Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa
File:                     c2790227-b2a7-3771-9257-78748f60cd1e.roa (raw, json)
Hash identifier:          S1wsBYF36VjQqlsjWfT1hUZj+URMNb0FtbxzqT1tul4=
Subject key identifier:   3A:6D:69:FD:44:0D:87:5B:50:6D:F8:7F:26:D3:8B:43:8B:DD:D9:03
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584E7204D78FB687925FB0C68080
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     25855
IP address blocks:        23.147.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d7:8f:b6:87:92:5f:b0:c6:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=72fce95d-6f85-4c6e-94bf-638c3bae113f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:ff:71:79:57:5a:d5:3d:d0:ff:1f:7b:7b:
                    d3:2c:0c:01:c1:20:d5:14:fb:3e:bf:bc:4a:8d:00:
                    11:93:86:ae:19:0c:c5:9e:ba:8d:78:d2:50:77:c8:
                    97:7f:40:d1:69:f8:a0:00:eb:bf:72:25:78:f5:ed:
                    15:c5:c1:da:37:62:ad:ab:aa:65:5e:b1:a1:26:96:
                    5e:e3:dd:15:d1:f8:a2:0a:87:22:19:a3:a5:82:ae:
                    b4:a2:29:f7:ac:45:09:8a:a8:94:c9:39:2c:5b:96:
                    44:8c:e3:17:1d:11:ac:9f:c9:c0:99:e5:48:0d:4d:
                    b3:a6:72:c3:31:48:c5:57:b7:be:25:96:d7:1e:23:
                    61:4e:4e:db:5d:43:1d:c7:31:09:6f:a0:9b:2b:44:
                    ec:9a:e1:34:94:01:64:cf:22:3f:bb:e9:ea:ab:1c:
                    49:f1:64:e7:7c:4a:4e:04:d8:e4:e5:0f:6e:cd:78:
                    ac:02:57:67:7a:98:fd:4b:c9:7b:a5:e0:c3:07:99:
                    9c:09:d9:8d:64:44:c1:55:3a:ca:f2:50:43:a0:ae:
                    fe:d8:51:02:79:0b:50:37:11:9d:2f:d9:85:af:57:
                    62:7c:af:7c:4e:e5:e0:36:48:30:18:8f:2f:10:4d:
                    db:f4:87:d9:34:f8:b5:b8:bd:c0:a3:f6:0e:72:94:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6D:69:FD:44:0D:87:5B:50:6D:F8:7F:26:D3:8B:43:8B:DD:D9:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c6:e0:35:31:ff:f5:ed:cd:0b:fe:0a:36:40:b5:b7:d1:16:
         24:8c:05:ce:7c:4a:94:cd:93:ce:e8:1f:c9:71:d6:81:98:1e:
         27:cc:04:e7:f9:89:5c:8a:49:40:6f:e0:ad:02:11:01:c7:9b:
         1d:53:91:74:b9:01:ec:d3:97:ce:d6:f5:a2:3d:18:14:20:25:
         d9:6a:f6:b3:45:2e:31:7d:9e:16:b0:0e:b6:d9:31:bd:1f:a5:
         56:22:80:7e:a2:3f:f6:6b:fc:33:82:57:ab:91:4c:09:50:4f:
         1a:de:5b:6f:41:7d:04:53:59:d7:f2:e5:fa:d0:ad:55:1b:26:
         57:c3:12:29:97:e0:0d:ba:40:e9:85:2c:bf:a7:64:07:4b:ea:
         23:38:cf:d9:1f:6a:ea:b7:c2:29:c7:c3:9d:37:44:39:6f:74:
         cb:4f:a0:c1:6d:06:8f:37:46:b0:99:0b:e5:4d:00:43:1a:b3:
         bb:af:fc:41:73:6b:7a:83:a2:0f:e3:e6:0f:3a:26:0f:c1:d9:
         c0:02:c4:c6:9b:aa:f5:bb:de:cc:5f:e2:65:b2:80:de:8b:ff:
         dc:5b:8b:a8:f3:01:cd:a2:c8:9b:71:4b:d0:ad:e7:0f:6c:8c:
         1c:5d:70:25:54:25:5f:a4:2f:3b:22:e6:c9:45:ae:0b:a3:00:
         38:2a:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:41 2026 by rpki-client