Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f/0e6699ed-2b0b-3077-976a-078cc2f094d1.roa
File:                     0e6699ed-2b0b-3077-976a-078cc2f094d1.roa (raw, json)
Hash identifier:          C1PLfUkQFt9SaoBrhDBya7mj1pZQtbY20M+k/3QbYI4=
Subject key identifier:   FA:33:BC:C6:72:91:2D:C1:3C:14:76:A0:21:3F:12:7A:C0:29:29:8F
Certificate issuer:       /CN=08c22229-8373-4f8c-9b23-0f1ff72b3f8f
Certificate serial:       010D0C9F4328584E921F9D98AFE7E40D3B868E00
Authority key identifier: 10:11:59:95:B9:DF:5F:F0:93:2F:B2:A1:B3:EE:15:D7:BF:76:90:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f/0e6699ed-2b0b-3077-976a-078cc2f094d1.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     214483
IP address blocks:        23.169.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f/08c22229-8373-4f8c-9b23-0f1ff72b3f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f/08c22229-8373-4f8c-9b23-0f1ff72b3f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9d:98:af:e7:e4:0d:3b:86:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c22229-8373-4f8c-9b23-0f1ff72b3f8f
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=d142f8ef-2b5b-4104-83e9-16545ef34e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:68:7d:8b:65:2f:e1:34:58:ca:0b:c6:26:
                    ad:b4:f0:2f:6c:1a:b1:17:69:47:26:54:db:4b:1d:
                    ad:f0:36:06:32:de:fa:dc:1c:30:89:0c:ed:5b:d4:
                    1e:2e:9c:bd:ff:5c:53:53:f1:6c:c0:23:55:85:bc:
                    67:25:7e:89:01:f1:19:e7:9c:e7:01:18:14:9b:3a:
                    be:36:07:d0:7e:0b:ca:4e:b9:e4:17:67:48:d3:00:
                    ed:5a:af:94:f8:ca:47:2b:eb:dc:ba:22:c5:ae:6b:
                    e5:f7:b9:11:11:c4:fd:fa:f5:59:42:9d:58:3c:ce:
                    1e:4a:20:f3:84:b6:70:18:d5:3d:3d:18:53:ba:d9:
                    fb:b5:76:24:1d:fb:af:17:31:c9:87:dd:0b:41:07:
                    f5:a3:82:f1:64:08:31:3b:f6:e5:b7:16:fb:6a:4b:
                    60:4b:09:3b:86:f0:27:77:38:f5:79:c1:05:07:9a:
                    81:0b:9c:5a:0d:8d:a7:de:75:da:5a:bd:b3:7c:99:
                    19:90:3e:c4:f5:07:8d:ac:b3:53:88:4d:3c:b2:fc:
                    9c:84:cf:8a:1c:fc:de:b8:63:bd:d4:d9:55:4b:85:
                    f0:59:5a:6e:72:3e:89:8c:81:12:7a:9b:4b:39:93:
                    33:9d:f8:89:c9:6c:f3:a1:f8:cc:fb:b3:10:2f:6e:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:33:BC:C6:72:91:2D:C1:3C:14:76:A0:21:3F:12:7A:C0:29:29:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f/0e6699ed-2b0b-3077-976a-078cc2f094d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f/08c22229-8373-4f8c-9b23-0f1ff72b3f8f.crl

            X509v3 Authority Key Identifier:
                keyid:10:11:59:95:B9:DF:5F:F0:93:2F:B2:A1:B3:EE:15:D7:BF:76:90:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/08c22229-8373-4f8c-9b23-0f1ff72b3f8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:95:67:2a:a4:99:93:58:12:f2:25:6f:d7:68:3f:03:f6:32:
         c9:48:8e:54:cd:19:f2:d2:74:0a:21:53:04:e4:0d:7f:dc:98:
         6d:d3:27:0c:7e:54:87:a4:fd:3e:1f:0a:4a:e7:09:ed:31:b2:
         53:a8:a1:fe:4c:35:93:34:99:30:0f:53:a9:ba:2c:b9:9b:44:
         76:41:48:a9:34:64:59:0b:fc:1d:8c:00:bf:7a:e0:da:e7:aa:
         b1:fb:e6:fb:5e:fc:8b:e1:8c:d5:77:8d:4c:93:9a:04:23:5b:
         d2:d3:fa:bb:15:42:bb:73:a7:56:18:77:a8:65:79:ea:b1:ba:
         53:ac:c4:a0:a8:39:84:75:31:23:b9:c0:a4:58:0f:d3:75:a4:
         64:62:01:1b:46:cb:f3:72:af:a3:46:f0:3f:1d:b5:cb:6a:cd:
         c6:33:4e:76:f0:b4:61:a5:61:db:24:1c:20:70:84:c3:b1:c5:
         b5:c0:53:fd:10:9e:31:c9:1d:cb:c4:0d:8d:ef:3b:1c:63:fc:
         92:d0:80:63:78:1f:1b:6a:b1:b7:ab:bc:d1:5c:66:09:84:17:
         cc:5c:09:ff:21:c2:d7:70:46:13:ac:60:93:ea:1c:a4:cd:73:
         d6:59:8c:d5:1d:7a:8e:aa:c7:2e:a2:82:8a:9d:b1:9b:f8:ba:
         8f:ab:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:18 2026 by rpki-client