:af:30:a5:4e:b4:c6:d2:1d:da:a4:
                    da:88:52:0b:9b:b2:ed:5c:e3:01:fa:c9:c5:a9:fc:
                    46:96:57:08:bf:f3:a8:41:81:b8:90:d1:7e:a6:45:
                    8a:e6:3c:a3:ec:fa:c7:4f:78:bd:5b:93:7d:b3:a2:
                    41:8a:97:7c:be:ca:e8:da:a5:4d:1e:33:c6:ad:8c:
                    dc:16:2f:92:1b:df:a9:0e:b7:ce:46:dc:36:56:9d:
                    75:59:4c:a4:b6:99:f0:67:70:c3:50:41:c1:49:25:
                    7a:4e:ff:d3:1a:3a:f8:01:cc:44:2f:a0:37:64:06:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E8:8A:48:30:09:17:DB:E9:7F:E3:79:A3:D4:0B:30:D0:43:83:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:4b:63:d4:23:7c:72:7a:98:50:54:e4:5a:73:51:85:4c:
         f6:6e:9b:1f:84:8d:18:6d:87:0f:ab:6a:9d:93:ca:f5:34:e1:
         b7:08:32:c3:95:72:2c:71:d6:7f:b7:0c:55:b7:55:4a:61:4e:
         34:a1:72:5f:e9:15:5f:22:ab:c1:57:1d:93:02:80:39:cb:34:
         a6:af:47:1c:a5:3f:b0:d3:e1:26:67:02:55:93:79:c9:5e:90:
         39:83:83:44:7d:eb:d6:b5:97:fb:12:98:61:2b:9b:56:96:95:
         ff:1b:8b:8d:45:18:e3:b6:a9:8b:45:72:a9:a9:a0:69:8b:af:
         be:be:3d:14:74:9c:42:9e:f7:99:86:bd:4b:ab:0b:a6:ff:71:
         59:54:bb:75:a2:81:42:42:f6:38:f9:3d:15:d8:c0:c6:6d:c8:
         20:33:b7:44:c2:17:e8:db:bb:a6:eb:ce:89:a3:f1:1b:8a:de:
         f2:dc:a6:55:98:e1:bb:4a:e8:49:97:4a:96:7e:68:b6:b7:51:
         57:ee:70:73:56:e2:ee:69:df:a4:ee:4e:88:ee:8b:20:07:99:
         eb:19:73:e9:07:7b:e8:75:52:b4:d4:78:6c:3e:f9:00:0a:97:
         57:1f:be:36:2f:4f:bf:c9:c4:99:2e:78:61:83:a5:54:4f:45:
         31:27:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:51 2026 by rpki-client