Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/71f86ec9-2c20-38c2-b59e-3f1a52c018a1.roa
File:                     71f86ec9-2c20-38c2-b59e-3f1a52c018a1.roa (raw, json)
Hash identifier:          hsn8eWN2Wkh+BngucX107Hip162QwM25jQ4/FAAHMCg=
Subject key identifier:   6B:27:A7:4C:F2:68:2B:1F:56:2E:3D:64:F0:98:5C:25:C3:E4:9B:E4
Certificate issuer:       /CN=39812a66-44de-45e0-a65d-fd3a7673a954
Certificate serial:       010D0C9F4328584E94EA613474EDBAA6DCB39500
Authority key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/71f86ec9-2c20-38c2-b59e-3f1a52c018a1.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396422
IP address blocks:        23.151.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:61:34:74:ed:ba:a6:dc:b3:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39812a66-44de-45e0-a65d-fd3a7673a954
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=dfa9591a-4e47-4596-b077-0bbb5b7bd46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:35:23:79:ef:c4:0a:3c:5b:7a:d8:c2:a8:
                    7b:46:a2:3b:59:18:09:18:ed:fb:c7:6d:bb:bb:a5:
                    6f:8c:ca:e7:4a:ca:f4:c9:5b:d0:2b:b6:b5:2c:96:
                    0e:0d:b2:77:7c:7e:6f:32:10:07:1c:fe:4a:df:74:
                    50:7f:f7:a2:ed:57:71:f7:cd:b1:68:ce:55:87:2b:
                    9c:1e:5d:e8:73:c3:84:e1:e9:ff:55:43:4c:73:60:
                    d8:e1:ed:25:7a:d3:8f:66:68:18:fb:d8:70:e6:41:
                    98:a6:8a:83:e8:47:bc:72:b0:ee:4f:95:2a:94:a4:
                    3f:b4:2d:c7:dd:e6:11:d0:fe:68:9e:79:19:c9:24:
                    21:ed:4c:a0:67:9f:8a:a0:3a:39:c7:0e:46:f4:95:
                    a6:6e:56:dc:0d:0a:11:d4:23:ab:61:22:b0:48:09:
                    c1:39:81:f9:86:b4:3c:06:3c:7d:2c:82:37:99:ae:
                    1f:2d:6a:e2:35:d0:f3:56:d4:b1:f4:a9:b3:40:d7:
                    cd:32:e9:8b:44:49:c2:58:63:79:57:01:6c:76:b7:
                    fc:57:b5:8e:c9:bb:7b:2c:1f:ea:ca:fc:d5:56:c5:
                    27:24:08:22:ba:bd:d2:c8:88:46:2a:97:4f:35:f0:
                    48:ee:9f:73:be:39:28:72:3c:94:4f:a4:1a:51:ea:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:27:A7:4C:F2:68:2B:1F:56:2E:3D:64:F0:98:5C:25:C3:E4:9B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/71f86ec9-2c20-38c2-b59e-3f1a52c018a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl

            X509v3 Authority Key Identifier:
                keyid:8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:26:7b:23:38:9a:80:3f:0a:d0:3e:75:a6:fc:5f:2e:98:80:
         88:6a:30:a1:68:f0:0d:df:c0:1e:2c:20:ca:d7:51:3d:9a:8c:
         30:8b:76:20:ed:98:51:7b:32:25:42:ec:5b:fc:dd:15:5b:f0:
         42:66:e1:bf:e8:83:25:cf:2f:d9:5d:03:29:47:a3:7a:0a:03:
         3f:6d:3a:e7:7b:80:45:66:38:03:8c:0e:79:4b:0f:91:b5:76:
         69:72:97:c1:6b:5b:ab:e1:f1:07:fc:49:a1:d1:93:5d:88:c5:
         c7:1a:d0:b9:5e:2a:94:e9:a9:85:4b:b5:e0:fe:86:89:0e:be:
         bb:db:29:2a:c9:d8:58:aa:1b:3a:62:a6:05:27:96:2f:6d:30:
         96:6f:18:0e:1d:9b:71:48:63:e1:36:a6:9a:4d:8d:7f:f5:58:
         54:72:1c:44:9e:29:52:7f:ed:e8:09:a4:f0:64:87:53:08:cc:
         b0:f4:a2:2e:56:71:fe:ea:b6:d2:14:d8:4c:46:91:9d:ef:d6:
         19:fe:ff:c9:35:b2:f5:b1:4f:e3:c2:4a:9c:9c:13:67:86:2b:
         d4:ae:e3:55:41:10:5e:06:2a:aa:33:e5:82:c9:fd:f7:f2:56:
         41:b9:8c:d0:cc:c9:9c:25:2e:ae:d8:36:ba:f6:4c:9a:ad:ce:
         d6:bf:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:18 2026 by rpki-client