Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/1d85b45a-d4bb-38c6-a985-99e19acaaf55.roa
File:                     1d85b45a-d4bb-38c6-a985-99e19acaaf55.roa (raw, json)
Hash identifier:          cS2+JSWX/RpGT5SZdrq014rdeyPCJlvH1hui7yUD3Ow=
Subject key identifier:   3A:A3:13:B0:BF:EC:B9:54:BC:B9:64:C4:2E:50:4B:B3:CB:4C:1B:96
Certificate issuer:       /CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
Certificate serial:       010D0C9F4328584EB84742E4918DF8E31F50A200
Authority key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/1d85b45a-d4bb-38c6-a985-99e19acaaf55.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     33083
IP address blocks:        23.129.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:42:e4:91:8d:f8:e3:1f:50:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=269c5d9b-816a-4870-938b-a5f3f9e2b5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:0e:fc:c1:78:d6:1d:65:e3:59:d5:1b:27:
                    44:e4:f1:4f:a4:63:5f:1f:f8:73:f2:69:48:04:37:
                    c7:2e:60:64:77:b8:27:ea:1f:74:18:7e:dd:49:3d:
                    1f:a6:4c:cf:36:1b:b3:43:eb:04:d1:58:4a:bb:55:
                    25:ee:9b:9c:d6:71:75:3d:0e:24:b1:3a:57:d0:88:
                    a3:a6:22:97:87:6e:ac:47:94:54:0e:9b:87:6c:b1:
                    85:a0:0f:62:f6:2a:ce:b1:97:41:ae:29:35:8d:3e:
                    3f:30:48:e7:ac:0a:a5:12:ae:26:64:2a:15:4e:2d:
                    af:ac:d6:0e:66:d0:e2:87:88:06:05:88:a4:9c:9c:
                    49:f4:0a:79:4c:df:07:fb:c4:79:30:52:27:bc:52:
                    8a:65:91:68:61:03:09:ec:f7:56:b8:fc:90:7e:38:
                    82:c5:e8:2f:54:79:ea:7a:80:56:90:97:2c:99:73:
                    fb:85:10:58:88:24:c5:c2:51:fb:24:e4:42:d7:36:
                    e7:52:dd:0f:44:30:cc:21:81:03:2b:d9:6e:2c:ed:
                    f8:70:c5:8b:f3:34:1a:98:7e:f5:05:1c:f8:48:f7:
                    16:b3:25:8f:43:a6:bb:d5:11:87:04:d2:a2:cd:59:
                    cd:a5:d0:2a:a3:b5:19:bb:ed:4a:fc:26:b1:3e:86:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A3:13:B0:BF:EC:B9:54:BC:B9:64:C4:2E:50:4B:B3:CB:4C:1B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/1d85b45a-d4bb-38c6-a985-99e19acaaf55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl

            X509v3 Authority Key Identifier:
                keyid:B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4e:54:1c:ab:69:2b:4d:58:6f:21:23:0d:80:4c:2a:a8:ec:
         bc:75:57:62:a0:7c:85:91:db:9d:bb:20:37:1d:31:a4:98:a6:
         99:d4:4d:cb:20:ca:9d:b4:cf:be:7a:ba:8f:7c:27:be:3c:1a:
         c7:75:e0:33:2b:25:be:3f:9d:04:a3:ce:08:9d:97:28:07:7b:
         23:72:eb:63:49:7d:cb:4b:d5:24:1d:13:70:29:18:5f:4a:e1:
         8a:9f:60:37:7d:a4:34:79:37:43:cb:d0:63:a4:4d:9a:30:f5:
         9f:9b:91:4f:61:4e:f1:59:e2:44:c8:16:30:01:1d:a1:ac:7d:
         ed:a0:f3:51:83:3b:2b:3f:46:b0:e2:82:7d:e5:7b:f0:fa:0d:
         90:44:87:9f:cf:70:9f:d2:e5:40:d1:39:77:05:68:9c:4a:46:
         d7:e0:83:a1:38:bc:48:52:33:0a:6c:34:ec:48:d7:11:ac:d4:
         31:f2:9a:3f:99:87:8d:a0:0c:cf:fd:e7:cc:b5:ce:b3:0b:a6:
         c2:f4:58:fb:d1:1d:5e:8f:75:f8:c9:bc:5f:1e:0f:74:7f:f2:
         7e:ef:8c:ce:2c:1d:33:18:8e:b8:3a:b3:fa:68:2a:ab:15:0a:
         18:ac:ca:c0:44:73:ef:66:d1:73:36:c4:80:da:97:45:60:6a:
         3d:ed:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:17:41 2026 by rpki-client