Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa
File:                     32ccbbe6-ab71-3674-a938-9630bf9d1890.roa (raw, json)
Hash identifier:          LqLj1QRyUB3PTdhTsRa84GZ4z2+ngfBTnGc/ve4qnp8=
Subject key identifier:   40:D5:4D:76:70:B2:97:4C:5C:B0:BB:61:59:97:1C:D3:C1:E7:97:81
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584A7952C4DF5FE0967C6A1EBC80
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa
Signing time:             Thu 10 Jul 2025 16:40:21 +0000
ROA not before:           Thu 10 Jul 2025 16:40:21 +0000
ROA not after:            Wed 08 Oct 2025 16:40:21 +0000
asID:                     46261
IP address blocks:        23.226.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:79:52:c4:df:5f:e0:96:7c:6a:1e:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Jul 10 16:40:21 2025 GMT
            Not After : Oct  8 16:40:21 2025 GMT
        Subject: CN=5b541714-4a74-479e-ba35-642f6cc28933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bd:98:e4:d7:64:aa:18:c8:f9:6e:59:d0:07:
                    58:1f:07:fa:58:05:11:64:e2:ad:b5:8c:77:48:6a:
                    72:6c:ef:6a:04:b7:83:eb:ff:ca:15:8a:c2:2b:04:
                    19:2c:a8:39:d6:ce:ee:6e:65:b3:b6:4c:6e:f6:0e:
                    92:af:53:22:54:d8:86:b8:58:ca:18:e0:12:d9:fa:
                    40:33:f0:cf:80:9d:f1:eb:40:91:a0:f9:89:3b:52:
                    30:4d:ce:e1:62:d4:6a:50:fd:46:9e:ef:5c:62:f9:
                    b4:df:4e:58:36:ca:bc:17:4a:ad:e3:33:d9:33:df:
                    23:ad:4b:28:5f:96:9e:dc:2d:e6:b8:69:59:ef:39:
                    0a:41:84:e7:2f:dd:e9:29:8a:27:af:f8:a9:d5:46:
                    06:47:25:8a:b9:0d:c8:f6:f9:82:66:40:f7:74:03:
                    08:f0:4e:cc:68:d0:6a:e5:a6:e9:fd:b4:81:60:0d:
                    7d:d2:30:b5:f5:98:01:66:c3:a4:7e:be:9f:33:b1:
                    c3:25:90:0a:99:3d:5b:d4:b1:74:b8:2c:03:af:8e:
                    45:df:4a:de:42:98:97:34:6d:ac:b3:4d:e8:a5:0a:
                    06:99:35:07:b6:4d:d0:04:e7:0d:c1:aa:c6:f1:90:
                    66:4f:98:d9:94:ec:35:8e:ea:37:7d:b1:9d:c0:cc:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D5:4D:76:70:B2:97:4C:5C:B0:BB:61:59:97:1C:D3:C1:E7:97:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:a5:bb:44:ee:34:1a:7d:96:a0:3e:ac:01:2d:a8:95:9e:
         1f:cc:c2:37:ca:86:34:ef:ee:9f:95:e4:58:a4:2c:b6:15:7d:
         e8:41:43:45:0b:26:4e:53:2b:84:73:a8:40:40:47:8c:fa:47:
         a1:5c:7f:e2:a3:f5:8e:87:86:5a:39:cb:b5:0d:8e:82:a9:a2:
         ab:3e:ab:e6:73:a7:a4:f3:2d:2f:0c:cb:13:17:01:e5:e3:eb:
         99:2c:cc:86:17:e3:af:ef:a9:ce:00:b3:c6:95:94:e3:6f:31:
         76:55:4b:bf:69:ae:79:f0:a5:07:11:8d:a7:c3:2c:63:1a:a5:
         39:5c:d3:af:5e:2e:b5:e7:c4:8b:ab:50:ab:66:6c:45:0b:06:
         39:28:31:07:a4:f0:2b:c7:47:0a:e4:64:a7:a8:58:f8:40:c1:
         26:c1:1a:4c:5f:20:ed:38:a6:28:47:02:3c:f2:8b:84:59:15:
         75:90:94:03:53:15:69:55:f1:ef:77:22:47:2a:cf:5a:2f:87:
         6a:51:06:3f:1a:5b:06:de:ba:ee:dd:1a:86:3a:15:f5:5d:ef:
         cd:7a:9a:09:a2:53:fd:cd:bd:9d:d9:17:ae:9c:bf:c5:98:f9:
         0e:56:c3:5e:98:a5:04:50:01:a9:97:c4:d6:0d:be:8d:14:55:
         b8:1f:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:39:41 2025 by rpki-client