Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/a737bbef-dfe8-3aaf-b6ae-e44343819111.roa
File:                     a737bbef-dfe8-3aaf-b6ae-e44343819111.roa (raw, json)
Hash identifier:          9P1HYYIbH79LLq8J+iJWwF0gBKlZrNs7sUD+anu9ZGc=
Subject key identifier:   04:AE:EA:0F:24:E3:5E:FA:3B:DC:9A:02:1C:06:DD:70:F6:98:A9:B2
Certificate issuer:       /CN=9caf1aed-80da-474d-8e77-0000ca0d6025
Certificate serial:       010D0C9F4328584E84796F9AFF117FD61F986940
Authority key identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/a737bbef-dfe8-3aaf-b6ae-e44343819111.roa
Signing time:             Thu 16 Jul 2026 11:39:54 +0000
ROA not before:           Thu 16 Jul 2026 11:39:54 +0000
ROA not after:            Wed 14 Oct 2026 11:39:54 +0000
asID:                     401911
IP address blocks:        23.143.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:79:6f:9a:ff:11:7f:d6:1f:98:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9caf1aed-80da-474d-8e77-0000ca0d6025
        Validity
            Not Before: Jul 16 11:39:54 2026 GMT
            Not After : Oct 14 11:39:54 2026 GMT
        Subject: CN=ecfca357-15c5-49dd-a8b1-7e93b5c5e196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:c6:7a:52:07:ed:2e:d7:66:42:47:1f:2c:
                    09:0b:99:74:1f:d9:8e:80:9b:e8:a1:8b:ea:71:9b:
                    1d:ed:a6:71:37:74:20:bc:60:69:5e:9e:11:3a:77:
                    e4:09:15:e1:71:96:52:56:db:0c:a9:3e:a1:48:10:
                    67:ee:15:1c:94:9a:00:6d:91:09:6f:16:bd:98:a2:
                    bf:53:61:04:93:fc:47:1b:27:bc:66:6a:71:fa:fa:
                    c3:4f:98:e5:26:c1:09:2f:48:b7:66:a7:cd:32:37:
                    79:0b:e2:c8:7e:61:e9:60:3f:d9:95:0f:62:84:12:
                    a0:bb:a2:f3:b8:81:7c:0f:30:4f:ca:32:41:53:59:
                    6a:22:a4:81:72:39:97:7b:8e:2a:30:4f:c0:ef:dc:
                    c5:ee:67:49:82:12:ea:71:34:e4:8c:5f:8c:02:3e:
                    fa:52:58:7b:fd:ef:0f:00:67:8a:0b:3b:7c:fe:a9:
                    f7:2e:f2:09:c0:79:75:33:02:a3:0d:8e:74:0b:00:
                    1e:af:2c:02:9b:ff:d3:d9:b9:d1:ca:93:b4:3d:08:
                    37:fc:e5:8a:e7:05:c9:6c:ba:74:42:db:6d:51:d3:
                    18:ac:40:e6:d8:21:90:74:4e:b5:c6:36:a1:ba:55:
                    f5:cb:d5:eb:3a:9e:25:fc:17:4d:1b:34:48:21:f8:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AE:EA:0F:24:E3:5E:FA:3B:DC:9A:02:1C:06:DD:70:F6:98:A9:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/a737bbef-dfe8-3aaf-b6ae-e44343819111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl

            X509v3 Authority Key Identifier:
                keyid:10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:85:3b:c8:b8:6b:d4:40:70:a6:9e:4f:61:a4:a7:52:55:8b:
         7a:27:5f:92:a3:0c:2d:16:71:e6:76:e5:76:2e:67:3b:4c:5a:
         01:71:c2:8c:44:2f:7a:1e:7f:64:48:f6:d5:1a:76:57:64:11:
         33:87:05:e6:01:e5:75:d7:5a:ef:cf:f2:fe:20:30:58:0c:ba:
         26:22:3b:bb:0d:3c:0a:76:8c:5e:8a:35:f8:9c:c5:5c:29:58:
         9d:7e:c0:8d:a1:f7:c7:a7:0a:31:ad:a6:ed:e6:7c:6f:d9:97:
         de:2b:f8:97:12:21:54:1e:f2:3e:10:cd:e0:9b:d3:02:80:1b:
         47:1f:d9:d1:3e:fc:07:c5:14:0c:ff:65:1e:9d:c3:a8:6e:04:
         3a:61:7a:d1:85:d2:81:0a:d3:36:30:71:37:05:91:a3:b5:ef:
         9c:63:ef:c0:73:f1:56:b9:f2:14:f4:5d:ac:d9:45:8a:cb:cd:
         ee:70:82:32:b0:ef:16:53:98:8d:fd:04:f6:41:5c:e4:97:cf:
         50:93:1b:22:10:7c:e6:63:7d:b3:68:14:d7:22:b3:6d:e5:7c:
         07:2f:16:ac:a3:a7:c3:96:f5:07:00:02:f8:ff:6c:12:6a:a7:
         c1:1c:39:f7:0a:6d:e8:85:46:62:eb:7e:ad:ea:e4:47:bb:88:
         df:49:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:24 2026 by rpki-client