Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a6abe29-11e1-3e4e-8bfc-693196ec7ab4.roa
File:                     8a6abe29-11e1-3e4e-8bfc-693196ec7ab4.roa (raw, json)
Hash identifier:          NTDAk59oAJgU1c+ZR9DaInPB5cFPoCZQsz1T06Ej2DI=
Subject key identifier:   D1:8A:A3:61:C9:91:36:39:AB:D4:13:00:52:2F:95:57:1B:9A:4E:4A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E5A49FECB6D5FBD546B767D40
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a6abe29-11e1-3e4e-8bfc-693196ec7ab4.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     4229
IP address blocks:        23.91.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:fe:cb:6d:5f:bd:54:6b:76:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=8390dcf6-79dc-40cc-a89d-8f1acdf136a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:4b:e1:9c:b3:e7:d3:b2:f5:11:f8:64:8e:
                    ca:8e:53:49:68:d5:83:54:c2:54:19:2f:1e:64:f1:
                    b8:62:09:28:b7:2b:bc:71:4c:94:90:0b:5c:6c:34:
                    d0:49:56:22:34:1c:cb:6b:33:09:b0:b4:46:4e:58:
                    79:a3:01:31:52:6f:69:8d:03:95:ab:67:7e:b9:43:
                    df:ee:fd:51:86:57:d4:db:72:03:85:5a:89:86:e0:
                    72:33:47:15:4d:d5:77:75:21:ae:94:04:28:f9:b8:
                    b5:34:eb:ba:57:23:16:09:31:a3:87:3f:7c:5c:33:
                    af:da:70:02:66:e8:c9:63:90:9a:41:62:c6:f2:b7:
                    55:95:64:e4:67:4c:13:4a:7c:05:3b:8a:95:c3:d6:
                    7a:86:e2:ee:c5:63:d0:36:34:31:e9:ab:10:f9:0c:
                    82:58:d0:93:0c:7f:1b:0b:4a:89:da:d6:0a:39:7c:
                    71:b7:3c:78:ac:52:ea:96:61:96:00:30:7c:bf:8f:
                    eb:48:79:91:72:a5:29:f9:b2:3a:4e:ef:22:c8:21:
                    99:b7:b6:aa:ff:78:5b:25:96:b2:c2:f4:2d:78:9e:
                    c4:b5:a0:58:8c:b2:6d:c4:f9:13:ab:05:22:cd:61:
                    25:37:75:73:82:a6:87:06:df:ea:70:5f:16:6d:e0:
                    ed:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:A3:61:C9:91:36:39:AB:D4:13:00:52:2F:95:57:1B:9A:4E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a6abe29-11e1-3e4e-8bfc-693196ec7ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:47:32:9e:2c:52:0d:3c:d6:ac:a7:a1:94:71:a2:8d:a7:f8:
         b0:0c:09:62:48:c7:5f:d0:b2:c1:c2:e0:d4:0c:e5:17:d4:b0:
         07:e2:fe:e0:31:9e:f0:0e:ae:fc:ad:a5:07:a9:ed:2a:e3:fa:
         fa:de:19:9b:af:e9:6b:4d:54:70:ab:e7:a7:ca:17:88:b4:57:
         e6:67:85:ad:7e:b4:ab:de:36:c4:ae:61:7e:94:3e:3c:15:42:
         19:0f:92:83:13:a5:a6:02:42:31:f8:9c:17:30:8a:ee:d8:cd:
         c3:45:b5:44:a3:c0:6e:ae:d9:81:0c:7b:79:dc:73:0b:10:3d:
         53:c0:4f:f4:7a:72:2c:f6:2d:49:a3:f6:33:e2:fe:aa:61:e8:
         02:bf:03:92:9a:7a:e6:e3:aa:b5:59:5b:23:4a:91:08:e1:a3:
         63:53:00:d4:7c:c2:ab:52:c1:63:5d:e3:05:50:40:a5:e4:d7:
         a2:85:27:72:92:86:b8:be:af:c5:b4:95:ad:09:88:10:69:45:
         20:c2:1c:e2:57:a4:77:22:e0:3a:a7:e3:44:7b:a0:88:33:3a:
         93:b8:04:8f:15:32:c6:c3:e0:38:91:19:ca:d5:6d:e9:c2:cc:
         02:33:bb:46:83:e3:00:41:72:7a:82:26:1b:c2:e1:2d:61:a3:
         08:34:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:57:04 2026 by rpki-client