Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/c26dc67f-011b-390d-ab17-de97103742e4.roa
File:                     c26dc67f-011b-390d-ab17-de97103742e4.roa (raw, json)
Hash identifier:          6oxPcCCF9+83eOjcXnsreZztBaMGH+J5T8tIYxn0Gjc=
Subject key identifier:   58:B4:A8:83:44:B7:AF:77:FC:88:74:B4:17:40:57:5E:6C:58:52:F4
Certificate issuer:       /CN=1d5fb34f-5d30-47d5-b2c3-8f829fbc3151
Certificate serial:       010D0C9F4328584E6C6F761833397F4AABF12580
Authority key identifier: A3:42:5B:BD:2E:41:08:FD:04:83:71:02:B7:1D:05:37:E2:85:3A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/c26dc67f-011b-390d-ab17-de97103742e4.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     214483
IP address blocks:        23.139.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:76:18:33:39:7f:4a:ab:f1:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5fb34f-5d30-47d5-b2c3-8f829fbc3151
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=aac82f18-130f-4008-b8de-7594949f4968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:e2:99:fc:b4:68:dd:a9:1a:3b:9c:f7:45:
                    9b:87:5e:9f:09:b5:6f:16:68:98:3b:ef:42:4e:81:
                    a4:a3:c3:b0:8f:dc:32:49:e4:37:14:4f:80:0d:82:
                    48:6f:cc:13:a4:14:3d:3b:e0:8c:85:4a:4b:5f:08:
                    40:15:3e:b4:73:f7:25:bb:32:22:d5:35:54:f7:75:
                    52:7d:3d:c2:90:de:d9:86:58:aa:c3:fd:b4:50:74:
                    56:fb:8e:a7:f8:72:50:cc:33:60:4c:6e:03:4b:74:
                    00:ab:79:e7:d6:be:d9:bd:46:98:29:76:90:bc:be:
                    df:5a:1c:dd:01:06:f8:c9:87:35:24:ed:ae:55:60:
                    8d:c0:e5:91:94:2e:06:f0:15:3d:de:d2:28:2a:9d:
                    ec:66:b3:c3:ac:bd:31:f3:ad:49:b2:da:dd:3b:b4:
                    a6:8c:0d:65:eb:84:27:ec:e5:b2:dc:b7:9a:fd:73:
                    0c:2b:e8:39:9c:97:05:97:1a:a5:5b:d9:92:4c:e4:
                    94:f0:1f:3c:ce:b1:5a:a0:86:bf:c3:fb:21:ae:22:
                    62:97:60:db:05:a7:47:ce:6f:47:4a:6e:2b:43:ba:
                    7f:4f:fb:4a:79:be:5f:f7:ce:91:09:2b:42:53:e9:
                    da:96:5f:b7:40:ae:9e:30:25:be:39:77:e7:ca:9f:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B4:A8:83:44:B7:AF:77:FC:88:74:B4:17:40:57:5E:6C:58:52:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/c26dc67f-011b-390d-ab17-de97103742e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:5B:BD:2E:41:08:FD:04:83:71:02:B7:1D:05:37:E2:85:3A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:3f:9c:e7:d7:cf:6b:87:4c:b6:59:33:69:52:1b:cb:13:
         9d:60:f1:cf:38:40:1f:dd:44:8b:72:2f:e5:5f:cf:81:c8:c0:
         ea:bf:d3:aa:ac:c7:2f:16:a3:b7:83:e2:7b:5c:0a:22:02:4d:
         ae:15:af:3d:02:1f:fd:b1:03:ac:51:5a:e7:33:15:46:4a:8d:
         d0:62:fc:3e:99:de:a4:ba:df:44:52:f7:5e:36:3c:1f:96:d3:
         b6:ac:8c:9e:12:7e:60:5d:6b:6e:be:82:53:3a:6e:4d:96:23:
         a9:88:63:15:6f:b9:d3:99:da:57:9c:0b:39:11:bf:9f:62:df:
         02:55:dc:0d:94:ec:6f:e9:57:3d:48:fb:31:6d:32:b7:ba:29:
         d2:66:7a:53:3b:10:07:48:c1:e9:d9:ff:28:7a:2e:84:a7:bb:
         b7:70:26:30:f8:e3:b6:cb:00:15:05:e9:e3:86:ce:3b:a4:84:
         17:9f:6d:41:98:79:ab:43:81:8b:43:ff:a5:af:8e:b8:1d:b8:
         68:dd:38:01:e3:6d:31:83:3c:a9:8b:d1:69:fd:0e:1c:cf:68:
         51:ac:5e:ad:62:06:bd:ba:db:c3:17:44:e8:cf:7f:19:41:5a:
         42:37:fd:a4:28:28:07:eb:f9:f5:95:77:b9:c8:4d:b7:81:14:
         ac:28:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:53:36 2026 by rpki-client