Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
File:                     7eab64af-78b7-3d87-9f08-54d27ec7277e.roa (raw, json)
Hash identifier:          oIUAKhW9ccce1NeFDo2IrBHXv77tsicsPMeV90wMdbc=
Subject key identifier:   27:D9:6D:A3:4B:AC:B8:94:F3:66:67:8E:18:D9:48:79:35:4B:C9:DB
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F4328584ED001D8FF7F0F68AEC12AB000
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     7034
IP address blocks:        23.152.160.0/24 maxlen: 24
                          2620:13b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d8:ff:7f:0f:68:ae:c1:2a:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=c00f0fa7-b150-48e5-9e44-59bc87f0f469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:8c:ad:bb:cf:eb:18:8c:60:ff:0e:d8:13:
                    b0:82:da:53:af:6b:9f:41:a5:87:8c:12:5d:66:c9:
                    59:d1:f8:13:0d:bb:14:09:4f:24:51:41:5a:c2:85:
                    16:ed:23:b0:9f:8a:6f:4a:69:8c:34:d1:a4:fd:57:
                    4c:81:f7:61:08:81:cf:f4:f0:a0:37:7d:1c:58:69:
                    fc:8d:42:f5:61:8d:ed:ee:93:2c:57:d2:47:fe:97:
                    17:36:a3:0c:7e:17:58:bf:13:c2:cd:7e:9c:ae:8d:
                    19:82:26:18:62:b8:61:28:50:76:e4:6d:4d:d0:e6:
                    b2:68:8c:d1:3d:0a:f1:34:c6:7d:a3:9a:9b:fb:97:
                    a5:87:f4:cd:61:0a:23:dd:13:c8:e9:32:2f:37:3e:
                    db:9d:fe:5f:d0:4e:10:64:1f:6c:c0:5c:0f:af:2b:
                    01:01:ad:57:9a:bf:82:b1:ac:85:b3:cc:17:ca:f3:
                    15:59:dd:24:4e:f6:17:76:a6:a4:26:0a:ef:d6:9b:
                    a1:a6:31:b1:65:cb:b0:88:57:70:9f:d7:58:c7:74:
                    eb:28:40:62:b0:13:07:c4:a6:36:21:fc:cd:14:fe:
                    21:e7:41:f6:76:3d:cc:90:23:24:83:39:6c:3d:c3:
                    5c:d5:1c:cd:d2:df:11:56:98:88:7d:57:4c:69:ad:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D9:6D:A3:4B:AC:B8:94:F3:66:67:8E:18:D9:48:79:35:4B:C9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.160.0/24
                IPv6:
                  2620:13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:26:b2:f0:d1:24:96:ac:83:ef:ff:26:74:f7:90:35:32:
         8f:0f:50:de:78:76:22:ac:a7:b4:58:ef:67:cc:6c:19:a5:a1:
         00:56:b6:ba:ae:2e:cc:fd:4b:90:a7:f8:6f:03:4f:d0:b4:5f:
         9f:b7:9b:b8:9a:9b:3d:12:07:38:7c:21:27:97:37:b6:37:91:
         a9:5b:8b:e5:91:4a:c1:16:08:19:f5:6b:cf:cb:f5:6e:ac:db:
         0a:ed:04:ae:78:bd:5d:10:82:70:57:5f:6f:a4:fa:c5:2b:31:
         ea:c5:e5:a9:3a:d1:05:b1:32:52:c8:0a:0b:64:33:44:ad:56:
         e8:0d:1f:f3:42:d0:15:87:5d:db:ae:cf:26:45:a2:c3:e9:fb:
         e4:1a:7f:0d:54:6a:d3:2f:d2:bd:62:65:e9:ed:72:80:89:4d:
         b4:26:4f:79:20:83:fc:e1:53:62:8c:a6:36:73:21:58:a7:9c:
         8b:f6:0e:74:75:3d:bb:ae:b9:2f:02:2f:16:73:e4:39:4b:a8:
         c8:25:16:1a:61:40:27:3f:b5:e2:01:25:12:b1:ba:cc:f5:68:
         25:8d:ff:84:84:34:92:25:1f:57:26:77:1f:96:eb:98:63:25:
         ed:12:de:44:e3:03:67:5a:7f:c8:1c:1c:cf:64:16:a7:55:f6:
         ca:a9:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:30:22 2026 by rpki-client