Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa
File:                     b765a089-28a9-359f-bb37-aaa584ca4e9a.roa (raw, json)
Hash identifier:          ndJwn+c7oCB9cU4J6OS5foHgfjgf3/Umj8ZqrnmW3YY=
Subject key identifier:   EC:0A:2E:A1:A4:49:E9:1E:3C:0A:01:E1:7A:1E:8F:11:3C:FB:7F:D1
Certificate issuer:       /CN=5144f613-8a75-4802-bb71-45eaf8220874
Certificate serial:       010D0C9F4328584E4559F0CF8AACFC9ED87E4A98
Authority key identifier: 16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     8796
IP address blocks:        23.169.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f0:cf:8a:ac:fc:9e:d8:7e:4a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5144f613-8a75-4802-bb71-45eaf8220874
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=4f3d4a03-6d09-4014-8a7a-28062b5c5b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:40:13:5f:dd:93:2c:f8:f4:ea:40:42:cb:
                    a6:b5:da:1e:a0:52:9b:d6:73:8e:33:ae:57:1e:c7:
                    60:51:56:c4:1e:cb:81:b2:e9:3c:e0:26:7b:fe:03:
                    19:1f:a4:4c:d3:78:10:6e:b0:da:92:1a:cb:e1:75:
                    82:e0:ed:21:26:f4:64:61:5c:36:e9:fd:db:53:fd:
                    be:4f:65:28:d0:04:f8:64:3f:7f:fe:5b:72:e8:33:
                    06:8e:2e:46:d5:c9:3a:bc:aa:18:9d:e5:64:85:64:
                    70:ee:8f:30:fc:c0:7e:af:9b:b0:59:39:5f:b7:fc:
                    dc:2e:4a:6e:0c:22:40:02:46:88:f9:40:a7:64:07:
                    8a:31:cc:ba:e8:5d:8f:da:96:e3:6c:b5:20:6c:68:
                    63:1b:ed:1c:79:f0:f4:0f:b8:5c:d4:5c:78:04:8a:
                    c5:ca:cb:7b:ef:ea:54:a4:70:90:ea:54:1c:6d:88:
                    ff:92:95:0a:e4:6a:0b:39:62:92:04:65:e5:db:a1:
                    28:ec:43:0f:aa:18:cc:c4:43:d7:ca:29:9c:ec:f3:
                    b8:37:12:5d:22:1d:1a:f2:99:8a:23:0d:56:4e:4d:
                    a0:1d:43:c3:7f:a5:fb:32:34:e1:a2:c0:85:42:8f:
                    d5:85:6b:4b:6e:1d:13:4c:a5:b3:07:82:62:6a:6b:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:2E:A1:A4:49:E9:1E:3C:0A:01:E1:7A:1E:8F:11:3C:FB:7F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.crl

            X509v3 Authority Key Identifier:
                keyid:16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:90:aa:f1:b9:58:15:0c:64:e8:79:fb:4c:aa:76:35:2f:
         c8:94:25:ab:b0:37:6b:90:63:72:01:79:73:f2:50:40:4d:1e:
         67:e5:e7:12:ac:e2:26:a2:82:76:07:e7:cc:30:d1:28:27:2c:
         6d:ac:a7:82:4c:e2:80:8a:3a:9c:c3:b2:57:b0:07:f8:60:e2:
         a5:9c:b0:33:1a:2a:8c:d9:ab:bb:5f:9a:68:96:fd:0a:1e:c3:
         18:41:a9:80:40:dd:f1:67:fd:da:49:12:cc:e9:5d:06:e6:0a:
         15:f7:1b:b6:37:00:68:e3:03:48:f8:72:9c:44:52:14:b5:a5:
         e2:89:e6:0c:b2:fb:2d:b5:20:24:d1:e3:5b:b8:44:3d:18:de:
         8c:e5:4f:0b:9e:52:a2:d1:ed:7d:f4:9b:f8:c8:42:e3:1b:4c:
         17:79:28:d8:16:ef:0a:23:72:ed:71:ac:67:61:c6:1f:f3:ec:
         3f:37:c4:7e:cb:95:65:c7:5f:24:10:ed:fd:29:c9:98:d0:8d:
         a7:05:8a:b1:77:60:a1:ba:f0:9d:29:0f:32:74:51:23:cf:6d:
         fd:d4:c6:b8:79:02:5b:8d:1d:1c:75:57:84:cd:9d:35:03:cc:
         f6:d2:1c:4f:bc:0e:65:19:cb:8c:85:d1:92:0e:3c:62:73:ac:
         33:c3:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:07:42 2026 by rpki-client