Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/0149ce6a-e754-3f3f-92f8-243abc1b6ea6.roa
File:                     0149ce6a-e754-3f3f-92f8-243abc1b6ea6.roa (raw, json)
Hash identifier:          qJCOC0GHUSWdlCvAnXkPgPgAN6gRDIn9UAXJDzQHNWQ=
Subject key identifier:   4F:11:93:BD:0E:C9:79:1E:F2:67:5B:55:6E:2D:F7:78:7D:8A:B4:BC
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584E4559DB13721BC2CA9707E880
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/0149ce6a-e754-3f3f-92f8-243abc1b6ea6.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     39618
IP address blocks:        23.160.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:db:13:72:1b:c2:ca:97:07:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=a8796035-83bc-4cf2-a98a-40b75f200d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:e4:87:d6:b1:80:c6:03:a4:d3:64:9a:d7:
                    59:90:d8:df:08:a6:a1:74:92:8a:24:65:23:89:ac:
                    e6:6d:83:09:f1:8f:8e:21:4e:41:98:b6:28:c7:43:
                    70:76:13:a5:73:7b:47:f6:f3:9d:7f:81:af:f4:a2:
                    b3:ac:3f:77:21:15:c1:7e:bc:ea:10:62:00:35:3e:
                    e2:cc:ae:4f:6c:cc:b8:2b:e6:1e:10:97:4d:db:9c:
                    9f:78:3a:47:a2:9f:11:7c:2d:55:67:56:15:a6:03:
                    63:24:7d:83:ae:e3:57:b0:db:00:54:d1:1c:89:71:
                    2b:fd:7e:ce:e1:12:ab:10:21:ad:28:b4:9c:97:3a:
                    da:8e:12:7b:12:6f:ab:e2:27:f3:fa:12:80:33:d0:
                    86:a5:22:53:3d:d6:6c:7f:55:f1:1f:6d:da:ef:ac:
                    fb:f8:af:e6:7b:3a:6b:b2:10:3f:a8:fc:36:a2:08:
                    c4:1d:76:d7:d4:7b:71:2c:ae:0b:97:d3:b9:71:6f:
                    aa:18:48:16:6b:55:bc:dd:c6:77:8d:27:bc:e8:f9:
                    b1:af:c5:ce:b8:d6:82:2c:a4:b5:8d:aa:8f:54:d4:
                    0f:a5:b9:b0:6f:cb:80:70:68:8d:88:68:b2:e9:e1:
                    62:3e:75:98:43:08:e9:36:60:e9:3f:2e:44:52:7d:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:93:BD:0E:C9:79:1E:F2:67:5B:55:6E:2D:F7:78:7D:8A:B4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/0149ce6a-e754-3f3f-92f8-243abc1b6ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:33:5d:75:13:c6:09:46:6c:62:f7:54:a8:7b:51:00:9d:43:
         c4:d2:b4:96:bf:22:af:3c:4b:95:f0:9a:36:a5:9c:c3:cf:94:
         5c:5a:76:31:bb:0e:95:2f:6a:ae:8f:25:19:93:ad:bd:e1:03:
         d7:9f:16:38:43:72:f8:d3:52:78:0b:a6:8c:31:cb:4a:fa:b4:
         35:ef:e8:47:fa:c1:cc:43:27:6b:b3:5a:46:e8:ef:15:12:29:
         54:ff:7a:5f:8f:35:54:80:2d:e6:bf:da:da:a9:e2:1d:ea:a7:
         bd:c8:82:26:da:19:05:07:f7:52:41:6c:a1:89:36:7d:0d:33:
         b6:9c:26:d0:55:8d:d5:46:86:c1:ac:d4:00:ef:41:0c:10:3c:
         30:d0:45:c2:92:c2:a3:d5:d5:bd:ae:87:5b:79:7d:60:5b:27:
         d6:21:2f:15:4f:06:68:fd:95:42:64:23:22:bf:38:ad:53:4c:
         2e:6b:fc:68:7e:c7:3b:72:8f:d8:b8:0c:89:6c:54:ad:59:7e:
         6a:2a:08:d1:b4:9b:c3:4b:f6:23:75:fe:46:95:94:a9:a3:e8:
         fe:8a:86:7a:aa:be:d5:7e:d7:2b:14:51:6e:1c:d8:c5:0e:29:
         5a:c7:b0:36:65:1a:c2:5f:bd:cf:d9:c7:1a:49:5d:78:02:6b:
         4b:55:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:32:28 2026 by rpki-client