Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa
File:                     d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (raw, json)
Hash identifier:          +h3LEkxZTIBdsWcjB1Hk5H5zfZYUI6i4PXeQC6bx3No=
Subject key identifier:   10:C2:87:7D:39:95:56:AC:EF:59:20:A9:AC:65:11:E2:50:4E:A6:A7
Certificate issuer:       /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial:       010D0C9F4328584E7E94F8C52DB77EA848CD9080
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     401369
IP address blocks:        23.187.152.0/24 maxlen: 24
                          2602:f82d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f8:c5:2d:b7:7e:a8:48:cd:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=f46210c6-07d1-4a2a-8f24-418adc949fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:8f:d8:0e:fc:41:b9:f3:47:08:e1:bd:ba:
                    e0:eb:a7:07:4c:8f:21:4b:45:c7:d4:45:9c:25:4f:
                    a5:68:8e:74:46:a6:1c:f7:56:0c:26:5e:61:e3:28:
                    07:32:e5:6a:f9:3e:04:36:0a:3f:7b:f8:5c:1d:17:
                    14:ab:dd:d2:14:98:36:76:c5:34:02:f3:5f:27:43:
                    41:b7:6b:fa:41:47:d9:d8:b2:58:72:ec:7d:25:a6:
                    b8:e7:72:0d:87:4a:0f:0d:ff:b6:bd:d4:a6:48:3a:
                    d3:2b:55:7c:2a:c2:a2:e1:ee:36:d2:4c:71:d8:c2:
                    aa:01:b0:8e:fd:95:df:d4:82:30:50:83:2c:69:39:
                    c0:47:15:0c:2c:bb:1c:68:32:76:a9:1d:64:96:a1:
                    7d:70:99:fb:ea:5a:b6:c7:91:2c:a6:a1:72:10:be:
                    7e:d4:35:7c:11:e1:39:5d:89:50:48:8f:e6:5a:5e:
                    b1:51:bf:80:f4:1b:d0:86:ad:14:30:1f:27:81:09:
                    fc:fa:6d:be:1d:1c:55:cf:11:9e:d6:78:90:d8:c1:
                    0c:77:95:4e:7c:8e:51:44:90:41:81:b2:c8:fd:78:
                    1a:11:36:8d:0c:8a:9e:c3:5f:ab:c0:6b:fb:f5:5d:
                    bf:e7:2b:b9:ed:a5:48:67:d3:99:ba:0a:92:29:5b:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C2:87:7D:39:95:56:AC:EF:59:20:A9:AC:65:11:E2:50:4E:A6:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.152.0/24
                IPv6:
                  2602:f82d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c3:0f:4b:7b:10:84:e2:7d:e1:15:25:6c:46:01:c1:5f:a1:
         0d:5f:07:28:c3:0a:ee:12:fd:69:c6:af:4f:05:ac:9c:c3:10:
         06:1e:e7:39:19:d6:1f:50:23:e3:74:c7:9b:60:ad:4c:ea:da:
         96:d6:8e:b7:ef:c9:35:b7:25:55:c5:74:dd:f9:c1:35:14:a4:
         c3:6f:9e:c1:d5:61:7b:40:2f:7a:7f:e6:2b:f2:a6:6b:a6:22:
         a3:f8:72:6a:81:79:dd:29:9f:3f:f9:58:ae:44:da:24:d4:e0:
         58:8c:20:a0:13:0f:c7:2a:b4:11:85:1e:64:92:ba:0a:84:ab:
         b0:34:fc:41:25:fe:b0:5a:fc:d1:4a:25:74:08:cb:4a:fb:80:
         31:fe:23:52:df:0f:10:c5:f8:61:65:63:46:98:2e:09:bf:31:
         04:a4:21:d0:9e:1e:3e:ae:50:72:ae:18:09:46:7e:47:f8:1f:
         82:f8:e0:6e:23:cf:f0:41:23:4f:07:3a:48:1c:49:56:01:79:
         b8:66:92:56:46:9e:d2:b6:73:18:44:33:cc:39:53:7a:ee:89:
         2d:10:b4:44:7e:66:41:ca:e3:84:61:31:74:f2:be:8f:f7:bd:
         12:b6:51:71:0f:94:e6:a5:84:e6:69:a0:78:cc:e3:c0:6f:b8:
         22:1a:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:30:06 2026 by rpki-client