Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/7968f4e0-a107-3d93-9289-9f93001e3b2c.roa
File:                     7968f4e0-a107-3d93-9289-9f93001e3b2c.roa (raw, json)
Hash identifier:          O2Ywex1pBfZYYmHmIkulafitVm63P/y7vikJJDZ7xjE=
Subject key identifier:   2F:4D:EE:6C:E6:56:6F:D7:5D:D6:5A:63:07:E7:9C:F0:66:6C:B1:AE
Certificate issuer:       /CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b
Certificate serial:       010D0C9F4328584E6F3A1A02E228CE57C7B0B800
Authority key identifier: BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/7968f4e0-a107-3d93-9289-9f93001e3b2c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     151407
IP address blocks:        23.143.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:1a:02:e2:28:ce:57:c7:b0:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=80ab0d2f-1436-4d8a-9f4f-363f709c718c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:87:2f:11:fe:f3:d5:29:95:c9:d3:d0:a8:
                    7c:89:54:99:b6:3c:13:41:8b:98:39:e6:7c:62:50:
                    f3:d3:9b:05:c5:e5:5d:4d:8a:5d:99:c6:d4:62:c7:
                    76:d7:07:44:cf:fd:39:c3:3c:30:97:a7:db:f1:63:
                    c4:96:65:41:71:c5:15:a3:c7:39:9a:e6:9c:57:18:
                    12:68:e8:79:16:ba:8d:52:39:66:ea:80:81:a8:23:
                    81:d6:85:02:18:ca:06:4c:3c:4e:68:0a:5a:8c:cb:
                    60:c8:3c:87:f1:08:dc:15:3d:35:11:64:18:68:45:
                    ed:e4:64:d6:a7:c9:f5:08:c4:bc:cb:a7:e6:b9:80:
                    8b:a8:21:77:2c:87:b0:58:3c:91:dd:e5:88:3e:f5:
                    09:a9:85:90:5e:08:86:4d:78:bf:92:f4:74:17:bc:
                    91:e6:fb:b7:38:5e:02:53:47:bc:e9:00:50:eb:7b:
                    7e:7b:83:cc:4e:15:61:c3:25:06:8d:89:2d:a5:10:
                    f7:2c:a6:ac:2a:6f:fd:fa:74:7a:e3:ba:7a:f2:0c:
                    51:4d:79:ad:fb:72:cb:b4:da:f7:74:c8:ab:18:e0:
                    de:3f:4b:cb:42:da:cc:84:46:0e:a6:1e:55:c3:36:
                    03:25:17:30:78:94:a0:af:d8:2d:64:1c:c9:69:57:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4D:EE:6C:E6:56:6F:D7:5D:D6:5A:63:07:E7:9C:F0:66:6C:B1:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/7968f4e0-a107-3d93-9289-9f93001e3b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.crl

            X509v3 Authority Key Identifier:
                keyid:BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:83:7d:0c:43:26:63:00:71:a9:9a:11:de:ea:25:1e:0e:
         2b:57:ef:4d:2a:0a:96:cd:f0:ae:50:5d:a1:d9:3b:3a:72:e2:
         49:b8:1d:0e:ce:a9:45:d5:0f:ea:a7:4c:18:16:49:6b:34:13:
         f2:24:1c:41:7f:5d:bd:0f:7e:61:19:cb:60:0d:9f:42:c6:8d:
         6c:ab:b5:af:d7:65:e1:ed:5c:ca:9b:73:fe:f4:eb:74:a7:5e:
         47:fe:6f:d3:59:c0:45:8f:45:f2:de:07:28:58:12:4d:b7:27:
         a3:0f:93:e9:4f:41:68:f9:01:a4:0e:07:42:e7:ef:69:8b:50:
         bb:7e:31:4f:d7:9b:e1:a3:5f:ba:d6:75:af:7c:5f:12:ea:1a:
         1b:66:8a:bf:5d:9b:12:99:3f:c0:86:26:63:a9:b4:70:bd:ff:
         ba:b0:0a:41:84:7e:aa:9b:ff:4c:eb:28:71:5a:6c:22:ce:65:
         88:97:8b:22:a8:df:10:92:55:b2:62:4a:fc:65:a9:89:ab:10:
         5e:9c:45:51:5d:a4:73:f7:6a:ca:d0:7a:c7:68:10:4f:40:f5:
         4d:eb:61:b6:c0:c8:16:e5:43:dc:5c:5a:d3:92:39:15:78:58:
         d2:95:aa:d8:aa:4d:c3:76:d4:4a:55:85:7f:3f:eb:5b:32:7e:
         c7:e0:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:53 2026 by rpki-client