Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/2711f2d9-ad9e-398d-b1d1-71bf53798c32.roa
File:                     2711f2d9-ad9e-398d-b1d1-71bf53798c32.roa (raw, json)
Hash identifier:          cMKq3z3M/iXFIrgS9GOYstGNhBW5X/VHDVUWw4VKtyg=
Subject key identifier:   87:FF:6A:34:95:E0:27:23:74:11:A7:05:68:BA:A3:A0:C4:99:FC:2D
Certificate issuer:       /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial:       010D0C9F4328584E5A49F48F70771D74C55391E0
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/2711f2d9-ad9e-398d-b1d1-71bf53798c32.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     394814
IP address blocks:        23.163.80.0/24 maxlen: 24
                          23.167.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f4:8f:70:77:1d:74:c5:53:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=438f6859-b877-4aa0-9990-6a01006d4230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:9c:bb:0c:5c:60:f3:0a:0f:f2:25:c6:00:
                    27:84:c3:76:68:7b:01:68:1f:dc:f3:1c:71:a1:22:
                    86:c9:13:5e:a8:8f:f7:e6:ed:f4:3d:d1:03:a6:bf:
                    31:f8:8e:04:dc:9c:f8:1f:62:5f:c9:5b:17:3a:92:
                    98:28:a0:bf:d8:61:e3:59:57:ee:5d:79:35:bb:9d:
                    b7:96:1e:d3:4c:cb:ff:97:ec:31:fb:1a:c3:56:bc:
                    1f:94:7e:b6:7f:59:41:ad:79:d2:f9:6f:af:2c:93:
                    7b:54:09:22:b7:b3:0d:27:23:e1:2f:83:12:70:71:
                    30:e3:99:e6:26:d0:23:59:ec:22:24:06:d2:7e:82:
                    77:1f:0a:46:9d:c6:4c:f5:c6:45:e0:d4:0a:f7:be:
                    02:15:40:f6:35:f2:ef:1f:70:64:8e:16:8c:4f:3e:
                    ef:3b:77:71:ed:e9:b1:6a:a6:64:7f:50:86:f5:13:
                    d5:38:46:1c:da:11:6d:e5:c5:70:4e:d2:85:d3:bc:
                    46:d7:2c:e8:fa:7a:8c:a3:8c:8f:23:39:6c:1a:41:
                    97:98:17:59:74:6b:14:f1:0a:eb:f7:da:de:b4:89:
                    a0:75:3d:72:28:a2:07:d6:55:f3:f7:9c:11:b5:1d:
                    66:4d:a0:a7:db:4a:89:1f:04:af:e8:74:02:0e:51:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FF:6A:34:95:E0:27:23:74:11:A7:05:68:BA:A3:A0:C4:99:FC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/2711f2d9-ad9e-398d-b1d1-71bf53798c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl

            X509v3 Authority Key Identifier:
                keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.80.0/24
                  23.167.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:e3:33:c0:09:76:81:c6:1d:33:8c:d5:aa:0d:c5:24:06:
         ac:a9:91:d4:cb:27:f7:1c:46:2b:f0:73:86:6e:a6:90:e8:db:
         72:bf:e7:57:c1:f6:34:f2:64:6b:21:75:26:78:36:09:0b:16:
         36:5e:b3:f6:e2:7e:d2:7d:3d:5b:29:86:d4:94:9f:9e:3f:42:
         2f:f0:cf:97:5e:ac:5a:6d:e4:7a:44:33:de:f8:af:f0:33:68:
         a1:c6:68:46:94:be:ec:b3:1a:99:2a:c7:12:c6:30:3e:6d:62:
         87:e5:32:4c:2a:de:57:8e:9a:54:10:e6:be:bd:f2:6f:b9:ed:
         66:52:1f:70:01:09:68:8c:eb:e1:1c:3a:c3:17:c7:84:fe:d4:
         1d:24:a7:de:21:91:02:4d:53:23:90:aa:93:da:1f:43:99:67:
         46:12:14:fb:f6:02:51:9c:50:dc:da:3f:f5:05:d0:b9:83:37:
         05:d8:4f:7c:0f:d2:5d:7f:4e:4d:58:71:63:45:c8:39:02:30:
         2d:42:5f:c0:74:2c:a7:66:7b:b0:52:4e:24:a6:b5:bc:06:5a:
         1c:2d:56:e7:6a:27:60:96:b9:6f:88:68:0a:2f:0e:2d:8a:44:
         41:d3:f8:a3:7d:51:54:1c:b0:a4:c0:02:4c:35:09:80:7f:2e:
         64:f4:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:26:24 2026 by rpki-client