Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa
File:                     ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa (raw, json)
Hash identifier:          ZJkifCZc8gBZ8EBiuqdU3KjcN+qNVi2yLLR+IzmOrwk=
Subject key identifier:   83:5E:29:2C:56:17:ED:CA:BA:34:74:1E:80:98:F2:94:03:72:B4:11
Certificate issuer:       /CN=fc69a390-9be0-4f05-abc1-c3b9b00edda2
Certificate serial:       010D0C9F4328584E3A2F30BB58C0FE209996B480
Authority key identifier: 95:F6:E7:21:CF:42:50:B8:E2:CA:1D:09:29:1C:DE:AE:2D:32:B8:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     396877
IP address blocks:        23.183.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:30:bb:58:c0:fe:20:99:96:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc69a390-9be0-4f05-abc1-c3b9b00edda2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=fc880ea6-9eb6-4437-a298-7e347ce88f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:78:18:a0:57:b7:5f:08:23:d9:d5:43:61:
                    c5:10:ca:51:b1:80:dd:9a:cb:d4:06:df:8b:d5:21:
                    97:ea:20:30:76:ab:d9:9f:bc:db:e4:94:cb:58:42:
                    b7:98:c6:38:c4:29:f3:e8:3a:c3:ff:4c:b9:ec:07:
                    c6:d6:69:0b:24:56:b9:ba:e9:37:9b:27:58:dc:11:
                    86:78:0b:e5:a0:d4:5f:50:e0:7c:8d:63:67:ee:dd:
                    6c:13:d6:32:00:cd:ad:7f:a9:d2:3c:3f:d6:c2:27:
                    a7:73:d5:dc:43:b8:ea:21:f9:c6:20:c8:a0:83:c6:
                    fe:4f:1d:7c:90:9a:f0:72:76:e4:93:0d:e1:9f:16:
                    50:dc:97:ac:ac:9d:34:ac:f2:5e:b7:4c:fa:9c:e1:
                    b9:09:e8:5c:e6:10:61:6a:e2:ee:3e:e1:cf:6b:6f:
                    29:e4:ec:6d:20:bc:58:36:54:92:a6:17:3d:fb:c3:
                    26:01:86:29:e6:69:67:0d:f2:a8:84:c9:ca:09:5e:
                    da:e4:d8:e0:99:de:77:86:4e:34:44:8d:25:79:16:
                    28:db:4b:f3:2c:39:28:ba:70:8b:ff:62:dd:37:7d:
                    ff:3f:43:0d:c0:e8:d5:10:45:50:db:47:3d:49:c1:
                    5a:85:6d:07:50:b3:26:bb:08:7b:7c:0c:e9:c8:5b:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5E:29:2C:56:17:ED:CA:BA:34:74:1E:80:98:F2:94:03:72:B4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/ed3287a6-9fbc-3168-9f20-bb1505c3a80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.crl

            X509v3 Authority Key Identifier:
                keyid:95:F6:E7:21:CF:42:50:B8:E2:CA:1D:09:29:1C:DE:AE:2D:32:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:1b:63:73:3f:89:41:9a:0c:6d:3d:46:a4:80:d6:3a:4f:
         92:50:3a:d5:5f:bc:bd:10:9c:b3:44:17:1b:11:ef:1c:3b:5c:
         10:fc:ac:4f:c0:65:9c:1f:2e:52:1e:1d:6f:c9:5a:c0:12:6e:
         a4:26:22:76:09:df:08:35:5a:d7:68:01:74:a8:61:1f:e1:4b:
         1b:78:e5:33:a0:f2:98:6d:77:b4:60:23:77:83:2f:64:42:10:
         d7:4f:27:8f:71:6d:c9:4f:32:0e:77:2a:6b:bf:43:81:51:5f:
         b4:4b:bd:01:c9:8d:27:24:1a:2a:91:b4:25:0d:5d:e8:58:bd:
         47:ec:11:78:4b:5d:af:53:df:11:26:f2:52:07:ed:cd:d2:9e:
         fc:6c:b7:b7:4c:9c:9e:ee:da:4d:02:d0:87:43:6b:e7:c8:bb:
         e8:0b:79:19:61:10:b3:ac:3f:45:29:83:73:f1:4e:61:99:a5:
         41:de:33:c5:72:1b:38:7d:e3:fa:d6:46:8a:4d:fd:bd:a8:e9:
         1b:48:8c:e7:c9:79:74:1c:63:80:81:57:6a:77:f7:3c:f6:d0:
         ec:31:27:aa:01:c2:e6:8c:92:38:54:ef:d4:d2:d2:2c:b9:c7:
         d1:88:0e:15:eb:a9:37:e2:17:f5:66:fd:f7:f8:00:15:ae:d1:
         a4:37:13:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:11 2026 by rpki-client