Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a948d01b-e39d-30fe-ac56-3ed402c24e01.roa
File:                     a948d01b-e39d-30fe-ac56-3ed402c24e01.roa (raw, json)
Hash identifier:          HXEH4cOlbfZraJgf5pmJFK83Fqe8vwimtsUoA2Zf2NI=
Subject key identifier:   70:1D:95:3C:C3:86:C5:0A:CB:70:B7:BB:4E:CE:35:1E:7C:65:6C:99
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F4328584E90BA4D55DD4BC53AF3629600
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a948d01b-e39d-30fe-ac56-3ed402c24e01.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     39937
IP address blocks:        23.160.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4d:55:dd:4b:c5:3a:f3:62:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=ed3bb39a-2cc3-44bb-8517-8c3bfb14c498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:41:13:c8:0a:81:48:60:ab:ee:e3:52:b6:
                    55:40:6d:a5:04:bf:48:77:66:28:7f:f2:78:55:b0:
                    df:14:21:dd:e2:f7:7e:cf:23:38:34:bb:c1:b9:ef:
                    3b:8d:d2:00:fb:09:be:16:7d:7b:79:ea:48:72:f1:
                    84:71:a3:c9:e3:19:a8:d1:84:9b:8f:9f:dd:52:b3:
                    90:d3:59:f2:7c:49:2d:c5:88:49:6f:cd:63:4b:25:
                    21:2b:8e:d1:bf:2e:33:fe:59:24:11:04:9f:ea:39:
                    4d:ea:e8:50:69:79:6f:8f:8b:c0:6c:2c:99:21:ae:
                    0c:e8:95:d9:97:3f:b4:19:7a:0a:f2:3f:c2:f3:f1:
                    5b:14:ea:1a:d9:fa:2c:fc:3b:ba:6f:8d:40:64:c4:
                    0c:b2:7f:53:e8:34:9c:3f:03:7a:8e:c1:a5:fe:9e:
                    cb:30:44:c2:5f:34:83:4e:a9:07:82:c2:a8:96:7a:
                    db:1d:42:37:2f:13:7e:8d:cc:41:e5:09:cb:7f:0e:
                    9f:a6:c1:02:99:3f:d0:a4:8a:7f:82:03:9b:4e:0a:
                    2c:60:a7:2e:25:17:d8:b7:7c:88:4d:6c:f2:74:76:
                    c1:91:a7:93:26:0f:0b:4c:f3:2f:fe:38:fc:47:d3:
                    a8:78:4e:e7:9f:ae:56:3d:f9:4f:37:bc:4b:bc:9d:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1D:95:3C:C3:86:C5:0A:CB:70:B7:BB:4E:CE:35:1E:7C:65:6C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a948d01b-e39d-30fe-ac56-3ed402c24e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:32:df:ab:9e:4d:b6:e4:b7:65:5e:de:ab:a4:b7:b6:8e:0e:
         ca:62:98:3e:75:e8:79:f0:85:62:15:3e:48:d3:c1:25:30:85:
         c9:cc:0c:aa:70:93:5d:1a:8c:63:bd:da:55:0f:73:77:2c:73:
         80:0c:ad:76:cf:e5:a5:93:14:8c:56:5f:65:b2:68:9a:61:0e:
         24:ad:da:0b:31:e4:57:d2:2d:f8:5d:e6:d2:7b:39:9f:6a:5e:
         50:a1:85:03:74:da:6c:d4:4c:57:7c:6a:cc:27:fc:b0:39:59:
         24:fe:7b:ef:72:14:e0:32:90:1c:5d:fe:86:a2:f9:dd:49:8e:
         63:5d:87:75:d0:1f:f4:c8:63:b0:34:be:59:de:8e:c4:29:47:
         d3:e8:d3:af:aa:d4:3d:d5:99:ba:80:5e:87:1e:cd:fa:59:64:
         62:ef:6e:11:fa:48:0c:ee:4b:b4:c1:56:3f:08:cc:14:4d:a5:
         f7:74:f3:cd:cc:88:37:f8:75:92:ab:8d:99:f4:af:1d:6e:e8:
         e1:3c:21:74:d7:6d:f5:7c:59:b7:57:d3:db:cb:f3:d9:be:0d:
         ef:14:7e:2e:79:70:c1:a4:e5:f0:c6:82:9c:49:59:13:cd:67:
         68:7b:96:8f:4d:7a:8a:6b:38:0b:0a:9a:ae:7e:be:17:89:6a:
         02:b8:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:50 2026 by rpki-client