Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da/eff69b10-9a06-3dab-9811-665d7a9cb4a5.roa
File:                     eff69b10-9a06-3dab-9811-665d7a9cb4a5.roa (raw, json)
Hash identifier:          BAMAB3KD3C0ZDygXTU9O3SAz6kTnWG6fmpkw8onZ3tI=
Subject key identifier:   E3:33:75:42:1B:03:FD:F8:C9:FE:AF:E5:70:B1:A1:5A:EF:09:6B:40
Certificate issuer:       /CN=ba8c6306-cf3a-4d4b-83b4-beb776c3b2da
Certificate serial:       010D0C9F4328584E8DEFB3FB2D0BAF74BE305380
Authority key identifier: E9:25:00:74:49:E2:75:9A:8B:66:2B:22:DF:F3:DA:0A:2F:01:DC:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da/eff69b10-9a06-3dab-9811-665d7a9cb4a5.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     152179
IP address blocks:        23.151.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:b3:fb:2d:0b:af:74:be:30:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8c6306-cf3a-4d4b-83b4-beb776c3b2da
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=f959aa86-0c86-4a03-8710-627e456f376a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:f7:e0:85:f6:69:31:9d:d2:f6:6c:2f:fd:
                    26:d9:d7:6f:60:c1:f0:5b:25:b1:a2:01:fc:43:61:
                    ab:b5:54:71:94:6f:bb:5d:f1:2c:36:d7:8e:eb:32:
                    ff:31:fa:aa:9c:64:1b:44:66:95:8e:04:70:b2:29:
                    a8:2c:75:d9:98:00:77:53:70:d7:ba:76:dd:d0:27:
                    75:83:9d:bd:6c:66:11:97:93:b2:41:65:33:9b:a3:
                    51:0e:cc:73:1b:30:dd:d9:dd:c5:92:7c:72:27:f3:
                    bf:e1:c8:31:cc:33:11:5d:e9:2e:59:08:77:04:27:
                    c5:18:e3:4c:f3:0b:3a:69:79:6b:ac:51:93:a0:b0:
                    7d:da:82:c3:0c:b1:9f:55:e6:e6:82:aa:f7:c1:47:
                    60:13:51:d4:76:08:b5:30:cc:a6:76:cf:41:01:96:
                    e4:93:5b:4f:35:2a:ac:b3:bc:48:b8:23:f8:6a:80:
                    58:a5:e9:3e:b4:94:cc:8d:f3:1d:78:99:9d:a0:a9:
                    f2:31:87:b8:73:72:47:cb:fa:dc:aa:27:c2:39:7f:
                    c1:77:0c:1c:f5:7b:92:eb:59:94:f9:15:19:ad:88:
                    6b:49:5a:ba:65:90:b2:56:9e:8d:34:5f:52:70:fe:
                    17:88:e5:62:62:f4:fd:f1:c4:c9:cc:ee:10:e1:c7:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:33:75:42:1B:03:FD:F8:C9:FE:AF:E5:70:B1:A1:5A:EF:09:6B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da/eff69b10-9a06-3dab-9811-665d7a9cb4a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da.crl

            X509v3 Authority Key Identifier:
                keyid:E9:25:00:74:49:E2:75:9A:8B:66:2B:22:DF:F3:DA:0A:2F:01:DC:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba8c6306-cf3a-4d4b-83b4-beb776c3b2da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:77:02:3c:c2:d1:0c:fe:71:d4:5d:e5:6f:40:f8:68:8e:2e:
         5c:64:92:16:39:57:94:39:a4:48:74:14:6d:df:c0:21:7c:c2:
         ec:f6:ca:ef:b2:dc:48:f7:98:d5:cc:84:54:72:e9:5e:d4:8f:
         c5:b1:8a:92:ac:29:dc:26:1d:22:49:75:b5:6a:20:56:31:26:
         b2:5c:38:68:57:ea:40:79:1e:d9:26:b1:1c:c5:0e:16:94:83:
         8e:d1:bc:8c:8c:41:9a:42:db:f1:f7:55:cd:9c:11:a3:a0:6a:
         fb:d6:81:86:bf:20:a0:99:02:fc:c4:b8:cb:df:ba:53:08:23:
         aa:08:c7:1f:a1:ec:75:1d:00:32:e1:46:0e:76:9f:ca:a1:d7:
         8e:cc:05:32:6c:9a:32:53:6c:10:cd:91:0c:38:28:2f:e4:ac:
         3c:72:a0:30:91:90:60:29:e1:b9:93:83:ce:dc:ff:a1:1e:d1:
         f3:50:9a:46:a6:1f:f7:66:a6:c3:0e:54:8f:68:31:73:51:f6:
         85:f4:f4:3e:47:8b:85:d7:4a:56:f4:f4:54:63:4a:68:2b:d5:
         87:46:cd:3a:85:0e:71:81:62:a7:78:2c:37:df:57:c3:c4:a5:
         22:53:60:94:0f:d2:bc:93:e2:62:c1:0a:ee:c0:28:7b:43:70:
         cd:b1:1a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:57:05 2026 by rpki-client