Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa
File:                     8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa (raw, json)
Hash identifier:          aFBPopgnisabxGxR+Ci5sekRdg2HtWY96M5WiISObks=
Subject key identifier:   0D:5C:00:F2:BF:D8:C8:03:39:24:81:AD:21:9C:30:9A:40:98:DA:B6
Certificate issuer:       /CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
Certificate serial:       010D0C9F4328584E5084B4587B21AA7645346DE8
Authority key identifier: 05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     26337
IP address blocks:        23.91.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b4:58:7b:21:aa:76:45:34:6d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=0c07c098-9331-42e4-80c5-cb13951b1a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:79:42:d8:29:67:5b:f6:a5:20:fe:04:36:
                    40:cb:79:36:dd:76:5e:e2:cd:c4:34:fb:bd:e7:6d:
                    61:53:85:88:d8:e3:d8:cd:8e:be:2f:6e:8c:29:49:
                    e6:0e:25:26:5b:24:5a:0c:e3:3a:62:c6:48:00:c8:
                    4f:8d:b4:b1:f2:6d:5e:7b:dd:b5:6c:68:2d:36:65:
                    b4:18:a9:b7:79:da:ec:a8:1b:ca:72:4f:ff:0e:ca:
                    b9:83:61:a6:db:5e:6e:ca:dc:a4:f6:ea:96:46:30:
                    26:46:a7:37:41:bb:23:fa:32:64:8c:7e:24:cd:27:
                    fb:c3:88:c1:9c:67:8e:07:59:21:f5:4f:31:1f:2b:
                    39:7a:58:ed:6d:e4:de:2c:f8:e9:00:54:af:e7:10:
                    e5:3c:32:04:2d:ee:a8:1c:13:b3:11:1c:2b:77:a3:
                    46:0f:0b:4f:a9:4c:ed:d0:e5:38:94:82:88:f9:56:
                    7a:a4:bf:c0:c9:a2:91:54:ae:b1:78:48:67:45:63:
                    e3:f6:a3:0e:3c:9b:bc:c3:61:1b:6d:dc:ed:27:e0:
                    9d:6e:14:c0:25:dd:d3:6c:e9:6c:5b:7c:2c:80:e8:
                    55:ec:ee:ec:17:25:60:c5:4b:7c:c5:d4:7f:cb:80:
                    47:07:f2:ee:2e:04:4a:46:73:8e:91:53:35:7f:02:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:00:F2:BF:D8:C8:03:39:24:81:AD:21:9C:30:9A:40:98:DA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl

            X509v3 Authority Key Identifier:
                keyid:05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:e0:f8:5b:a9:cc:ec:d6:1e:61:64:51:51:cd:7e:e6:9c:
         95:ca:f9:68:dc:09:28:87:37:eb:62:74:18:ae:7b:25:eb:c5:
         e8:ef:af:81:54:b3:6a:ce:86:8b:db:54:d0:da:70:bf:9b:c9:
         0d:ed:64:8b:89:d3:25:16:4e:50:e8:e5:59:7e:41:b6:2b:54:
         5a:9e:80:0c:cc:9b:2a:ad:8e:73:92:c3:74:e0:86:3b:c6:92:
         1c:ae:6e:38:20:85:b3:8a:18:c3:49:74:91:1a:30:6f:8a:5c:
         b7:74:04:2b:cc:48:60:38:a5:02:4d:15:ac:67:ef:69:e6:1c:
         24:e9:a8:97:99:47:fd:fc:44:73:7a:24:86:72:91:0f:25:7e:
         6b:79:c4:72:5d:15:d0:16:86:00:49:bd:e6:90:5d:26:df:9c:
         26:05:c8:9d:69:fd:8a:fd:69:bf:82:d0:79:15:99:d6:31:d9:
         94:ad:62:e8:f4:eb:b4:a1:65:3c:28:8f:29:21:96:a5:3c:b5:
         e8:8a:9c:46:c5:d0:37:57:3a:02:7a:9a:99:27:b3:d5:a1:c7:
         a2:ff:c7:ed:ba:60:84:48:51:d6:57:0b:96:5a:b5:9b:e8:c0:
         72:12:3d:6e:23:59:dc:fe:d7:66:6b:cb:89:12:1d:db:74:43:
         c4:ad:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:34 2026 by rpki-client