Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/881196dc-2e6a-30f3-84ec-1e33f5ef8847.roa
File:                     881196dc-2e6a-30f3-84ec-1e33f5ef8847.roa (raw, json)
Hash identifier:          UcD2WBK0nIZep8eKjjxjZjduhh/9yxWFE6p9DD4dkrQ=
Subject key identifier:   2D:1A:FC:50:93:53:65:7D:72:4E:64:E0:AB:71:02:FA:CF:84:D1:8B
Certificate issuer:       /CN=440eb756-8dc2-423e-8aa8-850483061961
Certificate serial:       010D0C9F4328584E9C57B5A14C4F9E202C424200
Authority key identifier: 98:DE:E0:6B:BD:0C:34:A0:1B:EC:CC:5A:92:3B:75:31:00:0D:45:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/881196dc-2e6a-30f3-84ec-1e33f5ef8847.roa
Signing time:             Sat 25 Jul 2026 00:51:20 +0000
ROA not before:           Sat 25 Jul 2026 00:51:20 +0000
ROA not after:            Fri 23 Oct 2026 00:51:20 +0000
asID:                     16276
IP address blocks:        23.136.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9c:57:b5:a1:4c:4f:9e:20:2c:42:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440eb756-8dc2-423e-8aa8-850483061961
        Validity
            Not Before: Jul 25 00:51:20 2026 GMT
            Not After : Oct 23 00:51:20 2026 GMT
        Subject: CN=08c32c85-6df8-4a03-b406-5066fd5b131d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:62:16:47:74:43:7e:51:6f:2f:51:29:b7:
                    f4:09:70:8b:bc:3e:24:05:aa:39:07:44:97:96:57:
                    c1:cb:7f:aa:ea:3c:f5:d1:8c:0d:36:ef:c8:7c:1b:
                    b5:67:58:d2:3c:fc:ad:d4:04:2a:90:31:99:25:42:
                    17:cd:af:31:1b:f2:bc:f9:bf:d1:f6:63:29:46:e5:
                    67:4d:cf:dc:da:d9:7c:6b:23:26:0a:de:5b:16:ec:
                    9b:c4:cd:ab:d6:ee:e0:ed:74:dd:10:96:f8:e7:fb:
                    8a:e5:8d:9f:9d:41:7b:1d:d0:55:92:28:3c:ac:7d:
                    ef:6e:91:96:09:f5:e9:fa:5d:fd:18:bb:06:62:53:
                    df:5b:6a:9e:ac:c6:cd:50:93:82:a8:d7:6d:d6:c9:
                    aa:ba:41:56:b4:44:e4:42:21:a0:0b:d0:49:cd:c2:
                    68:e4:a8:04:a1:a8:37:d9:c0:15:3c:c7:c9:d7:c3:
                    a8:7c:8f:18:1d:9e:10:c0:d7:4c:f2:e1:e0:1c:b1:
                    0e:b7:5a:34:ce:04:5e:cc:50:ac:fc:13:d9:63:63:
                    a9:72:92:80:22:fd:0e:4f:cc:8c:5f:12:61:e3:46:
                    19:82:69:a7:39:16:0d:e2:47:d2:a1:70:a1:f5:47:
                    6c:1e:e6:42:2e:fb:20:fb:d0:32:3b:94:b6:8d:05:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1A:FC:50:93:53:65:7D:72:4E:64:E0:AB:71:02:FA:CF:84:D1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/881196dc-2e6a-30f3-84ec-1e33f5ef8847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.crl

            X509v3 Authority Key Identifier:
                keyid:98:DE:E0:6B:BD:0C:34:A0:1B:EC:CC:5A:92:3B:75:31:00:0D:45:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:ea:00:1c:2b:81:f7:b6:c3:0a:d2:bd:d1:ad:62:25:94:
         c8:c8:73:1d:60:49:79:15:f0:bb:bf:41:45:db:02:33:7d:78:
         bf:c2:f5:4a:70:e0:3e:19:00:90:a1:2a:b8:44:f1:e7:e3:43:
         36:60:71:7d:cd:1c:7f:90:df:e4:75:3a:fa:94:84:09:38:8e:
         56:82:dc:49:5d:46:e9:45:69:3e:cc:9f:fc:09:27:34:02:fd:
         ef:35:b2:8f:ba:b8:53:91:31:1f:14:36:81:a7:49:6c:25:8c:
         c9:30:fe:d6:80:8c:10:a0:a1:65:d7:6e:97:9c:06:9d:9f:d7:
         5f:51:76:7b:07:28:07:db:a9:f0:17:ac:63:2f:e1:03:90:f2:
         5e:be:41:38:7b:09:d8:dd:f4:2a:c9:75:ae:10:a4:b0:3c:66:
         f6:8c:28:f1:3a:8f:90:6d:e7:4d:a3:36:c4:13:db:02:50:77:
         95:36:df:f7:b3:9e:0d:e4:86:56:e5:ed:b9:d2:26:a3:90:95:
         55:1b:c3:ab:01:d4:90:0d:36:7e:4f:cf:3d:7a:9c:c6:2b:ea:
         63:29:9b:95:f9:fe:bb:ea:24:4d:c3:33:7b:cf:4b:21:5a:e9:
         07:c7:de:ae:2b:b2:bc:61:b7:3e:2f:94:8e:9d:51:97:7b:b4:
         1c:52:94:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 09:31:08 2026 by rpki-client