Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa
File:                     08130dbb-3252-364b-9a63-584664ae679d.roa (raw, json)
Hash identifier:          GDU9HOT7oY6IXML1GRipBt4g5LWULHwblkB+mbMSFkM=
Subject key identifier:   55:86:28:5E:4E:75:6A:5E:FD:AB:8E:0F:A1:FC:4E:D2:88:E4:6D:43
Certificate issuer:       /CN=b730cada-c66c-43b6-bb7f-5b962c5b9c5c
Certificate serial:       010D0C9F4328584E97B50E528C150DCDFB0C6B20
Authority key identifier: B7:C7:3D:36:99:75:E3:5B:A1:DD:44:33:B3:84:B3:93:2F:69:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     27535
IP address blocks:        23.156.56.0/24 maxlen: 24
                          2602:2ec::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0e:52:8c:15:0d:cd:fb:0c:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b730cada-c66c-43b6-bb7f-5b962c5b9c5c
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=01b59b40-9397-4fe1-bb53-308e9a3f3f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:73:d3:d3:30:db:ee:f6:2a:e2:68:a1:9a:
                    24:92:8c:57:2c:da:5b:02:66:9c:32:8c:3e:9c:3d:
                    2b:72:4b:94:8a:5a:97:f5:94:80:27:59:94:f4:03:
                    c9:b1:66:7b:ce:5d:e5:a1:4f:de:37:3a:97:7f:51:
                    1e:ae:22:40:71:d9:0c:43:2a:b7:04:79:8b:ed:c1:
                    73:8d:a5:04:b4:97:53:04:1c:0f:29:e7:c9:7d:57:
                    ea:85:b6:41:d7:1d:53:2a:0d:29:c9:15:6f:e8:e9:
                    11:d4:0c:13:ab:ee:b3:dd:21:60:0a:ce:db:44:ab:
                    d7:f0:88:48:2f:ba:e1:a6:b7:5c:24:66:b9:e3:ec:
                    42:0c:55:95:49:d1:fb:6f:ce:37:b9:3e:be:42:43:
                    9f:a7:ee:3a:47:ed:80:74:08:18:43:a8:fb:38:ec:
                    26:08:df:7b:c2:46:7d:92:ad:b0:aa:62:2e:50:ae:
                    ee:fc:47:6f:ec:55:93:e2:18:27:0b:b5:9a:ba:ef:
                    99:bb:f8:7e:8f:6a:f1:55:7a:50:97:6a:ee:ce:98:
                    d3:c4:f6:ef:9b:b8:b7:11:78:e2:dc:78:6b:37:a9:
                    83:45:c1:65:58:e0:dd:2a:95:30:1d:e2:c1:9c:c9:
                    c9:24:4b:3b:1e:0d:4f:e0:d7:09:3b:58:9e:94:1d:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:28:5E:4E:75:6A:5E:FD:AB:8E:0F:A1:FC:4E:D2:88:E4:6D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/08130dbb-3252-364b-9a63-584664ae679d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:C7:3D:36:99:75:E3:5B:A1:DD:44:33:B3:84:B3:93:2F:69:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b730cada-c66c-43b6-bb7f-5b962c5b9c5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.56.0/24
                IPv6:
                  2602:2ec::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:32:05:e4:8e:57:ea:e1:74:51:55:2f:02:80:7f:af:91:11:
         e6:95:45:86:74:45:19:35:e2:54:9b:f8:3c:62:6f:b7:2e:4d:
         1b:78:19:ed:f8:b7:8c:ca:47:47:29:39:2e:13:2d:71:f3:af:
         85:88:a4:89:11:5f:d9:56:10:c6:a8:b7:86:8d:ab:51:f1:41:
         ea:8c:0b:94:d5:2b:2b:dc:09:6d:e9:bb:30:6f:db:2d:9e:e4:
         76:1b:1d:ec:62:d0:3f:79:d0:5d:30:38:77:84:7f:93:8b:11:
         27:dd:e0:cf:ca:60:76:b7:de:da:bc:98:80:44:6d:20:3b:06:
         a4:c4:39:e5:6a:78:77:f2:e7:6a:91:a1:2b:e1:19:6b:b9:01:
         b0:ca:26:61:e0:02:8a:11:ad:69:3b:d5:59:37:34:ab:b9:dd:
         ca:cc:d1:79:4c:ce:2c:be:83:06:0b:63:c7:86:a7:3c:f1:e4:
         af:64:b3:7a:92:ed:5a:bf:07:16:66:25:f9:50:e5:f7:15:bb:
         70:54:2e:5b:3c:06:5d:60:aa:6e:9f:dc:7d:1f:66:83:3c:b9:
         b5:a6:e1:86:0c:0f:53:49:e7:22:30:5e:8e:9e:3f:6b:39:6e:
         aa:b1:69:bf:d3:af:53:d3:f0:f7:9b:39:1c:f7:37:1a:6e:3e:
         4d:31:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:57 2026 by rpki-client