Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/d80747d8-996b-3001-a7b6-ff5d773c0798.roa
File:                     d80747d8-996b-3001-a7b6-ff5d773c0798.roa (raw, json)
Hash identifier:          qWga+vTU32legfbZ+4h5Sa7d7zX91sLEDss71WCYiTo=
Subject key identifier:   38:CD:57:ED:E7:E7:40:D8:23:AF:90:12:9B:33:C2:93:F3:16:6C:86
Certificate issuer:       /CN=2c0e066c-a2ca-4abc-83a9-75511150e8be
Certificate serial:       010D0C9F4328584E2F0459B347FD6BB05CF3EF80
Authority key identifier: 19:F3:CC:33:72:58:6E:12:69:EA:77:AF:9A:23:B2:D7:40:A9:B5:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/d80747d8-996b-3001-a7b6-ff5d773c0798.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     401990
IP address blocks:        23.147.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/2c0e066c-a2ca-4abc-83a9-75511150e8be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/2c0e066c-a2ca-4abc-83a9-75511150e8be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:59:b3:47:fd:6b:b0:5c:f3:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c0e066c-a2ca-4abc-83a9-75511150e8be
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=6d6a6dfc-1ce0-413d-80a3-38c4076a9ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:73:ed:db:e1:8a:45:fd:26:6b:53:4f:dd:71:
                    f3:7f:8a:a1:d0:eb:da:d7:05:ed:3c:41:75:a1:36:
                    78:e9:37:e2:08:10:ec:63:0f:9d:19:34:c2:64:ff:
                    18:8c:d5:0b:84:40:7c:8d:68:e9:14:f5:09:85:77:
                    55:22:57:a3:67:2b:91:88:31:80:ff:89:6e:f9:74:
                    32:10:5f:d3:f4:73:87:b4:d8:e2:7b:12:01:f5:f4:
                    42:82:26:40:46:a6:b5:cb:34:66:d2:59:35:67:d0:
                    f2:c7:06:31:23:87:f1:c0:a5:7e:27:f0:02:f9:c7:
                    cf:33:34:0c:96:00:ed:1e:e6:83:9a:d6:73:c0:9f:
                    2b:2a:c6:9d:b0:4b:f4:38:02:96:f1:71:c7:1f:de:
                    50:f3:27:8a:dd:aa:87:82:fe:80:e8:c9:17:07:e5:
                    4c:c3:12:80:64:35:c8:aa:fb:ef:ec:ae:3c:6b:7d:
                    e0:e1:11:ae:b2:07:9e:73:c3:0b:53:8f:03:3f:cc:
                    a7:d1:dd:bc:ae:93:36:a2:f0:05:cb:8d:bb:c4:d4:
                    ed:c8:fc:ab:74:d4:ff:97:ea:96:e7:e8:95:6f:98:
                    79:02:be:e7:d8:22:c6:cc:87:b2:ac:d1:cf:83:2d:
                    7b:16:f7:b5:98:91:9c:f0:09:42:3f:ad:1b:66:89:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CD:57:ED:E7:E7:40:D8:23:AF:90:12:9B:33:C2:93:F3:16:6C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/d80747d8-996b-3001-a7b6-ff5d773c0798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/2c0e066c-a2ca-4abc-83a9-75511150e8be.crl

            X509v3 Authority Key Identifier:
                keyid:19:F3:CC:33:72:58:6E:12:69:EA:77:AF:9A:23:B2:D7:40:A9:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:30:d9:79:5d:f8:4c:8c:e1:e1:19:8e:e3:db:a5:b1:5c:
         bc:61:a1:c2:ae:a6:8d:77:11:1b:78:54:28:14:86:2f:64:98:
         cb:83:61:0d:8e:27:6c:d3:c9:e5:a2:ab:ba:d1:f0:34:7e:50:
         bc:88:4e:32:20:44:72:f3:22:51:64:62:8c:4d:1a:54:16:e6:
         02:3a:08:72:bd:cc:07:71:35:5f:6b:7e:ef:9c:bc:77:9d:cd:
         3a:62:c2:76:b2:03:42:61:20:2a:a5:e5:66:76:29:94:0a:07:
         9b:75:5e:4d:76:0a:8f:2f:78:90:a2:53:6d:d0:bf:53:a8:fd:
         54:f3:4e:35:0c:66:ca:5c:97:01:ff:90:67:cd:33:5f:c9:0b:
         ab:1e:99:7d:3e:c0:d8:03:e9:f3:81:2f:72:41:71:da:26:50:
         37:56:a6:4c:0c:65:44:af:ab:91:be:2c:32:37:b6:b5:6d:90:
         07:72:3f:a1:35:8a:49:63:a4:c2:44:4a:3b:05:14:5b:c7:da:
         79:28:38:f5:47:c3:6d:6b:a1:86:6d:93:25:f9:77:a6:54:43:
         9f:b1:2f:3f:40:fc:d4:df:22:97:9c:ab:7d:b0:6b:e9:dd:ec:
         d6:1d:a5:67:ff:14:3a:9e:70:45:37:14:92:81:df:4b:f9:c6:
         8a:89:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:52:13 2026 by rpki-client