Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
File:                     98ea8d1f-6d28-3754-8463-218ef6072d68.roa (raw, json)
Hash identifier:          0Z/IFipLs3jV9BP1ECTzxeOTaVAZuAJsna86nRFEqk4=
Subject key identifier:   A1:AC:74:48:7F:FB:2E:72:EA:D0:39:16:A2:DA:64:E5:C6:3C:F3:DB
Certificate issuer:       /CN=6205d76d-4f52-4364-a347-5456e5513fc3
Certificate serial:       010D0C9F4328584ED431F453EA7864A3E0FE1980
Authority key identifier: 51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     7029
IP address blocks:        23.189.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f4:53:ea:78:64:a3:e0:fe:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6205d76d-4f52-4364-a347-5456e5513fc3
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=6c1807a2-8adf-4541-9796-f5d8bfa1a775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:d0:72:0c:10:91:25:b0:63:a2:7f:24:ba:
                    fa:b2:82:bb:9b:82:be:76:96:b6:05:1b:aa:00:03:
                    77:66:6f:c5:98:fe:f9:6c:8a:e4:39:ec:27:69:07:
                    1d:d5:b3:ec:53:ab:77:88:9f:bb:d5:d5:73:fd:25:
                    92:00:68:1a:37:96:56:4a:f9:de:c5:3f:67:d3:64:
                    92:2a:eb:d2:92:28:c2:ad:55:97:57:58:a4:03:54:
                    39:02:87:bf:72:c0:ce:6d:47:9c:0f:c2:32:ae:c3:
                    10:e9:7c:9e:dd:f3:45:44:15:4a:84:60:ee:4e:b9:
                    51:bd:13:5d:38:0d:85:32:14:19:fc:8a:2c:5b:78:
                    77:dd:d9:70:21:19:8f:4d:3d:b4:97:fe:94:13:91:
                    ba:2b:21:28:16:c8:60:ce:b6:a0:dd:32:3b:98:1d:
                    e6:c4:f4:cc:e7:54:b3:53:82:4e:f8:4e:2d:eb:57:
                    3d:fb:0c:2f:2e:39:ba:8f:6a:40:e3:14:41:19:d6:
                    bd:11:63:ce:05:09:61:16:c7:51:d4:6e:f3:02:82:
                    d9:19:39:49:c5:f4:5d:e7:3f:4c:3b:8d:64:d8:91:
                    c9:22:30:61:04:e6:16:4d:33:a0:28:3e:ea:c2:a7:
                    59:9e:a1:c3:b4:71:2d:f9:40:8d:e0:7a:f3:47:09:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AC:74:48:7F:FB:2E:72:EA:D0:39:16:A2:DA:64:E5:C6:3C:F3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl

            X509v3 Authority Key Identifier:
                keyid:51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:e8:10:13:c1:67:71:60:af:81:5b:05:6f:e4:1d:93:49:
         7e:49:2d:5d:b2:4e:c2:12:14:28:6f:1b:b4:d7:07:ab:cc:dd:
         7e:2f:bc:60:08:75:3d:1b:dd:bf:45:51:15:66:fe:72:46:f7:
         19:d8:a1:cb:70:c4:44:80:08:b9:a6:90:42:e1:7b:90:61:1c:
         60:10:ae:f4:25:e3:82:0c:0c:cd:c5:5a:2f:42:ba:d1:ae:a3:
         91:ba:b3:85:3a:15:8a:6d:b3:d3:73:27:c2:21:dc:ca:76:56:
         89:bc:27:69:c9:59:f3:7f:6a:fc:6f:eb:1f:80:c6:33:5e:ba:
         59:ac:3e:e9:1a:6e:39:34:80:d8:a6:92:51:86:d5:e3:aa:c1:
         4f:cf:fa:d1:3b:6f:b0:f4:4f:f1:58:a0:8a:4c:7a:91:73:45:
         48:64:d3:4f:ef:9c:3e:df:d9:b2:4f:9e:25:d8:d2:b4:01:34:
         6e:65:06:21:cb:11:0e:2b:e8:4f:4b:71:eb:08:30:b2:f2:81:
         ad:3a:01:ad:ad:d8:ec:b5:ba:c4:ad:dd:8f:f2:d1:d8:ac:13:
         92:0e:72:70:01:15:70:b4:b6:63:59:20:86:cc:86:bb:d5:ed:
         de:1e:bb:e8:d9:ce:6c:d7:58:0b:ac:a3:5a:ee:35:80:b9:ca:
         4b:a0:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:42:49 2026 by rpki-client