Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/54de0e52-e7d0-3b24-ad2b-6b85851713f8.roa
File:                     54de0e52-e7d0-3b24-ad2b-6b85851713f8.roa (raw, json)
Hash identifier:          cMZlP2EmvnzKB0ZR1534cZS7C2z1bpTaBzX3GA9XPgo=
Subject key identifier:   67:49:F5:CA:02:4B:F6:6F:7A:56:6A:57:64:F5:B8:6B:7A:B0:52:D2
Certificate issuer:       /CN=8fcdcf75-4a90-4874-85b0-b4e1b3fc2923
Certificate serial:       010D0C9F4328584E577F4703D23ECE345A6F9390
Authority key identifier: BE:57:49:55:9E:E3:50:25:51:D7:1D:5D:DD:AF:4F:23:32:8E:72:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/54de0e52-e7d0-3b24-ad2b-6b85851713f8.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     400179
IP address blocks:        23.130.8.0/24 maxlen: 24
                          2602:817:4000::/40 maxlen: 48
                          2620:9f:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:47:03:d2:3e:ce:34:5a:6f:93:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fcdcf75-4a90-4874-85b0-b4e1b3fc2923
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=2eb21205-d7bc-477b-a57f-0fc41cabef15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:f7:15:a1:dc:23:e1:b5:91:d2:0e:26:c1:
                    a0:5b:7d:ce:26:06:f2:ad:36:8c:14:13:f4:d6:17:
                    e9:5a:4c:63:fe:d6:e2:62:69:cd:28:d8:8f:74:7d:
                    af:0f:fa:6c:1e:95:a9:a2:b6:1e:e3:08:82:30:32:
                    01:86:1c:35:ee:64:58:26:57:81:cf:1e:ba:3b:13:
                    85:97:55:5e:89:09:c2:2c:4a:43:db:3b:98:18:cc:
                    f0:1b:e3:89:1b:b4:fe:c4:ce:8b:4c:f8:9e:ad:7d:
                    54:c7:32:39:7f:16:be:a8:13:69:1b:83:4d:11:16:
                    99:86:73:59:1b:b3:14:9a:70:2b:5b:09:c9:8e:bb:
                    7c:f4:8c:de:00:df:16:09:3f:e3:a4:a9:3e:f0:1e:
                    fc:1c:4c:a2:ed:ce:d5:14:23:18:18:d0:c0:2d:46:
                    6f:20:31:0f:07:e5:2a:84:bf:3d:41:94:1b:dc:75:
                    41:5c:51:c5:34:3c:54:7f:5c:c7:60:2a:5d:41:95:
                    f8:85:2d:50:71:2e:da:78:c2:91:7a:58:21:8d:35:
                    ee:a7:b0:66:44:04:06:7d:0a:85:3d:3f:63:e5:cd:
                    1a:12:99:80:31:af:3b:31:35:f3:fe:03:80:55:00:
                    c7:fe:cc:4d:c7:48:fc:c9:d7:c9:a2:5e:c4:10:94:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:F5:CA:02:4B:F6:6F:7A:56:6A:57:64:F5:B8:6B:7A:B0:52:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/54de0e52-e7d0-3b24-ad2b-6b85851713f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.crl

            X509v3 Authority Key Identifier:
                keyid:BE:57:49:55:9E:E3:50:25:51:D7:1D:5D:DD:AF:4F:23:32:8E:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.8.0/24
                IPv6:
                  2602:817:4000::/40
                  2620:9f:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:c6:e0:aa:2e:3d:8e:fb:21:d2:36:bb:44:86:43:e1:87:
         df:e8:3f:b2:1c:e1:7b:99:84:bd:81:d1:20:e6:ba:68:ae:64:
         de:23:98:35:ed:3b:df:aa:e8:6d:86:37:31:03:be:d6:20:44:
         92:38:9e:94:35:7b:d0:13:9e:ba:e6:a7:c9:18:ff:6a:bb:eb:
         b7:2c:fb:0b:af:6f:df:c6:25:3b:e8:a7:fb:5b:25:0b:26:41:
         c6:a3:85:49:d5:d9:6b:b4:e4:23:90:26:1f:ce:0c:14:e7:ae:
         30:79:e3:4c:e1:e8:bc:ba:9d:3e:2b:d9:db:1a:6f:95:24:41:
         f0:7d:19:f9:8a:d6:f4:20:97:d9:e9:77:23:29:aa:6e:16:2f:
         3c:2a:a9:4f:c6:29:5c:78:68:47:6b:aa:23:89:ee:9d:f9:10:
         bf:11:0d:81:4c:21:30:01:eb:3d:86:19:6b:d6:e3:30:5c:3a:
         86:c0:43:7d:31:dc:3d:5a:ea:d9:7e:40:a3:87:06:cb:68:68:
         ae:90:31:d3:32:c7:28:e8:c2:e8:26:40:f7:86:e9:f0:34:3f:
         4d:b9:51:d2:61:d5:98:6a:b5:78:46:6c:3d:68:08:d9:6a:2a:
         95:83:4e:9d:5d:f2:73:a4:1a:9e:c0:67:36:46:8d:3d:97:30:
         69:17:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:20:16 2026 by rpki-client