Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa
File:                     d16055ca-dc7f-3352-833b-ee9a136e1952.roa (raw, json)
Hash identifier:          naojYKFdDFUD90g2Rsgh4Hed0QFx0UHo2bNhKLT8Nnc=
Subject key identifier:   29:29:59:05:FB:73:2D:F3:25:D4:04:17:44:25:8C:89:37:C5:22:44
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584EA78775B253144FF218B75100
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23347
IP address blocks:        23.156.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:75:b2:53:14:4f:f2:18:b7:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=61570f6a-d200-4d90-b89a-db08a79b0445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:df:c3:1f:32:2b:27:2b:cd:ee:e7:35:b7:
                    79:ca:44:fc:a8:b2:c5:21:fd:c6:da:7c:09:22:5d:
                    da:cf:9e:3e:6e:f7:a7:64:42:25:4a:53:a3:40:80:
                    bb:b4:d7:d1:d4:ac:bc:ab:93:27:65:cf:0e:bf:68:
                    56:b4:6d:8c:35:18:48:80:08:58:a5:32:96:ba:85:
                    82:2c:e7:e5:49:f4:d1:b7:c8:a9:95:00:a7:9a:96:
                    d8:95:00:a0:3c:ae:f3:fc:d2:f1:a1:55:5a:13:3c:
                    db:eb:ce:3b:28:4e:46:7d:8f:0a:9b:dc:fe:45:19:
                    fe:22:23:93:5f:b3:c8:a2:a3:ad:ff:59:d0:9b:04:
                    02:f3:ee:41:51:ef:22:db:0f:e9:57:97:a5:ab:72:
                    d1:38:2f:ec:19:f9:8a:09:48:5b:8a:d9:e2:a5:79:
                    9d:71:da:2d:01:5a:67:e5:c5:60:71:62:86:6c:d9:
                    24:3a:ff:13:c6:6b:23:c8:f3:7b:e0:a0:7d:10:58:
                    41:6b:39:e8:27:68:07:ee:f6:7b:7e:3c:3a:5c:40:
                    51:89:f1:06:84:a2:3c:5a:71:59:54:e3:8f:0e:4b:
                    9c:9f:2b:d4:9c:2b:21:98:3f:54:8d:b9:c4:3d:88:
                    62:27:8e:be:a1:da:c5:44:37:56:d5:15:1c:ff:31:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:29:59:05:FB:73:2D:F3:25:D4:04:17:44:25:8C:89:37:C5:22:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:70:3a:6e:c2:13:17:09:8d:70:22:88:b2:3e:cb:de:56:
         64:3f:14:56:a3:f8:fa:17:04:5f:a2:f5:7f:43:d7:d5:94:71:
         85:1c:69:c7:29:8f:4c:23:8f:7f:8b:58:81:d2:83:32:83:4b:
         2a:71:45:0e:db:0d:b8:95:29:05:a0:21:7f:35:a2:f7:b1:df:
         3d:7b:24:49:d3:56:f7:fc:93:68:09:bc:2d:20:0f:7c:89:21:
         be:6b:a7:bf:6d:e3:ce:11:0d:b8:22:7a:81:36:f5:12:27:40:
         a4:2a:1f:ee:76:25:b3:75:8a:9e:5e:f8:9d:30:4a:d5:c1:65:
         c5:48:b7:15:bc:fa:db:2d:96:1d:12:3a:98:9e:05:66:0c:e9:
         8d:84:ab:48:ea:d5:5f:5a:71:aa:d2:43:2c:f6:94:b5:06:52:
         9b:d1:eb:5e:6c:1d:2e:ea:d4:0a:f2:68:39:2e:47:50:ad:df:
         6e:26:7a:a2:2e:dc:1b:f0:e2:c0:6a:c4:50:35:a0:0d:f1:a0:
         62:2b:b4:cc:0a:5e:c9:eb:4b:b4:39:f6:97:ee:4a:02:0a:b1:
         df:9a:1b:8b:34:77:f7:a1:e5:30:0d:6b:a7:78:e1:81:ab:e7:
         3a:05:9d:78:72:2f:ba:99:bd:f7:18:d8:6b:20:37:04:1e:04:
         6c:da:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 01:28:47 2026 by rpki-client