Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa
File:                     973479d0-5172-3d77-b14f-43290390a046.roa (raw, json)
Hash identifier:          Nyi0kDa/LbQOFuCY+BcoHPZdySgAtuXoRSTZLdRt+Xg=
Subject key identifier:   34:25:26:5E:88:64:9C:86:B9:39:64:44:8A:D3:BD:D9:FA:C7:84:52
Certificate issuer:       /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial:       010D0C9F4328584E6B0A0BF458B979AAEBCB4080
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     396502
IP address blocks:        23.172.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:0b:f4:58:b9:79:aa:eb:cb:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=2de17b9c-dd3d-4242-b8e8-1ad3f93546f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:e1:3f:5b:07:c9:71:18:ee:77:7b:15:d3:
                    29:f1:04:21:27:37:98:a5:11:b6:32:4e:94:4a:42:
                    21:3f:dd:3b:df:bf:4f:d7:19:6c:76:c9:1d:33:62:
                    83:b9:2d:4e:44:8c:47:60:a4:ed:4f:a6:10:c6:e8:
                    b3:a9:16:06:16:b4:0c:24:bd:05:24:d2:10:af:87:
                    7b:80:56:a7:0a:fe:0e:ee:8c:51:9b:ec:7e:76:53:
                    01:11:5f:67:fa:c4:4e:bc:1c:a1:e8:fb:e7:32:c6:
                    d9:91:60:cb:5c:12:ee:bb:10:f6:fc:18:5b:72:a0:
                    cd:ce:47:b8:a2:30:7e:e7:0c:7f:38:24:6a:ae:e4:
                    ce:84:d2:15:f2:88:83:ce:b0:80:17:9c:a4:69:ee:
                    b9:04:71:87:eb:44:df:e5:83:03:df:ae:21:55:e9:
                    77:88:75:75:3d:1e:27:7e:c7:df:da:28:33:61:d6:
                    6c:ac:25:8e:a0:06:b8:dc:83:ec:4f:f1:44:93:95:
                    1c:49:f8:89:e4:61:4b:79:8e:7e:e3:7a:1a:28:c1:
                    f6:1b:4d:20:3a:08:10:60:dd:f4:a4:2b:db:45:ab:
                    eb:45:e5:91:30:72:9d:d4:64:6c:24:b4:94:0a:9a:
                    15:c8:11:c3:41:f8:8b:c3:83:af:b8:5d:e5:85:8b:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:26:5E:88:64:9C:86:B9:39:64:44:8A:D3:BD:D9:FA:C7:84:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl

            X509v3 Authority Key Identifier:
                keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3e:51:53:40:a6:1d:6d:91:e7:9a:e6:f2:ce:29:c9:c7:45:
         e6:33:12:03:75:84:5b:94:2e:62:af:db:48:70:94:e1:b7:73:
         f7:a5:fd:61:53:e1:2d:f5:8c:ff:98:5a:fb:81:19:0a:9b:a9:
         0a:9e:1d:a2:e9:a9:9b:92:ec:c1:54:a3:4e:0f:65:8e:4f:95:
         54:0c:f6:cc:32:fb:59:91:b4:78:ad:9c:b4:ae:69:30:3a:3c:
         03:84:82:34:17:79:b1:10:b5:fc:2d:3d:33:5b:06:25:31:83:
         d7:0c:c3:0d:55:a5:7d:d4:b7:5b:f3:7a:db:b4:cd:ff:37:2b:
         39:2d:73:0f:05:29:ca:42:27:e5:ec:8d:4d:09:dd:6c:37:fe:
         88:4d:8d:9e:0b:af:18:50:f5:37:8a:fd:63:9e:67:4f:66:98:
         24:d2:5b:37:36:e4:8b:7e:7f:e7:1b:d6:34:a2:6d:69:1c:d8:
         ba:88:9c:0b:f0:9c:d6:da:5a:9e:d8:86:8d:95:a0:cd:8c:6b:
         eb:fc:21:ee:4a:ef:9d:08:4f:33:c3:4f:71:f6:31:cb:21:ec:
         9a:1b:f2:8a:42:d5:fb:63:a9:25:67:ca:39:16:0c:61:dd:a0:
         21:8b:f3:14:17:9d:69:21:df:60:50:2f:6c:65:3a:89:29:69:
         ee:cd:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:35 2026 by rpki-client