Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa
File:                     f0970a1e-18d9-3ab2-9803-e503b2782f21.roa (raw, json)
Hash identifier:          kPiCEj479fXBtzVfqGVEdquoJLcjbkzsq9e308O11nw=
Subject key identifier:   1C:D6:77:0B:24:50:90:87:1A:50:E4:7F:47:4E:23:37:BA:84:DA:AC
Certificate issuer:       /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
Certificate serial:       010D0C9F4328584E885A4528A0C932F1E8E76520
Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396893
IP address blocks:        23.132.232.0/24 maxlen: 24
                          2620:8d:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:45:28:a0:c9:32:f1:e8:e7:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=099d1bc7-c23e-41b7-8764-f877171347bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:de:29:02:f4:67:2f:61:fa:6b:95:90:42:
                    67:14:a9:a9:e3:ef:89:c8:cc:2d:3d:55:a9:fa:e7:
                    11:84:4e:07:2b:58:86:a4:a7:8f:f5:c4:ad:ae:47:
                    50:b2:2f:e9:c6:99:9c:02:53:8d:08:92:34:8e:5f:
                    33:78:92:1f:54:62:cb:64:01:2c:a2:56:f4:a9:06:
                    bf:a4:e8:6d:9e:7e:ba:3f:44:95:63:d3:27:63:b2:
                    b0:63:6b:09:2d:2f:61:64:2c:e1:f1:78:95:95:2f:
                    48:34:11:de:30:47:bc:7f:4e:66:a8:89:4e:06:6e:
                    ff:1d:c0:c7:be:f8:c2:d1:0a:e4:2a:1b:7e:02:8c:
                    5b:47:96:0d:b2:6a:4c:82:ef:5d:d4:80:d6:ef:c1:
                    13:e6:b6:fc:0b:93:fe:a2:ea:1f:e4:bc:a8:e1:5f:
                    6b:2b:d1:47:be:d5:c6:5e:ed:bd:90:aa:16:c1:2a:
                    4c:61:49:79:4e:aa:8f:93:93:92:69:76:4a:6e:d3:
                    eb:cf:78:bc:10:38:f7:38:c8:c0:86:46:c5:c0:03:
                    22:48:40:2f:62:e7:71:fe:25:9f:45:db:b2:2b:12:
                    c2:1b:fb:26:46:f6:6d:3c:03:6d:91:8f:ae:fe:57:
                    a6:47:2b:46:42:04:8b:0a:e6:25:ad:e1:4f:79:7e:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:77:0B:24:50:90:87:1A:50:E4:7F:47:4E:23:37:BA:84:DA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl

            X509v3 Authority Key Identifier:
                keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.232.0/24
                IPv6:
                  2620:8d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:a0:90:99:28:60:38:5c:4c:32:ea:ea:ff:e8:a3:69:c8:
         fd:29:08:57:d6:05:c3:18:ce:1e:16:a2:7b:14:0b:bf:ea:85:
         96:2a:2f:e8:aa:bc:23:79:43:c0:6f:42:33:db:77:ce:ec:d4:
         76:8d:d1:33:34:2a:05:81:14:dd:15:8a:7b:4e:f0:07:b7:6a:
         c4:5e:d7:15:8d:e1:28:5b:08:89:35:46:37:1e:90:b4:36:6e:
         9e:5f:20:78:ae:2a:c5:21:07:fb:52:96:29:00:39:d7:20:39:
         38:95:ba:fa:30:9e:37:0f:89:da:40:d0:0c:d5:24:91:f5:0c:
         ed:22:14:ae:e0:a8:82:cd:87:05:37:d0:d8:14:38:c8:d2:a3:
         d7:ba:29:5a:9d:e6:ba:b7:9f:73:36:99:e4:4b:2e:97:a0:41:
         86:f4:9c:50:d7:77:0b:c6:6c:8e:6c:51:e5:ed:58:3d:3f:ea:
         5c:26:bd:ab:45:b2:1e:3b:1e:bd:5a:43:cb:86:e5:7b:3a:73:
         76:cb:02:1c:20:57:72:53:cf:ff:5c:5d:cf:e9:c0:63:0e:d3:
         1f:bb:3d:63:59:b7:3e:8b:5c:98:8e:e0:fd:6b:10:f2:a3:7e:
         59:f5:ba:29:b0:b3:14:2c:70:6a:25:a2:34:e0:5b:e5:8f:1e:
         79:7c:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:47 2026 by rpki-client