Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0fd9168c-be35-39a0-97ef-6eefa9c57471.roa
File:                     0fd9168c-be35-39a0-97ef-6eefa9c57471.roa (raw, json)
Hash identifier:          vm+NiFebYc5Nu8tjRNG1i4wdU74zkzyXfernbnfmP/U=
Subject key identifier:   C5:F2:80:22:F1:36:A0:85:84:03:0E:F3:7C:04:F9:E8:2F:6A:ED:26
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584E90BA5E55D8D001E3D0164580
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0fd9168c-be35-39a0-97ef-6eefa9c57471.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     396422
IP address blocks:        23.184.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:5e:55:d8:d0:01:e3:d0:16:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=3f8c7a48-ad73-47cd-8d7b-14bbc07f7273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:dd:46:b4:5c:67:70:25:85:04:67:87:b9:
                    70:8c:79:96:72:cc:26:cd:35:24:3b:70:4e:a2:49:
                    ad:c0:40:4d:c1:9a:43:8e:9b:a6:a8:88:a2:63:cf:
                    22:a2:7c:46:40:9d:eb:c8:98:5e:80:ac:f1:b6:08:
                    36:51:f3:64:fc:69:18:84:fc:5a:0f:50:c0:4b:8b:
                    d9:d1:93:0f:74:23:13:e3:db:48:34:15:20:ef:a0:
                    33:dc:9b:b7:ac:68:bc:ed:14:21:17:b7:33:17:74:
                    46:31:d6:59:61:a6:5a:71:fa:62:5a:e2:7e:98:68:
                    0c:54:1f:3f:8f:aa:19:79:96:e0:01:a3:92:59:27:
                    f9:3d:18:6f:65:bb:db:78:a3:f7:03:9a:35:a3:14:
                    64:79:79:6a:7d:de:38:71:3f:d5:5e:a5:cf:ad:24:
                    b2:f7:22:59:e9:ce:ec:33:01:80:fd:20:e5:ad:ed:
                    71:7b:a9:a5:51:a8:d2:26:5a:01:74:e5:ca:a5:aa:
                    ef:28:0b:9f:77:a7:70:e7:2e:03:be:92:fa:2d:fa:
                    76:59:dc:4e:ff:d5:03:bf:5b:75:3a:bb:0c:a3:7b:
                    17:41:78:0e:0f:67:72:90:98:0c:25:02:2b:c2:e2:
                    69:87:54:8d:8c:05:c8:c7:67:4f:75:5b:45:dd:28:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F2:80:22:F1:36:A0:85:84:03:0E:F3:7C:04:F9:E8:2F:6A:ED:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/0fd9168c-be35-39a0-97ef-6eefa9c57471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:75:94:04:76:a9:ea:8a:10:dd:c3:94:e9:5d:94:25:19:e9:
         9c:95:70:32:7e:56:fe:ed:54:ea:97:eb:0f:a4:72:3d:c5:6e:
         95:53:6f:ac:99:66:e0:81:0f:34:b7:8b:fc:a8:8a:50:6e:f1:
         41:f8:9f:16:f7:d8:0f:21:7a:74:f7:73:0d:65:c0:e4:8b:f7:
         00:55:f9:66:47:bc:d2:ca:d2:58:f5:88:8c:b7:ff:fc:15:65:
         2e:37:11:70:42:12:d9:1b:87:07:38:92:0c:9a:d6:26:27:26:
         98:c4:85:ca:b6:6b:07:ba:02:ae:45:e6:68:9a:71:2e:e6:a9:
         89:4a:f9:78:e3:f6:9b:76:e9:8b:bf:d8:33:e1:5f:02:dc:3f:
         55:4b:3d:6f:5c:a2:97:e5:7d:1f:40:6c:0c:1b:f1:42:d1:c4:
         5c:be:c4:39:ed:79:59:70:75:78:93:67:0e:22:c5:10:49:69:
         68:a4:bd:14:a6:30:6e:18:ae:12:fe:9f:cd:5a:f8:6d:a7:3a:
         70:f5:b3:d0:0d:d9:db:37:db:de:07:eb:a7:6a:0f:cc:c1:34:
         30:8a:35:bd:19:14:a0:8c:22:7b:e1:a8:df:b0:f2:db:31:ea:
         49:7e:85:7b:b5:a0:68:09:ea:90:17:26:57:57:12:c0:d5:fc:
         85:fe:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:13 2026 by rpki-client