Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa
File:                     fa73468a-9857-31fe-a887-276ed3d1ca76.roa (raw, json)
Hash identifier:          cKHqyWXwBQy6zTpZHfvFxnM0rZ+l4EccawDfGeHdd2E=
Subject key identifier:   A4:29:06:42:D4:D0:F5:17:2D:37:3D:67:F4:33:E5:A1:9B:77:E9:4B
Certificate issuer:       /CN=98252c6f-4de3-4710-bd94-6334e6a81c64
Certificate serial:       010D0C9F4328584EB84718FB481C6A01420D0A40
Authority key identifier: 63:77:8D:A2:31:36:6F:07:47:59:D6:D0:A4:F4:87:B0:C2:56:62:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     394144
IP address blocks:        23.145.160.0/24 maxlen: 24
                          192.234.79.0/24 maxlen: 24
                          2602:ff7a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:18:fb:48:1c:6a:01:42:0d:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98252c6f-4de3-4710-bd94-6334e6a81c64
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=cc9c5c53-acaa-416a-b2f5-88e04f0743ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:bb:25:28:bc:9b:71:ed:64:b0:72:e6:4b:
                    56:25:33:51:e6:77:b9:a0:8c:6e:b3:bd:cf:24:e2:
                    ca:2b:3e:63:55:1c:67:24:71:1c:4a:32:c4:ac:ce:
                    54:62:85:40:e4:12:4f:dc:4b:96:e5:ca:82:a8:86:
                    6d:10:99:ce:6a:76:df:68:9a:d5:72:48:c6:83:3c:
                    79:85:8c:bf:bf:1d:b3:33:4b:84:44:ec:a2:12:ca:
                    33:b0:7e:af:f0:1a:6a:fa:bd:99:ea:d5:e7:19:e9:
                    e8:8b:dc:b3:45:44:e0:7c:d7:14:2d:aa:3c:85:13:
                    ad:f8:ec:b7:3e:3a:ee:53:30:4e:3a:bb:1e:93:4e:
                    f4:7b:13:ea:15:ec:6f:85:67:89:69:63:60:57:0d:
                    b5:93:d9:d0:b3:4f:2a:33:9b:59:2a:40:40:9c:38:
                    57:aa:e3:66:84:a3:da:a5:01:7c:1f:62:d2:84:c9:
                    b9:27:1b:1c:0c:33:ab:da:2a:97:a8:a1:af:82:1f:
                    61:d4:b5:da:fd:45:13:a1:e5:48:f4:5a:ba:54:5a:
                    e5:5d:06:cd:45:41:92:a4:bb:6b:23:d3:19:17:1e:
                    a2:9a:93:5d:17:06:dd:ee:7e:97:a2:2e:7d:bf:31:
                    96:0c:12:90:c3:6c:9b:4a:ca:90:fb:6e:06:66:6e:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:29:06:42:D4:D0:F5:17:2D:37:3D:67:F4:33:E5:A1:9B:77:E9:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/fa73468a-9857-31fe-a887-276ed3d1ca76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64/98252c6f-4de3-4710-bd94-6334e6a81c64.crl

            X509v3 Authority Key Identifier:
                keyid:63:77:8D:A2:31:36:6F:07:47:59:D6:D0:A4:F4:87:B0:C2:56:62:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/98252c6f-4de3-4710-bd94-6334e6a81c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.160.0/24
                  192.234.79.0/24
                IPv6:
                  2602:ff7a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:12:85:56:7b:c7:71:3d:2a:14:f2:92:35:e3:65:1b:81:0c:
         a5:59:5f:80:e2:b0:68:92:b0:c8:cd:dc:78:6f:08:34:1d:d2:
         e2:47:1c:a6:02:5e:9f:57:4b:87:b8:c9:26:09:62:22:8d:74:
         a4:3f:2a:f8:82:70:3a:1d:6c:fe:b6:3c:81:f6:09:39:82:45:
         95:b2:fe:d3:2c:4a:c2:a0:b5:96:6d:ac:b6:c2:2b:41:85:e7:
         62:d5:0c:05:4d:20:c1:18:ee:30:63:61:ac:b2:86:d9:34:ad:
         65:14:a7:65:87:10:35:9f:5d:5f:69:2d:6d:55:f5:30:ce:5e:
         0f:c5:ee:f0:c4:25:da:4c:a2:2a:9d:57:f7:d8:7b:ae:eb:18:
         9c:b9:a2:3c:ef:78:4b:81:4e:6a:75:31:e0:aa:19:bc:4a:5b:
         a8:e3:50:86:de:46:af:9b:81:08:40:76:21:f8:19:dc:93:11:
         8e:23:95:2c:ba:a3:49:89:72:92:c5:c3:82:60:4c:6a:85:16:
         d5:ed:dd:43:67:fa:f6:96:0d:22:0d:01:23:66:ca:97:fb:dd:
         43:0b:ba:48:4c:ca:80:ae:ff:61:e1:b7:5f:f5:d5:57:1b:5d:
         d7:c8:7c:12:04:b0:2f:86:97:67:69:b1:b8:d5:bd:cd:08:03:
         94:06:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:17:08 2026 by rpki-client