Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ee2f1c42-dd18-3695-9f92-54978bc931df.roa
File:                     ee2f1c42-dd18-3695-9f92-54978bc931df.roa (raw, json)
Hash identifier:          AZRd5USVQvhXutWfGRtn9TNnRRPJeeIVAqupY7/jVNo=
Subject key identifier:   5F:60:9C:E7:C6:2D:53:C4:52:51:3E:36:72:25:3B:39:54:DE:46:1B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7634F4D30FBA14D845AC94C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ee2f1c42-dd18-3695-9f92-54978bc931df.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     3257
IP address blocks:        23.231.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:f4:d3:0f:ba:14:d8:45:ac:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=c7b6598f-e0a0-4895-acf1-6491ef751773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:c3:c7:fb:f3:63:45:61:65:61:d1:e0:01:
                    d7:c7:5e:c7:b7:75:6f:f8:3e:f9:02:9f:52:9b:8a:
                    88:1e:95:43:b0:da:47:7d:33:eb:be:f6:68:ae:be:
                    0a:a5:52:05:ff:16:ca:0e:36:25:ce:5f:f5:04:ea:
                    53:e0:e0:28:ae:61:32:c9:e9:3b:1d:96:12:04:82:
                    01:3a:61:2b:d5:97:be:99:5a:cf:d2:23:75:3e:77:
                    92:cb:91:ea:00:3f:3a:fd:91:12:e0:de:4a:9b:d8:
                    a3:1e:6e:52:5b:b3:b5:22:f9:04:83:b8:d9:4d:f0:
                    6f:5b:dd:4d:d4:b9:00:ef:34:de:94:f8:9e:2e:9e:
                    a1:7e:4e:03:d1:3b:23:78:7b:82:09:d7:e0:ad:e6:
                    92:e9:02:9e:4e:f8:dc:a2:a2:cc:57:f3:bb:4f:6b:
                    d4:29:54:f5:47:15:bb:06:69:1f:f7:f4:80:d6:27:
                    3c:60:41:82:1f:ed:17:65:cd:56:af:0a:a6:a7:17:
                    1c:19:ba:78:85:bb:fe:40:06:f7:f0:26:ea:5e:3a:
                    cf:23:30:e1:cf:cc:5b:87:ce:7a:fb:06:4a:7b:cf:
                    fa:d6:93:2c:25:6d:74:6c:f9:20:94:02:5e:81:72:
                    88:12:4e:9e:e8:d9:7d:fb:5e:4e:b8:62:30:43:61:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:60:9C:E7:C6:2D:53:C4:52:51:3E:36:72:25:3B:39:54:DE:46:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ee2f1c42-dd18-3695-9f92-54978bc931df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:1d:3d:7c:81:65:68:42:f2:24:af:58:f1:8a:8c:6f:24:
         f6:7c:8c:f4:6e:2a:0c:b3:c3:19:c9:0f:72:be:ba:e0:e0:a5:
         64:96:5c:2a:22:71:aa:cf:42:65:54:c8:b7:97:40:14:b0:1f:
         db:db:9b:34:21:49:93:b8:49:a9:9c:ce:32:9d:22:53:78:55:
         94:e0:40:a0:26:81:b5:e2:31:cb:93:f6:07:2d:17:f3:74:aa:
         35:2a:22:14:d6:fa:99:03:2b:ed:72:e6:8f:76:0d:06:ef:ae:
         1a:e4:87:f4:39:53:75:ae:26:ec:b8:6c:46:7c:83:5c:d8:67:
         1a:36:be:2f:ba:3f:63:46:71:4d:89:82:a4:63:e5:b0:04:93:
         54:f5:44:af:61:b4:74:47:1a:53:c1:39:15:0e:17:8d:23:3d:
         24:94:7b:0d:f9:22:ed:c2:5f:b9:ce:78:e6:9e:30:28:25:49:
         a6:f4:69:66:1f:dc:f9:e3:7d:aa:7b:ae:fe:a8:91:d5:9f:e4:
         54:d6:a8:93:1e:1a:e7:9c:7d:7c:c7:02:ea:0b:09:5d:3a:52:
         49:f5:14:23:d3:2b:57:20:3a:c5:df:2f:0a:05:e1:3b:60:fb:
         1e:16:2d:de:80:a5:c6:7c:01:fe:5e:a5:ab:d7:d2:cc:04:56:
         ec:98:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:43:09 2026 by rpki-client