Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/97ee4979-c7ec-3238-b726-b6b7d35ca580.roa
File:                     97ee4979-c7ec-3238-b726-b6b7d35ca580.roa (raw, json)
Hash identifier:          Zk4X+VFr2S+VLhkVcQtL/3m4ac5A41vx8r8mouERQIk=
Subject key identifier:   5C:5F:72:A6:D0:D4:43:BA:36:38:49:8C:32:1D:31:01:96:29:D9:9A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584E366964C6A67E7CDAD65EDD80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/97ee4979-c7ec-3238-b726-b6b7d35ca580.roa
Signing time:             Thu 18 Jun 2026 12:34:31 +0000
ROA not before:           Thu 18 Jun 2026 12:34:31 +0000
ROA not after:            Wed 16 Sep 2026 12:34:31 +0000
asID:                     402553
IP address blocks:        8.19.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:69:64:c6:a6:7e:7c:da:d6:5e:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jun 18 12:34:31 2026 GMT
            Not After : Sep 16 12:34:31 2026 GMT
        Subject: CN=7f649e9d-6802-4d12-95a1-1d831a27f4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:10:ac:5e:7f:8a:c0:25:e6:12:ff:b3:89:
                    ca:ac:42:5e:8e:4e:40:a6:2c:8d:45:76:9b:f0:80:
                    13:bb:61:0b:4a:58:2b:f7:ea:f7:cb:14:5d:5d:03:
                    3d:80:e0:99:5a:10:fa:cd:75:56:18:c7:68:0b:14:
                    f8:2c:44:64:97:d9:42:e2:f2:b3:14:27:bf:63:46:
                    88:e4:47:0b:e4:df:71:58:09:c4:11:47:4b:c9:cb:
                    b7:e4:ca:bd:41:91:1f:82:73:4f:ce:55:42:79:ab:
                    4e:50:48:be:ec:9f:dd:b4:31:c8:69:94:b6:74:93:
                    37:29:1e:28:e9:ff:d2:5b:9a:ec:7b:69:36:16:e3:
                    c8:44:d7:62:97:16:8b:33:23:a5:78:0b:bd:d7:24:
                    0f:c4:3d:e1:b2:54:25:27:d8:01:fe:cd:5b:f5:05:
                    f4:72:68:17:28:54:97:5e:4d:84:57:6b:18:75:55:
                    85:01:01:a0:e7:e9:29:30:05:c7:c3:77:2e:91:5e:
                    e0:f2:12:e5:06:36:75:70:46:9f:b0:75:e8:39:a9:
                    23:5f:c2:fc:31:1e:22:81:44:b4:0a:6f:69:0f:c6:
                    0b:8e:44:3e:d3:c3:fc:62:1e:12:b2:c7:7f:d8:45:
                    4a:45:59:a7:80:55:13:82:51:0f:46:d0:6c:dc:e4:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5F:72:A6:D0:D4:43:BA:36:38:49:8C:32:1D:31:01:96:29:D9:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/97ee4979-c7ec-3238-b726-b6b7d35ca580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.19.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:be:91:94:17:79:74:98:31:d8:bd:fc:39:5d:28:65:5b:3a:
         18:51:55:26:95:79:7a:86:3b:20:fb:25:61:0f:95:f8:27:59:
         ff:f6:5d:89:e8:08:1a:d4:dd:38:c3:a9:6e:f2:d4:3b:2e:63:
         d4:e6:92:93:6e:28:35:cc:0e:2b:90:4a:8c:14:3e:5f:57:f5:
         9b:85:86:ce:6d:82:db:d7:8c:82:af:ec:13:ee:4c:57:e0:c9:
         51:a2:28:06:04:36:b2:72:2d:c1:90:3e:1d:9f:1d:f4:5f:95:
         61:5c:fc:69:77:aa:a2:f6:48:81:ed:d4:d5:f8:e6:d4:20:c3:
         3a:ec:19:22:8c:75:03:ce:84:8e:c9:7e:25:9b:55:99:a5:00:
         ff:ab:c4:b1:c3:30:43:c7:ae:a9:70:28:6f:69:d5:e4:32:a9:
         d2:56:7d:88:55:2b:c1:7f:f2:36:65:bd:2d:23:c2:eb:59:cd:
         44:8b:fc:1f:df:07:f3:a0:bb:cf:c2:13:cd:48:1e:b6:b0:3d:
         4a:6f:1f:7d:6f:62:c3:f9:b8:40:28:98:c7:a9:37:db:cf:07:
         7a:e0:dc:2f:eb:7e:cd:fb:7e:05:21:65:f0:7f:87:eb:4e:95:
         e5:3a:24:19:61:c7:7c:72:cb:25:f2:57:d9:d1:cd:1c:79:97:
         c5:56:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 03:31:07 2026 by rpki-client