Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/55e5afc3-fb9f-3e8c-ba77-d71dbe12ab7b.roa
File:                     55e5afc3-fb9f-3e8c-ba77-d71dbe12ab7b.roa (raw, json)
Hash identifier:          bQciPW4Ux0EYqBhtC5lMoYpEF8zEyI0BRPZ5ByjuwN4=
Subject key identifier:   82:5E:4A:28:2A:D0:DB:6B:B2:2D:8A:12:63:B8:CA:3E:75:FB:02:36
Certificate issuer:       /CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
Certificate serial:       010D0C9F4328584E90BA54571F56A45982C9E000
Authority key identifier: AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/55e5afc3-fb9f-3e8c-ba77-d71dbe12ab7b.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     34927
IP address blocks:        23.150.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:54:57:1f:56:a4:59:82:c9:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=f6bfb70e-20ea-4925-bcba-9501823c2c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:a9:69:c6:d9:d7:62:2a:95:7e:78:fa:92:
                    6f:06:96:bf:02:4c:f0:9d:57:ba:17:a8:71:51:bc:
                    20:b6:cc:9e:cd:3b:6b:2c:26:45:76:43:b7:6c:f8:
                    6f:4a:68:13:bd:e5:80:3b:16:dd:c6:0d:9b:c7:9a:
                    7c:3f:2f:6f:54:8f:c5:bc:8e:ee:c8:9b:ba:61:59:
                    2b:c1:5b:03:59:14:dc:8d:9c:c8:87:92:e1:a0:c8:
                    e2:0d:00:89:c0:73:ca:38:fe:97:a2:76:3d:43:66:
                    99:02:5d:0a:31:3e:a8:db:69:31:f8:e1:82:64:da:
                    0f:ab:27:1f:a5:1f:48:e0:85:1d:19:7a:0e:f0:79:
                    b5:b5:67:c3:b9:7b:ec:29:77:24:4a:82:0b:d7:21:
                    66:9b:72:19:a3:52:e6:4a:55:85:65:08:ab:88:a4:
                    d7:5f:2c:5c:7b:f4:0f:c5:10:ef:d1:cb:68:c9:74:
                    c4:a4:38:e2:d5:bf:3f:18:9c:fb:00:aa:06:4a:ff:
                    6e:55:77:1c:f4:4d:c1:df:40:da:de:36:6c:e1:a7:
                    62:76:7e:3d:a7:66:a2:71:60:10:66:69:06:c0:98:
                    77:0d:b7:1e:47:d6:0e:8d:71:25:0b:9b:06:b4:a2:
                    ee:81:a8:eb:89:97:5e:9a:93:a1:a3:d4:80:79:66:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5E:4A:28:2A:D0:DB:6B:B2:2D:8A:12:63:B8:CA:3E:75:FB:02:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/55e5afc3-fb9f-3e8c-ba77-d71dbe12ab7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:67:9c:df:3e:18:43:70:aa:d8:77:25:a3:3f:f6:92:3e:c1:
         7a:1d:c9:48:94:82:5b:66:df:45:69:81:c3:e6:3d:f6:8b:f0:
         39:9a:a1:60:d2:eb:0e:e9:c9:63:96:43:ae:82:0f:5d:ca:3a:
         d5:de:4e:68:7c:49:e2:0d:6c:0c:d0:f1:78:ef:de:f6:31:87:
         a1:9d:f3:04:c8:1f:46:4b:2d:d8:c9:8e:55:f9:9e:76:16:e8:
         80:2f:08:bb:14:9e:31:bd:6e:21:66:4c:45:9b:84:3c:82:a9:
         c9:0e:0b:33:1f:5a:c3:6f:cc:ff:d6:8d:47:9f:f8:5f:1e:81:
         e6:ac:af:1b:85:05:17:2a:b4:7b:2e:70:2d:d5:9f:67:da:e4:
         ee:26:49:0b:0a:39:c8:7b:58:dc:e7:fc:2f:dd:a7:62:ff:0f:
         a1:48:69:ca:52:ac:d6:a2:dd:4d:59:70:88:18:f5:cd:2f:71:
         b1:92:2c:01:cb:51:12:4d:94:01:64:e7:08:7b:be:c3:05:a4:
         67:76:b7:6e:6a:bd:d6:14:3f:3c:44:c7:d9:7f:6c:01:cf:97:
         be:57:90:aa:fb:63:58:dc:2e:23:e1:df:41:7a:0d:a1:8f:8b:
         5a:30:c8:09:32:20:a5:75:ce:25:98:21:4d:a4:53:32:3b:26:
         61:dc:b9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:02 2026 by rpki-client