Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa
File:                     c5f99082-735a-3bc4-848d-adbcd08fa635.roa (raw, json)
Hash identifier:          xTliUq0Qw4gOgZrw0102cJdPJHz7OSykBhgVj0F2ITo=
Subject key identifier:   DE:D8:94:4A:DC:A2:F9:8E:15:CA:CF:89:F2:57:5E:69:24:50:2E:CB
Certificate issuer:       /CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8
Certificate serial:       010D0C9F4328584E7BCA2738BF3CC7FEAAB01F00
Authority key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     21859
IP address blocks:        23.139.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:27:38:bf:3c:c7:fe:aa:b0:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=0780d7b9-f561-48b5-96ad-72e1a6c79943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:4d:6d:95:9f:10:af:23:81:5d:87:db:2e:
                    72:c3:58:2d:30:d7:6b:c8:bd:00:eb:63:38:e1:e7:
                    79:21:5f:2a:a8:b5:f2:fa:6e:3d:da:b2:26:a0:79:
                    59:94:99:b2:79:c1:df:3b:fd:8c:1b:cc:a7:4f:bb:
                    e1:a9:8e:c3:99:77:ed:48:dc:17:b0:79:56:e1:29:
                    42:d9:19:25:73:15:3d:0b:53:11:59:bf:0f:86:44:
                    c9:9c:02:38:28:06:8f:53:91:f4:a9:f5:97:0e:ea:
                    1c:d6:88:a3:97:c3:df:d7:7f:66:4d:02:3e:52:b2:
                    30:c7:2f:ff:59:2f:f4:d2:50:c4:79:8c:13:e8:47:
                    45:ba:50:63:70:bd:e7:df:4b:8d:7c:3b:5c:35:bf:
                    83:9c:c8:bd:a9:4a:1e:41:21:c4:48:08:41:db:80:
                    6a:25:dc:ba:85:87:1d:6d:9c:d2:8a:1c:2d:c5:14:
                    3d:25:96:87:c4:e9:a9:1f:69:35:ce:20:d9:8c:cf:
                    88:f7:ad:ec:1a:51:4a:65:1b:43:62:54:76:d9:db:
                    4d:11:8c:9d:1d:1d:fc:31:2b:c5:10:6c:51:7b:93:
                    f4:c2:31:4d:c7:9d:52:a9:fd:52:63:9b:2f:87:43:
                    a9:a0:ff:18:65:77:e0:11:29:8f:c7:0e:7c:c2:aa:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D8:94:4A:DC:A2:F9:8E:15:CA:CF:89:F2:57:5E:69:24:50:2E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7b:48:99:f0:3e:65:fd:b0:5b:c9:fb:d6:e4:08:cf:27:a6:
         0e:c0:11:53:98:01:e7:5e:63:c3:47:26:a0:4c:a3:c2:ff:dc:
         c7:d3:00:bf:bc:90:a9:02:26:b8:22:c4:59:db:bb:1b:92:7e:
         40:d8:1c:60:49:67:8d:e3:5c:70:47:c6:90:cc:11:41:b6:f9:
         f3:7b:8b:36:e9:5d:3e:98:78:8a:53:d2:1d:ca:9c:a4:fc:50:
         a3:93:7a:d3:ad:9e:fe:f0:35:d4:6c:a6:6c:be:89:ad:1b:f2:
         45:1d:b4:ce:c4:e1:83:e2:98:d6:22:c4:00:fc:cf:36:cc:00:
         c2:bd:3a:3d:e9:27:1f:a6:18:dc:95:36:df:12:4d:13:58:63:
         62:27:de:4b:df:f7:17:60:58:eb:08:6d:23:96:f0:4e:47:03:
         4f:32:5f:77:3e:74:2c:d7:2f:c2:5c:b9:22:41:98:f4:e8:bd:
         03:c1:9d:da:0b:b7:96:bd:96:d2:e7:9a:bc:29:c6:13:e6:be:
         cf:65:31:59:97:6f:85:a4:62:26:a7:eb:57:a6:c6:97:29:fe:
         10:92:47:d6:0f:5e:f3:b9:23:3a:11:7c:ab:ce:b4:88:de:81:
         6f:80:59:27:6f:b2:0b:e7:1b:09:c6:5d:f2:2f:da:ab:f1:3d:
         fd:49:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:41 2026 by rpki-client