Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa
File:                     ef971431-27a3-3019-93d7-a6c64c0587d1.roa (raw, json)
Hash identifier:          Gy6HIPyi3pqxhijzMzFnWJRXYZ2bH4DA2BuQz99Y3UY=
Subject key identifier:   CC:7D:E5:25:85:A2:D4:2B:B7:EF:3D:38:B5:05:4A:9F:90:1E:D2:AD
Certificate issuer:       /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial:       010D0C9F4328584EA7973B61CA77BE352C0C4400
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397325
IP address blocks:        23.29.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:3b:61:ca:77:be:35:2c:0c:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2c1d5c23-4a2a-4ccf-bedf-9f6a8fb4843e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7c:e5:10:7d:d6:d1:4f:d2:a8:8c:9b:15:58:
                    a6:f6:7d:28:7e:86:f7:0a:86:f2:7b:8a:bf:d5:0b:
                    76:2e:8a:6a:73:01:6a:b5:a0:d2:07:54:f4:65:d6:
                    9a:36:88:14:b9:bd:0f:c8:57:71:92:f5:a0:94:17:
                    ef:49:58:bc:8a:0b:ae:43:68:55:a1:98:88:f4:87:
                    34:0f:35:85:0b:b8:54:e3:2a:e5:ea:9a:05:42:ee:
                    ab:cd:db:07:24:c5:4f:c2:7d:da:f7:d5:de:79:18:
                    6b:ef:2c:6d:eb:89:c4:8c:a2:e3:71:f2:6d:4e:a4:
                    81:fc:9c:f5:6a:3a:95:39:41:73:77:a0:02:cd:32:
                    2f:17:96:a9:96:e0:26:9e:94:fd:b9:a2:fb:da:ef:
                    be:e4:c4:66:2d:2d:c1:66:ec:b4:e2:50:24:0a:f6:
                    f3:ef:0f:ef:14:7c:23:01:6a:e4:31:a4:70:e8:76:
                    43:9b:ad:c1:be:50:06:06:81:94:d0:1f:39:18:f8:
                    dd:b6:5e:fe:cc:95:4a:b8:c3:c3:9c:42:a7:78:bd:
                    17:97:35:20:cb:cf:73:76:5a:95:2e:bc:52:17:94:
                    3a:c1:c1:fd:1d:51:63:3c:f7:4c:37:55:fa:54:d8:
                    1e:56:35:64:9b:7d:68:f0:d1:d4:6a:3b:cf:9e:a7:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7D:E5:25:85:A2:D4:2B:B7:EF:3D:38:B5:05:4A:9F:90:1E:D2:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl

            X509v3 Authority Key Identifier:
                keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:0e:6a:0d:bc:51:ed:7c:8f:46:c3:83:f6:4c:23:12:6e:
         f9:bd:4a:14:a5:74:51:11:13:6e:db:a3:be:e3:1c:58:3e:e6:
         c9:b9:28:71:41:65:a4:2f:df:29:4d:39:cd:68:71:f9:85:60:
         aa:9b:40:d4:ca:ba:b5:de:f6:a1:24:51:a0:cb:fa:45:de:a6:
         42:c9:e6:23:6c:55:df:4b:15:a8:4a:67:df:c6:0d:75:80:95:
         f1:48:f2:af:da:aa:c7:dd:1e:8e:9c:da:46:91:87:f0:da:19:
         f6:b1:d2:71:ad:e5:58:a0:31:36:19:1f:c1:c0:89:6b:3f:67:
         8e:82:2c:19:89:e1:9f:ad:a7:44:7e:bc:98:c6:dc:13:7d:7b:
         69:97:5f:99:ec:e5:9a:f1:bf:05:d9:d1:9b:42:04:01:82:3e:
         3b:2b:09:1c:9b:84:16:ee:7d:43:cd:ec:fb:c3:01:2c:4a:75:
         35:5d:05:51:f9:1c:9e:4e:53:53:35:f6:e9:eb:d3:08:61:ac:
         6f:90:da:84:a4:76:33:1f:be:13:a7:70:5d:b3:88:d1:9c:48:
         2b:a9:aa:39:9d:fe:8c:c5:60:cc:53:d8:e1:d5:cb:91:9b:03:
         0b:35:bc:94:22:1a:30:0a:00:92:73:da:d1:26:ca:51:25:25:
         8b:b1:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:31 2026 by rpki-client