Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/a1341201-a29e-3a8f-afbb-58f6c4c40212.roa
File:                     a1341201-a29e-3a8f-afbb-58f6c4c40212.roa (raw, json)
Hash identifier:          KyQ7s3op18OMyp4boF0gNG+CsjsXvrt1JAEFd6HKdkY=
Subject key identifier:   EE:AA:B5:CB:D0:89:44:35:27:C2:32:73:D0:54:00:8B:EB:08:D3:8D
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F4328584E31CF1131A6C942B5F75D2720
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/a1341201-a29e-3a8f-afbb-58f6c4c40212.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     42615
IP address blocks:        23.132.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:11:31:a6:c9:42:b5:f7:5d:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=b3204499-3534-4559-9f85-df943ba379d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:91:e7:ac:ce:52:66:2d:ea:8f:78:0d:4c:c2:
                    10:db:52:e0:a3:a4:f1:45:76:46:3f:bb:52:5d:6c:
                    c1:1c:58:f3:c1:c8:5d:c2:7a:80:f4:50:e2:90:3b:
                    0d:8e:43:f2:df:08:a9:7a:9f:d9:d0:56:42:39:4e:
                    df:ac:01:09:9f:eb:e8:00:da:84:3a:8e:ac:b0:0c:
                    83:16:f1:a3:ef:2a:ef:ac:e5:98:1a:13:7f:6f:ec:
                    70:f4:10:c8:7f:5b:b5:31:66:c9:54:1c:14:3e:8d:
                    7f:83:bb:77:e3:5d:03:b0:91:cf:2d:1a:9a:d1:d2:
                    d5:b8:bf:81:d4:8f:c8:54:81:01:62:05:e6:a1:11:
                    b7:e3:24:ba:fe:be:77:9d:4c:4e:06:6b:e7:9c:26:
                    a0:dc:d4:96:f1:c8:c9:df:e8:e0:66:37:48:4b:f3:
                    74:04:57:5a:77:58:b8:95:4b:ca:0c:8c:0c:11:2c:
                    c3:1a:cb:12:93:ab:cf:09:e7:af:86:c0:76:d0:f4:
                    05:7b:8a:c1:e1:86:8d:20:c6:7b:5f:60:5c:45:93:
                    42:03:ee:f9:9c:9c:7c:66:e3:f7:b2:6b:6b:6f:ba:
                    8c:d5:de:1f:23:e7:86:c7:52:50:0f:a9:e7:8a:c4:
                    ea:42:3e:c2:bf:33:a7:8b:01:55:56:20:a1:f4:bd:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AA:B5:CB:D0:89:44:35:27:C2:32:73:D0:54:00:8B:EB:08:D3:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/a1341201-a29e-3a8f-afbb-58f6c4c40212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:a7:1a:44:c2:3b:92:0d:e9:15:f2:fb:38:74:54:d5:e7:
         29:59:84:c2:34:d5:8c:81:eb:5f:c4:40:bd:88:25:4a:be:de:
         b5:54:ab:9e:49:60:d8:ef:d6:18:11:9b:ad:eb:94:a3:a2:83:
         61:da:e5:6d:68:48:ae:dd:9f:a8:db:14:8b:e8:a9:55:f0:66:
         71:b3:da:c8:5a:6c:ab:07:c3:11:3c:dc:1c:37:b4:72:f5:38:
         04:16:e3:8c:54:71:f8:f5:0c:92:e1:ee:db:46:4d:6a:b1:78:
         a0:15:9c:9e:04:5c:56:01:06:7d:45:c5:4b:18:94:bd:25:91:
         2d:13:5a:62:0b:f3:ba:c9:38:30:a9:69:62:6f:0b:25:b9:8a:
         e6:b9:00:16:74:7e:70:1c:fc:cd:5f:90:cd:bb:40:0f:65:a6:
         2e:e8:b4:e4:df:89:bb:17:7b:13:42:96:09:b4:6a:77:cd:8a:
         8c:b9:7b:16:53:c4:fc:21:7c:e7:d7:13:cd:a3:c9:67:d3:80:
         3b:e1:f3:9a:77:31:3e:b2:eb:39:26:de:c3:e0:c7:aa:41:d1:
         f6:9b:01:b3:a4:37:73:00:87:5a:5c:00:d8:1d:73:80:f0:bc:
         61:4c:f1:81:c5:22:18:26:b9:a6:ce:d4:40:bd:0a:82:73:26:
         b7:65:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 10:53:27 2026 by rpki-client