Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa
File:                     cf5393fa-35d4-31bb-8298-3a8383155b2e.roa (raw, json)
Hash identifier:          pihG+kwmQF52IXPnoQdnHd7U6ZpxhZP11mckfKN70Yc=
Subject key identifier:   26:25:5E:5E:BA:2A:16:4D:87:72:B3:13:05:C5:3F:BB:F7:FA:27:AE
Certificate issuer:       /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c
Certificate serial:       010D0C9F4328584E90BA528D0E1C81BAC40C3380
Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        23.143.68.0/24 maxlen: 24
                          2602:f5c8::/41 maxlen: 44
                          2602:f5c8::/44 maxlen: 47
                          2602:f5c8:20::/44 maxlen: 46
                          2602:f5c8:80::/41 maxlen: 44
                          2602:f5c8:e0::/44 maxlen: 46
                          2602:f5c8:f0::/44 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:52:8d:0e:1c:81:ba:c4:0c:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=e0f5c3c3-d9e4-456e-b8a1-ab7731e755e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:bf:c7:de:f9:b6:f9:94:a0:b8:7a:80:c1:
                    9f:8d:5f:7e:03:26:3f:b4:fa:1a:31:77:e1:ab:00:
                    ce:f1:e1:9b:06:04:bb:ed:73:eb:23:7c:68:e2:67:
                    85:67:4c:71:5e:27:a3:bc:83:dd:7f:7e:6d:4b:c9:
                    ed:2d:43:98:a2:02:82:21:d8:a2:be:c8:77:99:ed:
                    14:af:3d:e9:97:ee:ad:a1:95:60:a3:d3:60:23:5a:
                    e0:63:75:f2:18:00:ef:59:7c:6a:bd:51:42:8d:56:
                    e4:5b:dd:30:64:29:84:8e:54:9d:d5:00:21:12:4a:
                    3d:30:10:51:08:f8:69:89:c0:03:b9:41:53:f2:9c:
                    d2:49:08:01:9a:c3:25:83:23:8f:12:4f:ac:cc:38:
                    49:e5:b2:ac:1d:78:8a:0d:ca:8e:c2:38:15:18:97:
                    73:8d:9d:22:ae:5d:4c:7e:fb:c3:a8:f5:33:65:a3:
                    4e:fc:c8:b5:09:d9:ed:ae:46:06:5d:80:f8:df:c2:
                    a3:ee:e0:2b:bf:79:98:a7:bc:9e:bb:86:70:43:5e:
                    b7:67:6c:56:e8:b6:21:31:eb:31:e7:e1:e0:43:a7:
                    e1:0e:9d:70:44:1d:73:97:24:ca:23:48:83:78:84:
                    4c:38:d3:4c:b2:6a:f8:91:43:fa:f8:57:24:0e:5a:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:5E:5E:BA:2A:16:4D:87:72:B3:13:05:C5:3F:BB:F7:FA:27:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl

            X509v3 Authority Key Identifier:
                keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.68.0/24
                IPv6:
                  2602:f5c8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:35:46:a8:8e:92:4d:4e:74:b2:9d:16:74:4e:a1:43:5e:08:
         de:fc:fc:a6:8e:fa:d0:03:35:b3:70:9d:9c:74:a8:67:b4:4f:
         6b:5a:9d:91:4c:c7:af:18:2a:e3:fd:fc:3c:b2:73:96:89:33:
         d7:07:58:5f:78:15:38:00:6e:91:f0:5f:ed:86:ee:6a:af:12:
         f4:52:f8:e0:7e:a5:b6:8d:8c:25:e9:83:cd:b0:0a:96:e8:cf:
         9b:c1:9c:cc:be:04:3f:c9:34:6e:cb:54:06:d4:fe:53:d6:d9:
         64:f4:cc:eb:15:ea:12:ea:ee:85:32:00:27:38:1d:82:45:9d:
         5f:17:a9:e2:4c:93:ac:e9:b1:9a:33:95:ab:e9:39:9c:2f:6a:
         03:39:ed:14:80:67:cc:12:ed:c7:ac:04:98:0b:3b:68:da:64:
         56:9b:9b:56:b7:ef:09:39:ba:41:1a:54:2b:3d:ae:c3:b0:ec:
         c3:9a:ae:2e:5f:8a:33:0d:9e:72:64:c7:41:e0:a1:b9:cb:3c:
         f9:37:ef:02:a5:e9:63:bd:3b:3c:be:4a:bf:7f:35:5d:5b:26:
         bd:44:59:4e:34:a0:16:38:56:d4:89:c6:26:05:2d:d6:3f:1a:
         61:71:a8:5b:cc:c5:d4:4a:5e:d7:9a:ac:3f:a5:d7:df:36:95:
         e9:1c:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:58 2026 by rpki-client