Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/c487afe1-579f-3f90-86cf-bd88f53ebfb8.roa
File:                     c487afe1-579f-3f90-86cf-bd88f53ebfb8.roa (raw, json)
Hash identifier:          S+7sRVs4BEmiCO8W61fqkp17sP0on81Oa7c7ieBFd3M=
Subject key identifier:   72:C5:92:26:62:9F:19:A5:1C:3A:C4:8F:72:95:55:65:B1:84:E3:B3
Certificate issuer:       /CN=17ba49ac-37d6-4b90-b973-bee8a685e116
Certificate serial:       010D0C9F4328584E6F3A2FD9987FADDD5B7D3000
Authority key identifier: 24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/c487afe1-579f-3f90-86cf-bd88f53ebfb8.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     26187
IP address blocks:        23.147.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2f:d9:98:7f:ad:dd:5b:7d:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ba49ac-37d6-4b90-b973-bee8a685e116
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=bbea581c-d1f9-4b18-af51-d8df32702a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:99:33:49:78:52:68:9d:45:7f:a1:33:43:
                    5e:29:ab:a5:96:16:f7:ee:23:7d:db:14:2a:e1:7c:
                    92:f0:01:6d:39:53:3b:e4:af:a9:ec:c5:58:a7:25:
                    1f:48:29:79:5f:8e:e7:92:3f:d4:15:42:2c:58:a4:
                    23:5d:51:2a:d5:a1:1b:c2:61:96:c1:cb:0f:7c:7b:
                    05:de:70:1b:08:08:07:8f:9a:3e:30:5b:9b:ca:39:
                    3d:fd:3f:e7:aa:f9:bf:9b:3a:16:ec:dd:30:5e:35:
                    63:5d:4f:ce:f0:f5:d1:6a:96:7e:9b:aa:5d:b4:8d:
                    05:0d:4a:49:e7:e0:b2:8e:62:d3:8c:eb:9f:9e:9e:
                    97:3a:a2:c4:bf:d1:31:6e:7d:fc:04:50:d5:f0:7d:
                    0f:bb:ed:f9:7e:3f:cc:c6:72:e2:ad:b5:9d:6e:48:
                    cf:d0:f6:2e:cf:55:cd:39:ce:0b:47:eb:a5:0f:b0:
                    bc:03:5e:9c:a2:58:6d:db:ef:0e:f6:13:68:bd:1e:
                    8e:2a:56:77:12:d4:74:1a:3b:aa:c2:a2:74:db:a3:
                    76:4e:68:64:1b:c0:81:da:19:d6:f7:3e:a2:47:16:
                    d6:ee:ed:65:86:44:83:ae:f2:d3:f1:25:62:40:aa:
                    4c:02:75:4e:66:a5:5b:01:52:b2:32:6c:f6:16:10:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:92:26:62:9F:19:A5:1C:3A:C4:8F:72:95:55:65:B1:84:E3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/c487afe1-579f-3f90-86cf-bd88f53ebfb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:00:31:1b:0d:73:14:32:be:d7:5e:51:99:f5:a8:90:ee:ea:
         10:1a:a1:cd:e1:73:a7:d6:8a:85:f2:32:0b:07:22:fb:9a:01:
         7f:00:ad:32:e0:52:0f:c6:51:04:3b:73:d6:43:b2:67:a2:fe:
         00:47:08:16:59:e1:a5:28:98:bd:e9:f8:d6:b3:e1:52:9b:f2:
         c1:6b:68:2f:3f:02:e6:bf:51:fd:0e:aa:0d:97:5e:7a:6a:55:
         a4:15:03:de:b8:96:89:e5:c3:ae:66:7c:25:f4:bb:d7:64:74:
         39:91:0a:61:fe:43:84:e2:e5:6a:43:19:3e:ca:58:67:2d:7d:
         52:95:e8:70:b4:00:59:28:a3:1b:f0:c5:6f:36:66:01:01:3d:
         9a:ee:80:99:2b:cf:ce:de:e0:34:90:12:33:c5:22:c6:f4:2a:
         47:32:3d:c9:bd:cf:7d:fa:1c:60:fe:78:ad:da:30:e0:bd:5c:
         f2:f5:79:90:29:04:be:dd:da:30:24:c8:b4:4e:64:fd:02:e5:
         28:55:3a:5f:d3:81:6b:f5:a1:f1:bf:bb:16:c7:2b:49:15:f1:
         80:d6:3c:20:0d:35:a6:e0:cf:e1:ad:0a:b6:1f:9e:43:44:ad:
         68:51:29:76:79:b8:3d:4a:cb:70:f9:9e:ba:82:3f:0d:d0:5b:
         69:f9:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:47 2026 by rpki-client