Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/1209bd1b-5508-3661-bcbe-cb670d8fd182.roa
File:                     1209bd1b-5508-3661-bcbe-cb670d8fd182.roa (raw, json)
Hash identifier:          HirDz2hlCbQj+h01SOFs6vgDksoGEHeZyDbdL7RYcSI=
Subject key identifier:   5F:F1:1C:D5:21:E6:2A:F6:07:59:19:89:FE:25:C0:FE:0F:E3:A1:2F
Certificate issuer:       /CN=00bdc54c-4822-4df3-99e6-85920125a480
Certificate serial:       010D0C9F4328584EAA0ADC6145F99745DCEA9780
Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/1209bd1b-5508-3661-bcbe-cb670d8fd182.roa
Signing time:             Wed 29 Jul 2026 22:37:49 +0000
ROA not before:           Wed 29 Jul 2026 22:37:49 +0000
ROA not after:            Tue 27 Oct 2026 22:37:49 +0000
asID:                     14618
IP address blocks:        23.161.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:0a:dc:61:45:f9:97:45:dc:ea:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480
        Validity
            Not Before: Jul 29 22:37:49 2026 GMT
            Not After : Oct 27 22:37:49 2026 GMT
        Subject: CN=dbb9125b-838d-4d13-91b2-ef1826bbd606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:4b:66:64:42:70:24:27:4d:31:f4:ae:2c:
                    f1:05:36:78:8a:46:13:d3:b4:fe:20:8c:ef:f8:1a:
                    91:15:68:6a:e8:2a:f3:eb:6a:0d:54:5e:96:f4:dd:
                    0c:3e:d8:dd:a4:79:e5:92:b9:b9:71:c8:48:5d:bb:
                    35:c4:9a:8a:5e:82:94:07:0c:74:5c:d7:c7:9c:69:
                    12:7a:31:29:95:8a:55:34:74:54:da:5e:cb:52:e0:
                    f3:44:fb:fc:70:f9:0f:ef:62:b5:db:02:13:a7:cd:
                    db:71:93:5c:70:56:a5:f4:56:17:b3:0e:e0:ce:ad:
                    59:1b:c9:f6:81:ff:6c:dd:94:8e:a8:29:de:d0:be:
                    3a:4a:aa:8c:fd:39:2a:c7:aa:8b:f6:ab:92:93:c8:
                    80:8f:b3:a1:47:bf:33:df:47:f7:da:0b:fb:2e:9e:
                    48:2a:35:9d:fc:51:13:81:37:df:f2:12:ca:a4:43:
                    37:47:2f:1a:4e:db:6a:34:67:16:18:a2:bd:28:91:
                    e0:43:20:20:41:09:4b:60:ae:a5:6b:f2:08:1d:06:
                    d4:a7:5a:38:72:e4:9b:7a:46:96:af:7e:e4:59:55:
                    92:e4:1d:6b:03:16:6d:4d:bc:e4:e2:11:69:3a:c1:
                    08:de:1d:38:92:84:7a:7d:c1:df:72:40:81:73:b0:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F1:1C:D5:21:E6:2A:F6:07:59:19:89:FE:25:C0:FE:0F:E3:A1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/1209bd1b-5508-3661-bcbe-cb670d8fd182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl

            X509v3 Authority Key Identifier:
                keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:bd:69:ce:b5:b3:6d:05:ed:83:d6:0d:7a:f9:67:c8:fa:a8:
         5f:9d:73:de:02:40:5f:ba:ac:6b:7a:7b:7f:fc:78:0b:72:11:
         60:d4:bd:c4:21:6d:66:ed:df:e4:00:1d:ce:45:41:94:52:2b:
         46:d7:e9:48:78:5a:94:f8:ef:e3:5c:39:60:6f:7e:77:60:aa:
         11:08:b0:f0:4f:f3:c9:71:80:5a:c8:63:d2:87:08:43:88:75:
         16:b4:61:0f:87:71:45:dc:b2:61:b3:f3:e3:ef:1f:45:7a:e9:
         5f:a7:af:d9:31:e8:44:d8:f5:6c:9f:9e:64:36:94:bf:47:10:
         43:0b:31:e9:6a:86:78:bf:3a:a5:9b:00:c6:de:3e:68:27:f6:
         a4:69:6c:7e:80:9f:5d:63:e8:8e:68:09:8c:24:6d:b7:f8:b5:
         d3:c4:5d:32:e3:a4:bd:cb:f5:ac:68:ef:6b:f9:ab:28:5d:88:
         6b:02:61:9e:48:fc:05:8b:d4:ea:40:d0:63:0d:4e:1e:06:22:
         71:54:99:8d:fe:91:37:85:7b:3a:eb:07:7d:8b:44:ee:80:2a:
         20:68:c9:61:4d:c9:ab:4e:bc:b5:5a:97:31:aa:eb:35:fc:01:
         96:6f:17:68:95:59:29:13:58:55:3f:7d:c1:c5:2a:58:e8:a7:
         62:f7:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:44 2026 by rpki-client