Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
File:                     075439ad-b463-39da-bd19-5d02bddea01e.roa (raw, json)
Hash identifier:          8C0OCU9BJsotQ+v0f/BecB/G/A24n2sf8kaBVl/s/cc=
Subject key identifier:   F7:ED:59:67:9E:05:2C:C3:50:4D:F7:5D:2D:65:07:77:AF:69:69:28
Certificate issuer:       /CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
Certificate serial:       010D0C9F4328584E8DEFA484326DEBDE2AAA1680
Authority key identifier: 8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     212524
IP address blocks:        23.155.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a4:84:32:6d:eb:de:2a:aa:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=f980f700-c685-4320-a0c3-4259fe695238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:15:0a:3a:85:47:4e:19:6e:60:26:ca:85:a8:
                    51:b1:ab:af:f2:a3:c5:4a:16:32:d3:18:6c:ad:43:
                    a1:71:56:af:8e:25:f7:df:22:d5:7d:5d:7e:32:4e:
                    7e:e7:1f:fb:60:c8:6d:93:52:6a:2a:6a:2f:fd:28:
                    1c:79:0b:96:70:5d:ec:86:12:8f:86:eb:4f:f6:5d:
                    79:0b:c6:29:a0:a2:54:3e:af:6b:cf:7a:4a:7a:c5:
                    83:44:c6:99:cb:65:6e:0f:6d:90:ce:53:4b:05:5f:
                    cb:9b:17:25:20:ae:d7:86:0f:09:7b:0d:b8:15:21:
                    1e:c4:5e:15:ab:ea:e7:83:d2:89:9f:27:d1:36:34:
                    43:81:d1:01:9b:3f:01:fe:9b:2d:75:77:18:78:e2:
                    21:71:f9:c6:8a:de:c1:90:3c:4f:20:94:6c:e3:0f:
                    ae:e6:e7:7b:5f:e3:42:59:7e:2c:eb:fc:e2:44:14:
                    9f:b8:bd:2f:d1:29:57:d2:2b:fc:fc:fd:c7:be:ad:
                    c7:7c:b4:60:3a:ed:6f:73:56:5b:fc:71:82:de:57:
                    51:f8:92:9b:87:0d:0b:45:7b:a6:7b:de:b4:7c:18:
                    11:1f:d1:98:39:72:08:13:5b:e9:4a:48:e0:6b:b9:
                    12:e6:71:63:13:9d:8a:ce:67:47:13:6b:27:28:18:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:ED:59:67:9E:05:2C:C3:50:4D:F7:5D:2D:65:07:77:AF:69:69:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl

            X509v3 Authority Key Identifier:
                keyid:8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:90:51:bd:ad:4b:7e:49:73:49:b1:af:1e:bb:6b:87:df:2e:
         b0:8e:ac:d5:53:43:8b:20:4f:5a:ff:ec:ce:8d:a2:e0:95:a8:
         f2:21:87:12:cd:0f:a7:44:1a:93:a9:82:04:b4:cc:33:f5:17:
         97:c1:ff:25:3b:24:90:7f:cf:8c:4c:f0:a9:2a:bb:23:2a:4f:
         59:ce:66:0f:93:c5:c5:75:bc:d4:23:21:63:f3:4a:86:a0:66:
         21:bb:a6:d6:6a:1f:5a:91:47:ae:d9:58:5f:54:a7:f4:02:11:
         6d:2e:49:60:4c:71:06:a4:ca:9a:1d:80:2c:5d:d8:20:3e:34:
         48:20:5a:64:33:3a:24:d6:ac:b5:aa:1e:9b:5a:ff:4b:28:10:
         ad:d0:50:fc:6f:2e:1a:d8:dc:a7:10:38:01:ef:c2:c5:a4:04:
         06:44:51:ca:50:67:a7:87:af:ce:f8:99:f8:28:5a:25:c7:62:
         b9:a4:2d:0e:33:a0:6b:20:ab:02:bd:c4:04:ab:82:a3:86:6b:
         98:21:dc:d0:f1:c0:5f:2d:ce:90:18:34:45:c6:db:7e:f5:98:
         2d:1c:b5:01:94:6d:fd:90:c9:2c:8f:c3:ce:ad:0f:5d:ee:a1:
         88:eb:3e:2c:48:62:30:41:59:84:89:e4:7e:27:a0:ba:d5:ee:
         d1:20:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:28 2026 by rpki-client