Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
File:                     fda8929c-8853-3deb-9937-6ac2a4d97c46.roa (raw, json)
Hash identifier:          GFgeWGnMedXa4SZVvC1IJt/2ay1o15kvY0oS7MRS0TU=
Subject key identifier:   77:E0:53:DB:66:CF:18:58:54:7C:40:FD:7C:64:86:61:CB:3A:A3:43
Certificate issuer:       /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
Certificate serial:       010D0C9F4328584DADAADC04C0C9097801552300
Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     198487
IP address blocks:        23.156.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:dc:04:c0:c9:09:78:01:55:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=f19849b6-6e7c-4b3c-8c88-41bc561fbfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:6d:4b:4c:c3:1a:d3:06:b3:07:60:a8:e2:
                    8f:52:40:7a:c6:91:7e:dd:36:05:3b:3d:bc:34:f4:
                    04:1b:6d:69:de:01:b6:8c:ae:73:ae:a5:25:01:7c:
                    fe:4e:bf:14:8a:11:79:54:c6:91:83:5a:e6:c0:81:
                    dd:9b:de:a5:54:fc:c5:3b:f1:a6:21:18:a7:ea:a8:
                    7c:e4:c4:1d:c8:1f:5e:06:fa:c8:bb:56:35:6d:ce:
                    35:49:da:2d:e0:52:02:e7:ec:0a:97:41:21:c8:fe:
                    3c:f8:9b:14:f3:f2:5b:2c:d9:39:9e:93:f9:72:cb:
                    62:f7:56:73:1c:d3:64:41:44:db:a2:fb:51:3b:ce:
                    03:c1:4c:e9:63:a8:dd:b9:da:11:3a:37:5f:76:34:
                    d8:3b:dd:78:0b:8d:6a:5d:d6:ae:16:25:6e:e4:f7:
                    65:c1:cc:9b:74:78:73:73:bc:23:15:54:92:f6:da:
                    d0:db:02:16:35:17:75:c9:31:56:87:51:d6:3c:6a:
                    24:05:59:31:89:32:20:e4:50:32:ee:32:27:81:2f:
                    c5:43:38:d9:f4:25:f5:71:85:5a:02:5b:9b:36:8d:
                    36:72:e1:2b:f7:35:6f:83:f4:cb:10:44:d0:1d:c0:
                    2a:6d:2d:6c:94:83:9a:e0:13:47:66:c4:12:51:94:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E0:53:DB:66:CF:18:58:54:7C:40:FD:7C:64:86:61:CB:3A:A3:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl

            X509v3 Authority Key Identifier:
                keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:37:8f:a9:04:42:8c:19:41:64:2f:22:fe:fa:22:17:6e:c8:
         de:28:2a:62:f4:d2:f6:94:f4:6f:d0:c4:0d:4a:af:09:24:1c:
         f8:88:3c:03:e6:7f:8d:ab:78:ff:32:df:da:1d:56:b6:43:b0:
         e5:70:84:f5:3f:c6:78:d3:41:cd:8f:7c:5b:1d:1f:ad:a1:74:
         bd:d2:47:2a:51:8a:b9:f1:cc:ee:9c:4a:f2:cb:eb:17:38:71:
         e2:d1:86:97:ff:6d:8d:3d:23:c0:e1:11:a2:ac:62:fd:17:86:
         d0:8e:6b:80:06:ff:05:5a:ce:39:85:6e:33:16:f2:a2:9f:dc:
         9b:5d:7d:75:f8:18:b0:85:a0:b9:71:b1:47:20:cf:6d:d4:16:
         93:49:a6:ad:80:9b:06:42:20:a0:18:f0:ca:18:57:8c:bb:7f:
         e7:7e:59:fe:d3:d4:3f:9c:98:7a:1a:27:f0:aa:09:50:53:cd:
         19:08:f9:4d:05:f1:5b:7a:54:f6:96:4a:c2:2b:46:31:01:ae:
         db:d9:a6:f7:fb:5c:19:7d:b3:f7:80:8a:1e:64:4e:93:ba:db:
         94:44:d4:bb:a2:8f:ff:57:ca:83:08:e0:b3:8d:4c:08:0f:a6:
         d6:4d:9a:12:97:9e:7d:b4:19:1e:0f:3c:07:25:01:ac:80:de:
         74:4b:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:15:03 2026 by rpki-client