Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
File:                     c67fa2c4-805f-3152-936f-aeb5f876559b.roa (raw, json)
Hash identifier:          eqsVyjNaTsXw54OBlLvMLNHbLLL0NSk5TNJER6i37A4=
Subject key identifier:   10:FA:CF:EE:3D:75:0D:3F:20:32:92:66:5F:8E:94:41:9A:98:E9:7F
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584E7A64DD3B106172BA2DC69400
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     6079
IP address blocks:        23.153.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:dd:3b:10:61:72:ba:2d:c6:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=0817e13a-b8a2-4689-8de2-1e0bc79717a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:49:ee:11:6f:5b:cf:4e:7e:69:c3:bc:92:
                    de:64:98:98:31:7e:4d:ca:57:7e:bc:89:c5:bf:b4:
                    2a:a2:89:be:2f:f6:70:c0:2d:2b:a8:3f:4a:3e:82:
                    66:7c:49:bb:42:77:e2:70:55:91:b4:c1:b5:f5:1e:
                    5c:bc:df:a2:a7:52:fa:7d:b4:81:62:ee:c3:0a:13:
                    42:e7:c3:3e:5d:3a:6b:77:22:eb:dc:10:97:a5:04:
                    bc:97:03:e6:0b:e4:bf:b7:4e:e1:ee:fc:67:1c:cc:
                    2f:e4:e6:8e:0d:36:85:1d:b2:c1:fe:08:e5:31:08:
                    3c:63:03:0a:e0:be:a5:eb:61:71:d7:ad:0f:a8:c8:
                    65:e1:7d:1b:4c:f2:4c:b5:13:f0:9e:12:27:fd:6e:
                    22:cf:a0:11:27:a7:dc:50:d5:df:65:19:f0:0b:d8:
                    d5:30:46:50:0d:a5:00:34:f1:cd:31:f4:b5:5e:ca:
                    d9:50:a8:9c:ff:d5:4e:85:5f:94:52:48:c5:2c:f8:
                    74:79:d7:85:01:11:c0:cd:15:4b:4c:0f:e1:fb:dc:
                    77:01:0a:67:f3:ee:c6:ed:df:6f:5b:e6:8a:eb:58:
                    d7:91:b4:58:2b:26:08:9c:18:e7:17:00:5d:bd:39:
                    4d:79:99:58:6e:9e:55:f5:ad:d8:51:bf:20:75:47:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FA:CF:EE:3D:75:0D:3F:20:32:92:66:5F:8E:94:41:9A:98:E9:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ab:42:68:0c:e0:a3:41:ab:2c:1c:94:0b:f1:dd:cc:f5:d0:
         31:a3:06:aa:9f:ed:1a:1c:5e:44:ea:88:cb:32:80:c7:f8:b9:
         c4:81:a0:cf:81:1d:72:c6:74:cf:97:22:3f:e8:08:9b:94:43:
         23:eb:50:28:39:3a:9d:3f:e4:cf:5f:6e:70:ed:c5:10:7e:77:
         56:21:c5:dc:f9:19:59:d9:06:7d:1d:e4:43:ec:d3:98:c6:5e:
         fa:20:77:c5:05:c6:42:43:10:d8:1f:a6:bc:40:57:60:12:67:
         91:6c:10:56:7a:5d:81:5e:a0:d7:d4:71:11:54:dd:73:67:7b:
         dc:06:db:d6:c6:30:df:26:45:4d:ac:32:be:89:9d:0a:38:c7:
         9b:44:62:bc:b9:dd:8d:c5:b4:50:81:b7:a2:cb:c9:5f:7e:aa:
         8d:f1:3a:7d:4d:c2:48:30:46:ac:6c:97:88:54:1d:c2:5c:2b:
         8e:44:3b:2e:cf:bf:c0:d7:a4:a4:94:3b:6a:e8:ba:b1:3b:02:
         71:1c:98:d9:75:c1:f2:3f:0f:27:99:4c:54:f0:a6:0f:11:7b:
         67:05:d7:2c:49:9f:a1:fc:4c:b0:cc:e9:31:b9:4f:3a:ad:2c:
         48:5b:87:13:58:e4:f3:a5:1a:04:d4:64:83:27:21:ce:d7:3c:
         7b:86:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:56 2026 by rpki-client