Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa
File:                     993932e0-9297-34e0-88e7-491c5545bdc4.roa (raw, json)
Hash identifier:          4Gm6Vl61o3q69LkxAS73M9Y0F9zFnX5OGY34uhFM67g=
Subject key identifier:   C1:99:B6:85:17:86:31:70:D9:B9:94:60:B2:AE:FD:D3:DA:3A:E8:6A
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F4328584EA798CAD58E6B93070CAA0CE0
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     51082
IP address blocks:        23.177.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:ca:d5:8e:6b:93:07:0c:aa:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2448fd42-7655-4313-92a9-0fe66d8d0bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:38:cf:53:14:d3:30:2c:99:34:79:f6:9e:6a:
                    66:68:3e:6b:ac:f2:02:f7:d2:1c:3b:41:4b:56:00:
                    90:4b:b5:99:67:73:14:0b:d3:5e:f2:d3:1d:37:3e:
                    12:2d:53:ad:a5:0b:60:eb:f6:79:3e:fc:9f:77:52:
                    6a:8d:23:67:b7:83:6d:d9:66:5a:47:4c:df:f1:e8:
                    a4:7f:9b:f9:a3:08:f3:3a:71:5e:6d:f3:19:3f:4b:
                    ff:80:b4:d1:5a:79:26:c4:08:62:aa:3e:d0:71:3d:
                    98:61:f4:26:d6:da:0b:81:b0:36:4b:17:cd:2c:f4:
                    c3:46:d7:60:36:0e:0b:fb:f7:33:cf:db:04:33:18:
                    79:8f:a4:00:25:1b:c7:5f:a4:e0:52:eb:ee:e1:dd:
                    0a:57:2a:80:70:3a:ff:ea:04:98:4c:86:2b:35:01:
                    1b:d3:a8:5d:5c:f6:f4:95:9b:b4:63:fc:2d:f2:bb:
                    77:b5:ef:ad:e4:42:51:ce:3b:9d:83:b5:77:06:3a:
                    5e:ee:12:a6:4b:75:79:9d:5e:d4:15:1b:b9:12:19:
                    93:4e:be:09:46:a2:90:15:e7:2e:c6:8c:57:a6:89:
                    8c:27:a1:4d:e6:a9:8a:01:32:bb:49:25:42:0d:a7:
                    33:34:94:e7:ed:b7:d3:ad:f6:37:24:cc:2e:a0:fc:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:99:B6:85:17:86:31:70:D9:B9:94:60:B2:AE:FD:D3:DA:3A:E8:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/993932e0-9297-34e0-88e7-491c5545bdc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:28:5c:cf:02:41:95:c1:37:0b:03:db:25:c5:04:30:3b:9e:
         1d:8f:a2:83:f9:43:8d:19:9a:8f:7a:45:28:37:43:b1:29:2c:
         a8:69:30:4a:de:5d:3c:f7:16:93:24:2a:3b:5c:45:2d:cb:01:
         fd:31:34:d7:36:45:74:ab:23:3e:c1:73:62:38:98:22:c2:68:
         59:ec:5b:c8:c2:b8:75:b9:d4:66:51:4c:e3:d0:e9:9a:c9:74:
         96:c7:07:42:6e:50:65:08:b1:57:7d:9f:8f:e8:6f:6e:d5:6e:
         c0:21:90:3f:21:c4:a9:b2:e1:42:23:2c:a4:1f:8c:43:dd:40:
         c4:44:d5:cf:d9:9e:7c:5c:58:64:67:f8:5b:1a:db:68:b5:6f:
         75:b0:b4:66:2a:8e:c9:65:94:05:f8:61:45:a5:71:5b:89:b3:
         97:b2:99:7c:dd:78:c4:4a:a2:98:10:cb:5e:b0:c4:9f:77:fa:
         06:fd:d8:85:b5:26:80:d2:fa:dd:d8:ee:c3:5b:a9:c4:70:3a:
         f5:40:42:0f:9f:6f:2a:49:32:aa:cf:fc:41:69:d7:ba:bf:11:
         fd:63:d1:b6:50:12:20:0d:7b:2f:f4:49:66:4d:14:60:1f:df:
         90:0a:9b:04:c8:e2:db:5d:b8:6c:66:2a:5e:32:21:2d:79:3d:
         9f:a4:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:24 2026 by rpki-client