Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
File:                     66807622-f529-3717-a7e3-9e3f1a257327.roa (raw, json)
Hash identifier:          J03//VGrX24jiFl/CbNRsSwYVGm/6MosS9PWS1cb0Hk=
Subject key identifier:   44:E9:56:41:51:DF:B3:8D:9B:0B:FD:DE:68:C9:3B:24:B7:D6:04:95
Certificate issuer:       /CN=f2eccad3-9416-4755-b75e-5a77a272beb3
Certificate serial:       010D0C9F4328584E66DA082EC67FC5B766B72180
Authority key identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     19625
IP address blocks:        23.188.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:08:2e:c6:7f:c5:b7:66:b7:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2eccad3-9416-4755-b75e-5a77a272beb3
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=251781b4-18b5-4557-ada9-6da3355236e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:78:9d:d6:77:85:ea:2b:aa:8a:ff:cb:c8:
                    1a:ff:db:37:69:34:7a:91:a9:58:5e:98:1c:fc:20:
                    67:e4:a8:d4:01:05:f1:20:e3:28:f0:44:fe:c3:95:
                    ee:8f:9c:9b:5c:3a:e5:e6:fe:c5:30:17:c3:af:7a:
                    b3:fd:8a:6f:07:3f:54:2e:65:d1:3a:38:4c:96:3f:
                    6c:2e:7c:69:10:f8:bb:bb:2f:5c:8f:c2:d0:0b:a3:
                    d3:74:8a:f3:be:df:72:31:ce:bb:97:48:e0:60:cf:
                    36:67:9f:e2:0e:80:0e:0f:6c:d8:f9:e0:a1:25:d0:
                    3d:e5:9f:9d:07:49:6a:db:35:bf:a8:a8:84:05:c1:
                    ed:f2:7b:26:04:f7:23:11:d5:45:0c:3b:d8:6b:56:
                    55:ef:65:ae:e8:b3:e1:09:ed:00:e4:ce:d5:37:a7:
                    aa:7e:ed:7f:10:a1:c7:a6:31:84:53:75:25:b4:2e:
                    18:c7:57:88:6c:c5:5e:69:89:8d:dc:d0:4a:da:26:
                    d4:d2:9b:68:46:19:c1:2d:e1:a5:32:db:0b:3b:26:
                    4e:07:45:c1:08:c4:aa:51:69:63:ff:ff:31:d2:68:
                    1e:42:c7:78:d0:e3:42:30:16:74:28:12:18:83:24:
                    45:42:1a:b6:ab:7c:2a:8c:f5:b8:d6:fa:49:4a:3f:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E9:56:41:51:DF:B3:8D:9B:0B:FD:DE:68:C9:3B:24:B7:D6:04:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl

            X509v3 Authority Key Identifier:
                keyid:4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c4:d7:ff:d5:e6:41:87:de:da:64:0e:16:c1:5a:0d:ae:7f:
         fe:8e:f5:74:e8:57:12:5f:0f:54:4e:7f:47:ed:f9:88:65:5a:
         8e:62:57:06:f2:53:dc:77:67:2c:b8:36:1a:75:64:8e:d9:c5:
         ae:b2:49:87:46:97:31:6f:a1:10:69:00:c7:84:5f:b0:fa:36:
         1b:3a:7a:7c:18:8d:88:cb:2d:a8:ad:e4:36:84:62:f3:79:f2:
         4e:97:e4:e8:1b:fd:a0:49:18:3a:9f:35:b2:a8:aa:9e:a5:21:
         b3:e5:98:7b:53:b8:91:c1:e7:d3:c9:57:d2:76:a9:0d:f3:e8:
         52:52:35:f2:d0:56:9b:f8:ca:dd:98:27:c4:3b:0a:42:58:54:
         d3:56:64:4b:72:5f:d4:ee:57:52:37:40:09:26:03:a0:9a:9f:
         13:5e:00:bc:42:7e:aa:6f:72:68:af:aa:54:bf:c6:f6:8b:a2:
         f9:e6:5e:68:bf:9f:b3:2d:44:8a:14:17:58:c1:3c:b9:1f:be:
         2a:1a:fe:40:c2:d9:a4:e3:a8:07:e5:6a:a9:3b:c7:45:29:b1:
         91:cd:31:e2:c1:f4:46:39:c4:c5:11:ec:a8:02:11:ba:a9:53:
         2e:a7:c6:54:3e:92:65:cf:fe:a5:bb:47:c9:24:79:5a:50:c3:
         f4:8a:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:53 2026 by rpki-client