Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/01073802-359f-3fcc-8cd9-7191adb0b622.roa
File:                     01073802-359f-3fcc-8cd9-7191adb0b622.roa (raw, json)
Hash identifier:          hu4aUJXPKE/kH+POm73gaeVLRpMBvE+9sBx7YWIQ9is=
Subject key identifier:   A3:F1:47:E2:7C:AE:CF:9A:D7:95:EC:08:9E:54:3B:FA:C8:B9:DA:CA
Certificate issuer:       /CN=4f9daf15-de63-453b-a389-ff5afab0a952
Certificate serial:       010D0C9F4328584EDC91FA545E6135028472EA40
Authority key identifier: C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/01073802-359f-3fcc-8cd9-7191adb0b622.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     401005
IP address blocks:        23.156.88.0/24 maxlen: 24
                          2602:fa79::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fa:54:5e:61:35:02:84:72:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9daf15-de63-453b-a389-ff5afab0a952
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=b5b0eb96-e673-4c71-851b-b1dd7ec21897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:7f:c6:3c:44:05:51:a1:74:0f:cc:91:1f:
                    4d:6d:e0:7a:d8:6d:04:dc:6a:b7:3d:f0:15:2b:1b:
                    78:bc:bf:3b:8e:42:9b:53:c5:0b:c6:18:50:cc:51:
                    40:70:c4:6e:ae:94:a3:70:87:44:a8:2a:2b:7c:9c:
                    70:28:38:c4:ff:ee:e0:17:2a:ae:9c:1e:11:0f:01:
                    cd:96:5d:18:5c:8e:00:73:16:8c:ac:3e:bf:ac:d3:
                    fb:66:65:b3:cf:11:4f:9e:e4:98:96:96:ff:f6:ac:
                    2b:45:8c:e8:f3:2b:8f:83:f9:2a:13:6d:85:82:5d:
                    a1:6f:be:d7:8b:d4:5a:33:5c:48:85:0c:93:c2:dc:
                    f9:da:b8:84:02:39:3d:bd:30:fa:61:66:64:45:a2:
                    ec:26:e7:67:98:00:43:de:08:e3:16:68:ca:2c:ef:
                    92:27:25:ce:1d:e7:c1:1f:aa:06:a6:3b:e9:2a:71:
                    3b:49:8b:90:44:d3:80:da:4d:f5:2d:5c:e1:95:91:
                    6d:51:8d:85:15:04:4e:83:c8:02:5c:05:39:92:f4:
                    e3:44:11:cb:1c:86:cc:47:41:16:87:26:4a:9f:2a:
                    94:25:21:5e:b1:53:c4:f3:25:e4:0d:21:f0:c5:96:
                    5c:13:8e:39:14:74:9e:06:b6:3c:48:2a:01:52:83:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F1:47:E2:7C:AE:CF:9A:D7:95:EC:08:9E:54:3B:FA:C8:B9:DA:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/01073802-359f-3fcc-8cd9-7191adb0b622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.88.0/24
                IPv6:
                  2602:fa79::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:56:e2:56:55:9d:be:4d:12:1c:7b:10:74:ff:7b:d1:73:
         7b:7a:57:5b:dc:56:ec:84:41:0f:91:87:18:11:89:6a:1a:b3:
         f5:86:77:e0:b0:ff:67:77:79:25:e7:47:6a:b2:0a:39:f9:9d:
         74:ba:56:26:e6:06:88:3a:1d:d3:58:cf:ff:3d:27:18:7f:55:
         20:5c:f2:29:fe:d7:3e:50:5b:b1:ab:45:6d:d2:91:89:6e:78:
         6c:49:6f:a3:fd:60:1b:07:2c:a3:f9:f8:d9:84:f6:29:aa:dd:
         31:d4:37:20:9a:92:ab:fd:1d:57:19:2f:5e:5a:f1:83:8f:f1:
         f5:a3:03:99:8b:cc:15:dd:2a:72:5b:58:b1:f5:b7:6c:79:a4:
         72:67:20:e3:60:05:f9:e7:32:2d:70:51:19:45:b5:54:71:1d:
         42:0d:0b:22:be:19:27:24:77:7d:55:9c:4d:14:ff:79:98:fa:
         bc:a8:90:ce:4f:d8:0b:21:d0:65:5c:bc:a1:9a:4d:34:4f:b5:
         a3:1f:d7:19:68:ca:dd:3c:59:af:aa:f5:6f:8a:78:31:c4:c7:
         dd:53:6a:28:ef:b8:1b:35:1a:6f:ab:46:1a:0d:d7:ae:6c:81:
         fd:07:3e:44:d5:5e:f7:c3:28:fd:68:b7:53:3d:af:33:93:44:
         70:af:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:22:11 2026 by rpki-client