Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/7f0dbfcb-669a-3795-8149-1180aa75ff87.roa
File:                     7f0dbfcb-669a-3795-8149-1180aa75ff87.roa (raw, json)
Hash identifier:          YTXlSobtRS8WnTeyqwLnZ7dC8iR9w+Byd7zrNTVx0W8=
Subject key identifier:   D7:F0:03:AC:9D:45:27:8D:EB:9D:A8:A2:C5:FC:89:3E:31:66:9A:75
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584EED5212C140ACCAFB22E5C5C0
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/7f0dbfcb-669a-3795-8149-1180aa75ff87.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     138415
IP address blocks:        23.226.48.0/20 maxlen: 32
                          23.235.160.0/19 maxlen: 32
                          23.248.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:12:c1:40:ac:ca:fb:22:e5:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=cbed9632-1eb8-406b-a822-f2499463e0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:dd:6d:55:99:d7:06:64:af:b6:c8:4b:5e:
                    66:56:1a:15:ab:24:56:4c:18:36:6d:af:be:b7:a7:
                    85:19:f0:16:91:c7:19:7e:a0:d2:b5:71:13:4e:7d:
                    c7:29:db:33:20:8f:4d:32:e1:43:d7:58:6a:5e:a7:
                    98:43:0b:1c:f7:93:17:bd:2e:9b:c6:c9:2e:dc:b9:
                    2a:c2:d3:86:ce:7d:0b:24:8e:0a:3e:6d:2d:79:dd:
                    8b:e4:2d:ca:b9:30:4f:eb:4f:af:e5:fd:eb:d0:32:
                    3b:05:0c:6f:69:f8:3e:ec:2f:3d:54:88:e9:b1:37:
                    b1:4b:ea:00:7b:b4:9e:87:f2:2c:e9:19:82:ac:24:
                    b1:13:2a:67:2a:b7:4c:94:b0:8c:95:94:83:2c:cb:
                    46:94:32:2f:96:95:41:0b:50:fd:53:ca:14:ae:ff:
                    de:bd:e7:0f:7f:d1:c5:a8:cc:c6:29:db:47:38:ca:
                    c0:59:5a:22:c1:cf:98:1c:03:ef:24:b3:e4:29:8a:
                    0c:2e:5b:52:27:94:8a:9b:61:b2:9c:c4:4b:de:66:
                    68:ad:cd:94:2f:60:ca:55:28:7c:41:9b:e6:cf:dc:
                    e9:33:2d:51:18:a1:c2:e9:bb:b2:7f:9f:37:67:ab:
                    c4:7c:eb:7d:db:42:d6:5b:09:b9:64:49:43:3f:89:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F0:03:AC:9D:45:27:8D:EB:9D:A8:A2:C5:FC:89:3E:31:66:9A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/7f0dbfcb-669a-3795-8149-1180aa75ff87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.48.0/20
                  23.235.160.0/19
                  23.248.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:8b:f8:9b:50:b3:d1:26:a7:aa:f3:34:90:d3:e5:bd:b8:
         1b:2c:f1:7b:43:de:5f:5f:a5:cb:d0:39:1e:56:02:33:5f:a5:
         8c:c0:8e:c4:ed:d5:1b:e8:5d:46:12:f1:80:24:01:f5:02:c4:
         2b:8e:72:90:56:06:ef:5d:75:3d:dd:58:6e:60:48:9a:a4:ae:
         43:56:07:6b:7e:9f:b8:e9:31:8f:e5:3c:1f:e3:67:7c:de:83:
         7e:15:7e:4a:8a:79:12:16:92:c5:72:1f:23:d6:a0:fd:a2:7c:
         98:41:41:ca:b6:f1:72:cd:7d:86:d8:5a:26:e2:0f:1f:9e:9f:
         b8:b0:73:cc:a7:e3:47:a1:52:89:ad:4a:27:68:2b:02:b9:53:
         0a:55:6c:d4:ee:29:a9:ac:29:20:2e:ea:65:fc:27:db:93:75:
         6b:bc:60:1c:89:46:10:12:42:69:c0:b7:0a:4a:5f:21:36:bb:
         4f:99:e5:3c:4c:ed:ca:97:88:ec:7e:9e:ff:e7:ac:50:3e:ed:
         6f:b9:98:9e:1d:04:19:aa:13:ef:76:80:c0:ff:98:d9:2f:a6:
         2e:c4:93:45:a6:3e:72:23:33:fa:88:8b:2b:b8:4f:4c:a8:41:
         2f:9f:2d:63:b8:31:86:50:d7:9b:d1:4b:fe:47:de:bc:ce:4d:
         d7:13:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:23:41 2026 by rpki-client