Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
File:                     7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa (raw, json)
Hash identifier:          gJ4Pew+C8LV8gjxcoO6gLOH5L/duSq5k+S2VcPlZSWA=
Subject key identifier:   04:1C:4A:24:C5:FA:AA:FF:68:43:DD:00:91:51:AA:F6:67:83:9A:4A
Certificate issuer:       /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
Certificate serial:       010D0C9F4328584EDC91EF2B790A9C42F03B1A90
Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     398898
IP address blocks:        23.168.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ef:2b:79:0a:9c:42:f0:3b:1a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=d582d00d-2a19-4b05-9234-6cb7af495a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:41:5f:0c:e8:37:87:c3:d8:bd:38:e6:81:
                    4f:a6:bd:2f:1c:e3:51:f1:b0:11:40:e1:d3:f7:90:
                    b9:29:78:6e:b7:ed:f5:43:fd:7e:e0:ac:b3:3e:ba:
                    f6:af:89:05:ff:9d:76:d1:8f:3e:be:3d:4b:6e:26:
                    3d:99:10:92:b5:98:25:07:e8:b7:41:20:4e:80:46:
                    69:d4:3b:4c:70:ff:b6:ee:6b:96:ac:ba:fb:25:25:
                    45:d6:0f:b6:d3:d5:33:58:c3:34:3d:fa:68:31:e7:
                    d5:a9:c1:ba:41:5d:98:65:d9:21:c4:db:2c:d9:92:
                    99:2a:61:b6:08:62:a1:81:07:9b:57:c0:ac:1e:ea:
                    e3:53:5e:5c:48:84:f7:24:e0:f7:5f:54:93:5c:79:
                    c9:28:71:9b:86:93:cf:3c:a8:f0:e6:fc:50:f8:cf:
                    88:fa:ef:92:1d:5b:94:4a:81:a1:25:2e:2e:70:bc:
                    94:e5:e8:01:61:ef:3d:46:4b:8a:ee:0d:fc:64:2b:
                    b8:4c:00:4d:0f:5a:fe:62:30:cf:b8:4f:75:ba:76:
                    b4:a4:c2:22:62:61:fc:b9:cd:6e:04:71:a4:34:9e:
                    b8:54:b5:84:10:1e:fe:65:4a:8f:67:ba:d2:eb:25:
                    46:b9:92:b2:d6:fa:3b:f2:37:63:77:3c:83:e0:f2:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1C:4A:24:C5:FA:AA:FF:68:43:DD:00:91:51:AA:F6:67:83:9A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl

            X509v3 Authority Key Identifier:
                keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:cd:bd:38:8d:44:37:4c:48:f4:28:a7:ad:d1:45:79:14:7f:
         79:59:9e:d7:3c:af:66:ae:46:76:05:23:74:4c:a8:22:9a:7e:
         d3:7a:94:b8:f3:d5:4b:69:26:3d:ba:92:e4:bc:7b:a7:df:a1:
         97:be:fb:9d:5d:87:0f:bf:f0:87:3f:23:50:bd:c0:be:ff:ed:
         a3:05:e6:dd:3a:dc:ff:6d:5f:72:eb:c7:1b:ab:37:9f:66:65:
         07:7a:46:1b:d0:d9:00:71:ae:bd:40:73:cf:71:fd:20:a3:67:
         cd:51:bd:62:63:da:c0:69:ed:5b:f8:e7:d9:9d:88:01:4a:37:
         0b:d3:46:5f:cb:25:09:ed:71:8e:b6:95:6e:57:38:11:66:19:
         0b:6e:17:f5:ac:da:25:f6:55:4f:a0:d3:dd:f5:db:69:07:35:
         52:78:77:18:44:84:e8:44:bc:6e:2b:1c:31:ff:92:d2:a3:94:
         bf:c1:5c:72:d3:1c:e6:f4:57:31:88:d8:7c:2c:2c:59:68:35:
         a2:49:fe:be:eb:69:28:bf:0f:bd:58:44:41:ef:ff:38:b8:3d:
         0d:f1:ef:32:0a:2c:7a:77:74:ad:b6:4c:d3:49:26:3e:4d:27:
         b3:08:26:0d:a8:7d:c1:01:76:a4:9d:a8:a4:fb:45:d4:e2:c3:
         7e:78:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 04:25:17 2026 by rpki-client