Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/579b0fa2-ecd4-32e2-9c07-7a9853744660.roa
File:                     579b0fa2-ecd4-32e2-9c07-7a9853744660.roa (raw, json)
Hash identifier:          7eFjvLAHh21myMhr1RFGbzPGtTtTGcvMShxeGaDMew8=
Subject key identifier:   AA:C7:87:A7:10:66:66:87:36:06:A1:11:DD:9A:CB:70:E7:32:3E:67
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584EE4F1F508BC24F9211BFFB080
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/579b0fa2-ecd4-32e2-9c07-7a9853744660.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     401776
IP address blocks:        23.185.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f5:08:bc:24:f9:21:1b:ff:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=db4d057e-d4df-4993-b2d0-99bf237e4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:5d:08:c6:bd:bc:13:be:58:02:08:47:a2:
                    65:86:6a:f7:48:26:de:8d:cf:bf:52:11:d0:1e:4f:
                    b9:fc:dc:2d:a1:98:ea:39:77:33:fe:65:0f:3e:cf:
                    0b:61:f1:4e:1d:a2:5f:0a:e5:0c:98:19:74:d5:67:
                    fd:82:6b:93:8a:67:a5:50:3a:87:d2:a3:b7:58:02:
                    1c:7f:a6:7e:be:7d:82:86:a1:ee:09:b6:8a:0b:bd:
                    c0:bf:dc:6b:1a:8e:f3:54:30:4a:eb:57:16:b0:82:
                    0f:86:6f:df:7f:e4:8a:c3:e1:06:c2:28:90:f0:65:
                    e4:21:c1:11:c5:43:b7:f5:ed:e4:a0:d1:c4:36:ef:
                    11:ca:59:4a:a9:af:33:4b:2a:76:24:0c:e4:0f:33:
                    4a:80:5e:1a:11:ff:7b:0c:de:bc:42:c9:08:19:12:
                    81:72:24:b2:01:63:8c:9b:0f:25:7c:aa:78:f8:b6:
                    fd:fd:8b:ee:b3:b3:67:52:30:a1:02:d5:a2:1d:1d:
                    05:ef:48:e9:13:51:0a:97:ce:e1:8f:1a:43:7f:a6:
                    8e:95:96:11:ab:a5:69:4d:1b:46:96:1c:62:09:d8:
                    ce:ca:99:9f:2c:e9:81:0d:3e:c0:d0:5c:11:e7:58:
                    29:2a:58:bd:84:a0:88:f3:73:7f:d3:89:12:0d:a6:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C7:87:A7:10:66:66:87:36:06:A1:11:DD:9A:CB:70:E7:32:3E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/579b0fa2-ecd4-32e2-9c07-7a9853744660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:3e:23:39:6d:89:4a:7e:f3:b2:a3:d5:82:03:7d:9e:50:
         45:a1:83:ce:9d:fd:a0:3b:a5:17:0b:42:a9:d2:80:39:5a:9f:
         66:36:fc:9e:f7:74:85:10:21:b2:ae:7f:9c:c5:42:e8:49:d6:
         35:83:a9:77:74:26:6b:35:9d:24:f7:9b:8f:45:dc:bf:16:e4:
         4d:25:f6:ba:24:60:b5:ba:7d:83:08:6c:8e:3d:e4:69:1d:37:
         e6:c8:05:08:aa:aa:9a:8a:01:e9:9a:6e:a0:12:6a:4c:45:44:
         c9:d1:9b:a4:c3:d6:c2:43:2f:46:ee:47:b5:26:4b:0c:87:d1:
         91:ea:67:ca:30:bf:a7:b0:80:49:81:7d:11:d5:16:2e:de:a1:
         55:50:66:f6:a2:f0:1f:af:0d:83:17:3b:be:5a:50:b0:e1:bb:
         bb:a9:5d:ab:31:3a:40:ea:59:9c:bb:bb:0a:91:dd:53:8e:8d:
         af:41:99:60:dc:11:37:e9:08:03:96:6c:08:05:e3:be:76:4b:
         31:02:55:4b:42:69:07:d2:f8:5e:e8:78:07:1a:11:ec:b7:19:
         ed:e0:b8:d7:d8:74:3d:bb:bc:15:d0:41:4e:c8:82:36:a8:75:
         45:ae:60:44:8a:6f:a0:77:f9:87:72:e7:8f:62:55:c6:d1:28:
         61:44:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:49 2026 by rpki-client