Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
File:                     d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa (raw, json)
Hash identifier:          m2MBd94lz1Ak4L2dNmRBuNa9sc/1E4cWwpjgVA6iiUA=
Subject key identifier:   F0:A9:A7:39:BA:44:91:E5:E0:D7:98:5E:CF:BD:AD:87:17:29:12:34
Certificate issuer:       /CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Certificate serial:       010D0C9F4328584EB2B1BE4F6324889D86153500
Authority key identifier: 0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     133199
IP address blocks:        23.155.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:be:4f:63:24:88:9d:86:15:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=dc09432f-3c6c-4f5a-b1e6-800aac4101a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:12:e3:0e:39:52:0d:77:eb:c1:8d:ab:11:c7:
                    97:1a:59:65:af:15:73:8e:8b:be:1e:d8:19:0f:4f:
                    33:59:58:43:e3:b1:9f:66:28:33:82:a4:57:dd:8e:
                    c2:58:c6:b1:50:6b:c6:2f:79:bb:d2:1a:cf:9a:f2:
                    10:1a:16:cc:ea:9f:dd:6a:20:82:12:1f:32:c7:4d:
                    57:29:bb:fd:d9:50:ef:d4:02:42:b2:e9:b1:af:9a:
                    6b:bd:93:92:4f:a4:4d:a1:89:ec:03:fc:9a:04:36:
                    f9:ca:83:fe:27:2f:b2:78:1f:de:68:97:f8:b3:db:
                    29:13:16:1a:c5:49:41:c7:60:92:1d:9b:7d:5d:76:
                    70:4c:62:93:44:f2:47:e2:32:f7:ad:dd:b5:5a:f7:
                    88:72:28:fe:2b:fb:7f:dc:15:ca:c6:da:df:88:e6:
                    a7:8c:fa:8f:f7:4d:73:cb:65:56:35:b6:0d:6d:69:
                    1b:4e:68:a1:d1:8c:8a:13:b4:8b:c6:47:4c:b6:d2:
                    af:c3:2e:40:41:b2:b9:4e:af:b9:3b:6f:9f:dd:f2:
                    57:ef:aa:6e:21:ed:b8:11:70:ae:5c:a0:fd:f5:f8:
                    69:3e:76:cb:aa:c1:32:34:4a:0a:97:e7:03:f8:25:
                    83:ba:83:0a:5b:c5:68:82:15:30:6c:e5:3e:0c:56:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A9:A7:39:BA:44:91:E5:E0:D7:98:5E:CF:BD:AD:87:17:29:12:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl

            X509v3 Authority Key Identifier:
                keyid:0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:f6:1f:42:e6:41:45:19:89:8f:4c:62:3a:d8:db:a1:34:
         e6:a8:5f:7f:86:f1:af:85:86:65:39:97:34:7b:ac:c1:a9:e8:
         cd:59:c8:81:2d:14:40:f6:53:60:fa:a3:2e:51:66:11:73:42:
         43:b4:64:28:6e:31:ab:76:55:b7:33:d4:85:88:32:f4:8f:ae:
         75:e8:52:dc:ab:9d:d5:8b:b3:ce:3a:a6:37:a3:90:e1:be:2d:
         70:59:b2:28:78:79:a0:a0:c2:4e:d9:bc:bd:ea:bf:ab:8e:0f:
         10:6b:06:a1:8f:f9:ce:21:75:7b:83:68:3f:18:97:fc:d3:80:
         3f:3a:5a:be:4b:93:7d:fb:c9:2a:37:08:26:fc:e1:c5:27:b8:
         66:6d:d1:0f:9e:09:f7:d5:d7:59:62:76:f1:b1:89:ff:fc:56:
         cb:87:45:79:7c:ce:5b:0c:41:ae:f2:e6:6c:d8:ca:2c:09:b4:
         32:23:5b:2a:28:a3:14:32:04:d2:96:7c:cb:c4:b0:30:22:db:
         ab:8e:74:40:35:b6:6a:ac:43:a6:2f:30:1d:56:02:ee:b3:72:
         3b:8f:8a:0e:48:0b:16:68:7a:99:39:f0:ad:91:10:29:8e:01:
         6a:69:a2:eb:28:65:96:45:fe:37:1f:0e:9d:ef:3b:a3:95:9b:
         66:35:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:15:50 2026 by rpki-client