Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa
File:                     fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa (raw, json)
Hash identifier:          VyCjuIvZBWu4Zi+5QrH+E7cdhIcUwJW0ioICt6WKzcU=
Subject key identifier:   1E:42:ED:B8:CA:EA:E3:46:F8:19:F4:09:F5:24:D6:B0:CE:30:9D:04
Certificate issuer:       /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e
Certificate serial:       010D0C9F4328584EA7880A2B38FA0989F7A96400
Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54316
IP address blocks:        23.175.208.0/22 maxlen: 24
                          2602:fcad::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0a:2b:38:fa:09:89:f7:a9:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4956b72f-dcb5-4217-a51c-4611231a2fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fb:23:2a:f4:25:09:2f:4a:36:c2:9e:23:e5:
                    21:69:55:27:58:39:ca:04:a1:41:00:b7:3a:f6:bd:
                    47:78:4a:88:10:9b:36:68:ae:40:1f:29:9f:0d:88:
                    41:b3:b3:fb:20:b4:31:ab:15:08:51:c2:75:7d:4b:
                    81:50:e9:fb:d0:6b:3f:c4:69:6d:93:b6:f7:6a:88:
                    43:92:7b:6e:30:8c:ee:ef:de:19:98:de:f9:bd:d8:
                    9d:21:5d:9a:f9:7e:bf:30:d6:ae:64:0b:0a:a9:99:
                    49:dc:b6:58:b0:0a:3e:1f:42:de:3d:49:e8:16:56:
                    7f:df:49:27:c2:7a:98:73:d1:88:fe:ed:4d:4a:33:
                    97:70:f2:f3:3c:ae:e2:0d:68:6f:36:88:d0:16:8d:
                    2e:1e:02:a9:bf:f1:44:ba:25:51:aa:97:7c:09:ee:
                    ce:6b:8b:c8:5e:da:dd:41:e7:dd:df:18:6f:fe:e4:
                    3b:34:a6:52:54:07:2d:b9:2e:36:d0:a4:73:65:ed:
                    54:d2:24:cc:dd:08:45:ad:73:8b:ae:e2:6f:1d:56:
                    e7:c3:9f:1a:af:15:48:06:bd:32:e2:2a:74:e3:b3:
                    37:1c:ec:2d:0a:6a:5f:52:d9:2c:32:fd:0f:46:b8:
                    ab:02:c0:92:0f:f7:7d:94:50:7b:1e:f4:96:a4:29:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:42:ED:B8:CA:EA:E3:46:F8:19:F4:09:F5:24:D6:B0:CE:30:9D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl

            X509v3 Authority Key Identifier:
                keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.208.0/22
                IPv6:
                  2602:fcad::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:d6:5e:9d:f7:9e:0d:59:03:f6:ca:70:d3:13:a1:aa:17:
         22:37:f2:dd:1f:cf:9e:a6:70:da:47:92:80:c5:e5:4c:1d:1b:
         ca:10:92:ae:29:48:d4:81:39:50:e0:e6:2e:4a:36:7a:df:1d:
         f4:51:5c:b4:71:0f:d7:66:52:91:1c:ef:dc:8a:f2:d7:cc:ef:
         44:50:c2:0e:c1:90:e6:0c:e3:ac:08:62:6c:48:8f:0a:e8:96:
         df:e4:2e:88:16:a1:4c:ac:8e:bd:8c:ad:06:1e:2e:99:de:c0:
         68:bf:b0:bd:35:72:7c:48:ea:d0:5d:4d:9f:bf:62:2c:fc:f4:
         4f:67:38:ed:fb:2d:96:dd:fe:07:c3:d8:56:c9:4a:b1:4f:bc:
         ac:46:e0:a9:3b:c4:e1:43:f1:c8:87:2a:a3:c5:15:a4:af:07:
         91:69:4e:1d:93:14:df:99:09:f7:e5:7f:60:94:a9:3e:fa:bc:
         20:68:2a:ba:fc:69:4b:c4:20:54:fb:d6:fe:7f:ad:1c:97:e5:
         44:1f:b0:41:8b:7b:1e:f9:67:0a:9d:9b:6a:a6:da:26:24:31:
         fa:b7:c6:dc:72:a6:2f:d3:5d:2f:a3:a3:9f:ad:48:fc:65:32:
         16:ee:29:0a:6b:e9:06:eb:d2:0e:08:34:9d:f1:8b:9e:3d:77:
         2d:c8:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:03:24 2026 by rpki-client