Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa
File:                     b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa (raw, json)
Hash identifier:          +hN8msOmWFKqSJvoLVhZNDCfAAIegpMC2V0h5AzzgIc=
Subject key identifier:   80:59:8D:33:93:0F:26:E7:CA:2E:2F:B7:A7:63:1E:49:6A:A6:8D:CD
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584EC371BD9E68CE99243A947520
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        23.166.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:bd:9e:68:ce:99:24:3a:94:75:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=8234f349-3bef-4154-9b22-e2aa79c2b8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:74:4f:1d:1c:95:19:2a:c4:b4:a5:bb:06:
                    4c:d7:ce:2c:b7:ab:dd:72:60:12:01:00:d9:bf:e3:
                    6e:3b:5a:17:94:4c:75:89:a3:6f:4e:fb:f4:fe:e6:
                    33:9d:8e:25:f6:d8:0d:a0:5a:64:be:6d:b6:d2:fe:
                    77:2a:7f:19:36:14:69:d7:e8:29:97:9b:f3:93:6d:
                    28:b4:e0:18:4f:d4:5b:d1:0a:46:86:62:30:4e:4e:
                    8a:e0:20:ac:d4:ab:7b:52:19:a3:0d:86:20:63:ab:
                    3e:df:63:d2:b0:2b:7d:b0:9a:2d:7d:96:fa:ca:03:
                    f3:ca:7c:fa:01:66:49:0f:e5:85:7d:86:a7:7d:59:
                    32:22:5e:15:e1:4a:ee:ed:43:11:db:c8:a3:bf:bd:
                    6d:50:c0:d9:45:be:ba:30:e0:81:b5:70:ea:83:77:
                    0b:15:95:5b:93:ab:2c:d8:7c:b9:c6:73:79:a5:ce:
                    08:16:ab:17:10:61:b8:5f:c3:12:2c:ba:41:0b:87:
                    5b:08:7e:73:0e:13:a5:b4:3e:25:12:de:f8:94:c8:
                    16:9b:92:6c:33:09:f6:61:70:46:d7:19:a0:9d:e5:
                    05:27:9c:07:e0:61:de:2d:34:52:65:8f:6c:ff:60:
                    2d:c4:40:4e:61:27:74:0b:67:b6:c2:49:42:c7:98:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:59:8D:33:93:0F:26:E7:CA:2E:2F:B7:A7:63:1E:49:6A:A6:8D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a3:a4:cb:fd:c6:55:5c:80:7c:ed:e3:5a:7f:8e:cb:e0:c5:
         5e:b0:b4:3b:ac:dc:e8:3b:a5:38:c7:e9:d4:8d:66:53:83:78:
         98:49:58:bc:ce:66:59:ba:39:fa:ba:04:1a:44:e1:5a:2f:d2:
         5e:c7:94:c2:bc:69:8d:4e:55:86:2a:62:8b:52:38:00:61:9c:
         03:57:d0:e9:41:20:4f:0b:71:06:3d:cc:35:9f:46:41:4a:f6:
         1d:0b:6a:fe:84:71:68:6d:7a:30:9a:b4:b5:e2:66:aa:a4:15:
         46:a9:c2:66:51:3b:55:32:38:df:75:6e:c4:5e:d3:a8:fe:79:
         ae:85:a5:87:93:f8:ee:cb:51:ed:04:21:9b:6c:ed:1b:08:81:
         be:81:29:9a:81:cf:e9:12:fe:f3:92:54:cf:be:7a:3c:03:cf:
         ef:ea:16:82:be:81:af:68:96:e9:83:0d:2e:f5:2b:f5:fc:2e:
         20:94:82:3a:7f:52:6e:1b:e3:33:32:99:bc:b7:3c:28:e6:ef:
         ce:4a:b3:f1:26:97:9b:54:9c:7c:01:40:33:2f:e7:02:dd:99:
         5f:9f:c4:4c:bf:0c:35:1f:ea:36:31:3f:e3:89:df:eb:7d:67:
         5c:11:60:64:77:c7:e4:c8:30:f9:af:1d:66:56:0d:c6:dd:bd:
         c9:dc:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:06:31 2026 by rpki-client