Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa
File:                     d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (raw, json)
Hash identifier:          hZNlqZ6+HPF/FNlzU7u3FPt3C/wsE4uZ5UBBCHGlceA=
Subject key identifier:   BF:CE:20:E5:B8:D6:09:D0:FB:A5:98:90:E5:4D:D0:A1:79:82:17:27
Certificate issuer:       /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
Certificate serial:       010D0C9F4328584EA7965BFDE5D4D94A94CEBCC8
Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209242
IP address blocks:        23.170.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:5b:fd:e5:d4:d9:4a:94:ce:bc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bfee985e-a376-47ca-8861-09d40e699129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:1b:53:e1:05:fa:69:97:0d:6e:8e:22:07:
                    b0:a6:fe:94:3c:f5:2e:9c:29:60:8d:97:04:19:1c:
                    dd:8b:38:44:14:a9:31:cd:2c:1d:b5:5f:a3:4e:de:
                    c5:6c:8e:f5:83:85:71:1b:0a:ca:43:7b:24:67:09:
                    52:12:a8:8c:85:32:80:9a:a2:a5:cf:19:7f:95:33:
                    f6:e1:af:76:28:f1:9d:dc:a9:9d:4b:b7:bf:07:d5:
                    e7:b8:1e:cf:eb:ff:c8:77:c4:f8:fc:d2:b0:73:17:
                    ab:73:7a:09:6b:a6:a3:21:9c:ca:17:95:a3:5f:ac:
                    01:46:0f:ef:b5:4b:73:c2:d5:3f:f9:cb:93:d7:68:
                    09:4b:ba:5f:78:e8:02:31:8f:57:29:12:ce:29:34:
                    f5:74:ae:d1:ff:49:61:2a:c0:7e:62:36:00:48:51:
                    dc:fe:74:16:ac:5a:2f:86:a4:8c:dd:e6:9d:bf:84:
                    08:40:b4:35:de:28:09:ca:af:b9:ba:18:af:1b:7c:
                    5e:53:61:bc:42:9a:a1:19:21:43:97:80:36:49:04:
                    5d:bb:dd:f0:f6:1f:3c:69:42:b0:c9:f2:06:7b:9b:
                    e3:2f:a0:e2:f7:eb:3a:f2:c2:38:e2:d6:9c:60:5d:
                    6f:00:79:1e:61:1d:9c:6e:a6:fc:8b:88:81:fc:52:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CE:20:E5:B8:D6:09:D0:FB:A5:98:90:E5:4D:D0:A1:79:82:17:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl

            X509v3 Authority Key Identifier:
                keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:46:7c:a8:21:c6:e1:9e:40:da:98:88:cd:e8:e8:6c:83:fb:
         ab:34:d4:5f:9d:0b:91:8c:6d:4c:2a:a9:63:bf:c1:3e:86:5e:
         7f:23:04:2f:71:02:67:7a:8f:a6:5c:96:16:06:3d:ea:15:5d:
         e8:85:c6:75:cf:5a:00:1c:4b:14:e8:05:89:1a:93:06:26:9b:
         63:02:3e:9d:dc:bb:68:84:57:66:b7:80:7a:d9:33:ed:a4:93:
         e7:b8:b8:13:1e:31:76:19:1c:43:6f:62:e1:f3:d7:1b:4d:13:
         aa:05:a1:17:dc:cf:03:c8:52:47:cb:2b:57:c9:d8:bc:22:22:
         27:ab:be:15:5a:50:cd:54:1e:e5:6b:f4:41:dc:70:01:40:08:
         67:af:b3:1f:26:02:c1:aa:2a:93:a3:71:97:a5:dd:ac:f9:5b:
         1f:c6:43:89:69:be:67:2e:bb:70:cb:f3:e6:1a:18:4e:44:64:
         10:15:70:08:fd:47:a1:85:be:05:c4:20:00:38:94:2b:9f:e7:
         f8:af:0e:c0:fb:e3:d8:17:81:ad:7b:6e:58:9f:87:63:4a:6a:
         8a:ad:6e:68:94:82:ac:51:cf:03:53:6b:01:bd:e0:ca:16:8e:
         c4:ce:78:a9:be:36:59:03:ad:7a:66:e0:bb:11:64:9e:91:3e:
         52:40:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:12:06 2026 by rpki-client