Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa
File:                     13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa (raw, json)
Hash identifier:          Nd4CJw0XSQBgCkHnWMfuEHsdkw4r5G+efUFj4ig6kYw=
Subject key identifier:   C3:D6:01:85:67:18:69:EB:D3:DC:5E:85:F2:48:2D:DC:E6:4D:85:8D
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584EAFE6EEF272E60F47B64B7F80
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     53388
IP address blocks:        23.128.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:ee:f2:72:e6:0f:47:b6:4b:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=0a993349-70b9-448a-87a1-8186b3ff98e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:8b:20:b7:38:cc:60:9a:4e:82:bb:91:ca:
                    92:be:3d:09:31:1f:91:8e:3a:bc:96:52:46:71:5e:
                    06:2d:35:31:eb:60:2d:4d:a3:7a:ee:d0:f1:7d:cb:
                    6a:dc:6e:d9:b2:3a:e9:3c:71:65:46:75:ac:08:21:
                    5d:06:3f:15:1f:36:d2:20:20:d9:f7:8a:5c:f1:26:
                    39:3b:b5:6a:0f:89:75:69:56:49:3b:a2:5d:f7:b8:
                    ff:ee:c3:77:99:18:96:a8:3c:e7:9c:bf:08:b2:1b:
                    0e:4e:23:35:70:7a:8b:51:80:f6:16:85:39:fa:79:
                    63:5c:13:c3:fe:a1:0e:4a:78:b4:aa:f4:08:c2:55:
                    00:52:5f:13:79:1c:97:16:17:5e:e5:c2:58:a0:79:
                    cc:78:fe:c1:fe:1b:66:fc:e5:0f:b7:5b:9d:3f:aa:
                    1e:fc:94:68:b1:2f:d2:ce:82:18:af:33:2f:ab:e0:
                    4d:b9:1f:88:a0:c0:aa:d0:cd:b3:78:5c:39:db:b7:
                    f9:1f:ab:40:cd:9e:fa:0b:bd:0e:cc:60:0a:ec:a3:
                    77:a7:9a:e7:7c:86:b1:e4:5a:40:44:77:3f:e1:b5:
                    c9:fb:9c:44:61:8c:b9:9c:d6:f3:3b:c4:37:5e:8f:
                    11:03:b7:14:c7:8e:d3:da:2e:b5:70:41:1b:64:94:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D6:01:85:67:18:69:EB:D3:DC:5E:85:F2:48:2D:DC:E6:4D:85:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:df:1b:c6:d7:b9:45:ba:0c:30:f6:d4:2e:a9:44:f5:07:
         e3:86:5e:9e:1f:69:d1:81:8d:f7:17:72:6f:ef:98:d6:01:25:
         fb:f9:5c:1c:1f:15:2b:80:13:56:21:c0:f8:88:f4:e9:4c:e5:
         52:92:7c:bb:f0:98:2d:ce:8d:eb:19:3b:c7:3d:cd:cf:e8:63:
         d3:c4:30:52:c1:48:26:92:73:4e:b0:42:1a:85:7c:86:7d:c8:
         95:92:f5:7b:d7:81:40:b2:08:20:bb:59:a8:e4:54:a2:52:a5:
         38:ea:d9:e5:f8:63:c6:b0:84:60:4f:b3:1d:fa:07:b6:a7:85:
         2e:a5:48:26:34:5f:8a:08:46:6e:44:46:30:3f:d3:cf:0e:b5:
         e2:62:34:96:98:34:7a:71:c0:e9:aa:ea:05:c7:66:7d:4b:53:
         84:41:f0:4a:bf:db:bd:77:26:8a:31:62:a9:c4:46:39:cf:c0:
         20:62:30:87:b7:c0:36:61:62:2b:3c:e0:87:fe:89:b7:72:df:
         50:a8:6d:55:ab:b0:8a:7f:8f:f3:b3:71:d8:3f:e1:8b:7c:5d:
         df:17:c8:55:5c:11:47:cc:15:14:fc:b5:51:6e:89:23:a9:c0:
         7b:02:61:80:98:96:73:f7:17:7d:52:f2:2a:b4:cd:8b:94:b3:
         00:09:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:42:02 2026 by rpki-client