Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/7dbd7a70-87d9-31b9-9f43-bbb258053f3f.roa
File:                     7dbd7a70-87d9-31b9-9f43-bbb258053f3f.roa (raw, json)
Hash identifier:          BqWDNxNHz2923tFPlYPgorJSbEKKaWPUngZPVri3U4o=
Subject key identifier:   18:02:48:68:F3:A5:5C:3E:DB:6D:5D:C2:2D:43:AF:5A:EE:05:09:52
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F4328584E8B429908BD78EB57A724EC40
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/7dbd7a70-87d9-31b9-9f43-bbb258053f3f.roa
Signing time:             Sat 18 Jul 2026 22:00:04 +0000
ROA not before:           Sat 18 Jul 2026 22:00:04 +0000
ROA not after:            Fri 16 Oct 2026 22:00:04 +0000
asID:                     397702
IP address blocks:        23.164.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:42:99:08:bd:78:eb:57:a7:24:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Jul 18 22:00:04 2026 GMT
            Not After : Oct 16 22:00:04 2026 GMT
        Subject: CN=4ea09cc6-6d2e-4c5f-8d8d-1b8e8345a904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:5f:00:18:e2:aa:ce:5b:71:81:2d:f7:27:
                    ba:9a:f7:1e:1e:93:ca:11:a1:3e:a9:8c:7a:08:51:
                    fd:63:ba:f8:ef:61:00:f7:46:e3:91:1e:ce:7c:9b:
                    6b:82:0a:6f:14:95:6a:b6:0c:2e:5e:3c:64:7b:65:
                    9b:53:17:46:d7:53:d2:52:6f:86:5e:2a:96:a5:2c:
                    95:e1:fc:72:5a:ef:a9:42:95:1f:e3:20:58:6f:a8:
                    75:b0:5c:9a:ee:f5:52:77:b1:59:d8:9c:59:61:a6:
                    01:ae:8f:2b:24:c0:52:6e:2b:a6:e7:60:5a:52:ff:
                    e5:3d:e1:d2:06:07:06:83:07:dd:a6:e4:3f:c4:b3:
                    ec:19:d8:f0:c1:d5:59:76:bc:9c:1c:4d:0c:2e:b9:
                    a8:fe:ac:f9:21:87:01:5b:29:91:6a:7c:2b:95:d3:
                    2b:71:27:2a:69:18:2b:14:5b:c2:6e:65:2f:81:4d:
                    3a:92:20:00:b3:5e:df:2b:d0:48:f2:87:45:e1:85:
                    5c:e1:3f:b3:3e:41:fe:da:93:d5:66:d0:73:93:f7:
                    43:2e:2f:9b:c8:af:36:ef:7d:d4:ec:d1:12:a3:74:
                    28:71:41:ae:ec:d9:bf:dc:9d:40:a4:98:14:ce:76:
                    99:02:1b:d4:34:c7:ae:0a:4e:b1:db:bc:79:ad:ab:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:02:48:68:F3:A5:5C:3E:DB:6D:5D:C2:2D:43:AF:5A:EE:05:09:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/7dbd7a70-87d9-31b9-9f43-bbb258053f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:d0:0f:50:32:11:22:db:6e:b2:6d:37:34:7f:75:42:2f:
         8e:91:ee:94:3b:b3:b8:eb:db:3c:7e:22:e0:04:32:d4:92:09:
         2a:a2:ad:7b:61:0e:58:df:ca:34:3a:f7:3c:fb:dd:aa:c9:62:
         b4:79:a0:ac:7b:0c:a5:bd:72:1c:f7:22:cd:7f:08:f4:c1:7f:
         7a:92:f2:cc:2d:bb:df:74:e9:2a:1c:50:a0:9b:e9:ad:9d:74:
         32:9e:0b:ed:a0:37:cb:23:ef:08:6c:ef:83:41:a4:0b:42:2b:
         ca:6b:aa:12:2a:7d:ec:75:ea:40:97:71:07:74:3d:d7:b0:11:
         3a:b3:d5:9f:23:73:e4:ae:4e:97:16:1d:30:37:6c:71:d9:fd:
         67:23:cd:6f:15:34:4c:6f:8e:9c:42:41:e0:15:d1:5b:1d:90:
         d2:f5:98:cf:11:9b:2a:6f:7a:09:43:1a:32:c0:f1:f9:80:12:
         82:cc:9a:10:22:f5:fa:20:de:cb:f2:e7:5b:32:12:8c:b3:07:
         27:c9:40:5e:85:82:29:91:41:ec:9e:f9:a8:4f:03:bb:c4:a0:
         9f:b9:1d:b7:f1:3d:e2:a8:f3:b9:f0:57:b8:6d:ee:90:f4:d5:
         b4:c9:9b:36:f2:92:b8:8a:6e:9c:7c:cc:d6:c0:ac:87:90:0b:
         8b:08:2c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:48 2026 by rpki-client