Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa
File:                     13072588-b7e6-3051-b847-ffe2d33c2302.roa (raw, json)
Hash identifier:          tvXPJOGASpKcY13LuoLA6U5o0ycjTjR6KrNx+LIreek=
Subject key identifier:   A0:11:60:5B:23:85:02:6A:72:82:8B:E9:2C:0D:3A:87:A5:8F:20:3F
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584EA7900C2054A9859184FD4B80
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        23.131.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:0c:20:54:a9:85:91:84:fd:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d096a3a8-a60a-4f7f-8b6e-5cc6058ec695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:10:86:76:30:0d:67:52:f4:95:62:8f:c8:
                    4c:47:00:d2:86:d9:3e:be:71:ea:34:4b:e0:98:77:
                    39:c1:db:4d:93:41:7b:ae:ea:45:97:9c:82:1c:27:
                    0e:c6:ff:ae:c3:52:e1:d8:20:71:38:6f:e4:f3:63:
                    81:f3:89:87:14:cf:2a:1a:90:ad:1c:3c:d9:98:17:
                    20:24:d5:f6:7d:fe:09:26:cc:4b:4b:8b:50:d9:45:
                    76:c0:62:b7:0e:eb:32:dc:fa:c2:08:4b:42:2f:36:
                    e3:de:e5:32:19:00:23:a5:bc:e9:30:bb:3e:5e:79:
                    c6:48:3f:25:8d:68:fc:50:77:e5:57:1f:fa:ca:be:
                    4b:59:4d:54:12:75:5b:cf:38:4c:5b:9a:27:cc:f1:
                    bc:85:27:cd:c6:85:c2:1d:1a:83:36:1c:49:c5:08:
                    6d:bc:2b:18:f6:63:b1:a7:e7:83:a8:2e:8f:00:f6:
                    e0:c5:c9:88:ec:cc:1f:01:60:9f:cc:dd:dc:74:a2:
                    de:1a:e3:d0:62:5d:65:f4:c3:93:f0:a2:00:2f:6c:
                    61:62:61:8c:73:cb:89:69:32:09:e8:2f:9c:11:7e:
                    14:cb:60:60:7b:73:28:6a:ca:8f:90:84:20:1a:fe:
                    0e:fc:d7:43:ef:8d:db:c1:40:d0:40:cb:36:f2:91:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:11:60:5B:23:85:02:6A:72:82:8B:E9:2C:0D:3A:87:A5:8F:20:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c0:a1:5b:19:f9:41:c7:b2:29:39:a3:84:aa:6f:fa:4e:2e:
         7c:5a:8f:ac:ea:f8:df:9a:78:19:e3:54:83:b8:b6:09:29:0e:
         5a:b7:06:58:8e:b2:fa:64:76:f3:a6:13:7a:54:bc:ca:7f:29:
         1b:7f:f9:a7:48:52:5e:38:56:a1:36:35:b8:b5:9d:49:b1:6b:
         00:c0:ea:5d:2c:c5:23:d6:ab:12:f3:d8:d6:b0:e7:38:dd:9c:
         e4:f6:2e:26:2e:4a:57:bd:aa:b6:4a:48:57:f2:aa:bd:5b:85:
         b8:e0:c5:6d:40:4a:f8:a9:21:ef:00:1a:e7:86:ca:1e:94:20:
         0f:32:15:e4:ba:0f:81:bc:67:b9:4c:72:79:91:11:58:43:a8:
         6f:70:4d:08:9f:7a:c1:87:ec:e3:b3:5d:5c:c7:a8:92:94:ab:
         bf:fa:0e:f9:49:56:7f:9c:4f:a4:1a:36:83:90:84:2b:eb:47:
         71:42:f1:2e:60:9d:38:06:72:9a:66:0c:df:0d:9a:ca:30:d3:
         82:57:55:97:5d:d3:d9:08:19:7d:10:49:d0:5b:75:ff:b4:02:
         9d:de:42:17:4f:5d:bd:27:ae:a0:63:2f:65:3f:49:aa:ce:e6:
         d6:51:dc:d4:a8:d7:77:eb:7c:0e:eb:be:94:98:b8:62:2c:1e:
         7d:3a:da:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:35 2026 by rpki-client