Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
File:                     288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa (raw, json)
Hash identifier:          B4ap+FSqQ7rtmvI81JQFIR8I4HPNYSRc0IZ6ugBKXVI=
Subject key identifier:   82:95:AC:68:1D:E7:18:C3:5B:8D:A3:D3:F3:82:39:CD:44:B7:C8:99
Certificate issuer:       /CN=194b4d95-965d-467f-835c-6cdeececce61
Certificate serial:       010D0C9F4328584E8DEFA690EFC29B2BFCF49D20
Authority key identifier: 2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     1062
IP address blocks:        23.166.216.0/24 maxlen: 24
                          104.166.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a6:90:ef:c2:9b:2b:fc:f4:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194b4d95-965d-467f-835c-6cdeececce61
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=b3206a3a-928c-4f74-a3f5-795062dcd797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:28:61:48:da:5d:dc:19:7a:81:4d:7b:78:
                    6e:69:9d:ef:9c:12:f1:68:7a:1f:4c:be:a2:7c:66:
                    93:e8:0a:dd:f9:91:18:94:bc:34:25:f8:b5:26:77:
                    72:40:2f:62:90:5f:12:c5:03:fe:5c:08:f9:a0:21:
                    bc:83:61:0e:7b:a4:fb:51:61:2c:35:d8:73:5e:d1:
                    7c:e3:0c:42:c1:9f:1a:bd:5e:d2:65:79:f9:7e:88:
                    de:ca:c1:f5:36:35:4f:43:34:87:d1:c0:d6:df:4f:
                    f0:39:4a:f3:2c:a4:ba:4d:22:05:47:18:e6:13:4c:
                    22:ae:f9:da:5a:c3:f7:ed:88:5e:6a:d3:27:c8:71:
                    28:a2:73:c7:3d:7a:78:4c:4a:e8:f7:95:97:71:27:
                    a4:1c:3d:84:35:64:fb:a0:a9:ba:cf:a6:7a:ac:cb:
                    7f:fa:96:f9:a0:be:46:7f:fd:4d:87:5d:80:2b:1f:
                    33:b9:8e:30:b7:31:b5:33:a8:3e:15:c1:57:82:19:
                    dc:32:20:1f:89:de:c4:20:e1:14:42:80:95:10:d0:
                    9d:56:d5:d1:2e:5b:c3:f4:78:ea:52:49:32:9c:78:
                    0d:04:2c:c6:f8:66:f5:00:00:2a:22:fc:b4:4c:80:
                    a7:8b:0c:95:af:47:6a:92:d1:22:48:63:13:f0:f4:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:95:AC:68:1D:E7:18:C3:5B:8D:A3:D3:F3:82:39:CD:44:B7:C8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.216.0/24
                  104.166.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:a2:6d:c0:39:58:fc:f6:69:b4:eb:e0:ce:2e:98:1e:01:
         c7:78:fb:17:22:b3:88:02:18:f6:c2:a3:fd:34:14:70:df:a9:
         5d:58:19:34:1b:1c:28:5d:89:00:eb:f3:ca:09:1f:f2:18:5a:
         6a:0f:3e:29:e4:38:69:89:92:18:57:06:78:6c:4d:e5:f7:16:
         64:5c:03:e4:b8:ee:ea:c5:78:a8:4e:58:be:6b:25:3b:78:dd:
         d9:c6:a3:2d:f5:46:95:8a:44:6f:ef:3c:21:89:08:b4:78:19:
         7f:b9:5c:cd:da:5a:c5:a6:34:8f:cd:86:aa:14:50:0f:15:c0:
         05:21:b1:bb:f2:86:d9:24:5e:e2:6b:6d:c2:f0:3c:fd:63:fd:
         7a:2c:47:2c:6c:50:fa:4f:5f:01:93:7b:9d:1c:2d:af:bd:bb:
         e8:d4:30:4e:76:50:0b:bd:c7:16:5a:0a:c5:3c:a0:34:c4:b0:
         50:ee:17:76:3e:ff:46:f4:7c:45:94:cf:4f:6d:63:6a:11:c1:
         d6:23:2a:94:92:e8:2d:9b:8f:89:cc:15:ef:32:e0:3c:23:df:
         0c:b3:e7:65:32:af:9e:a0:f5:db:f9:f4:65:6d:72:0e:ef:29:
         6b:e5:e3:2e:80:93:80:00:d1:93:8d:4e:ee:16:29:eb:a8:a2:
         03:92:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:52:13 2026 by rpki-client