Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa
File:                     4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa (raw, json)
Hash identifier:          S+v/VYwnuFufg/b2GuUQ7DPSGOFsWnhB0ifmsCPw7R0=
Subject key identifier:   4D:77:B5:51:38:CE:DF:2A:E0:AD:3B:37:5F:BF:FF:68:0C:93:25:D0
Certificate issuer:       /CN=affcec42-3d91-4bd4-91a9-094e86b16e3a
Certificate serial:       010D0C9F4328584E5BAF6036612B8AC77558E540
Authority key identifier: 00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        23.148.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:60:36:61:2b:8a:c7:75:58:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affcec42-3d91-4bd4-91a9-094e86b16e3a
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=c23ee189-fa26-48b5-a7e8-125a111652b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:81:31:89:f4:ec:a9:67:d0:8a:72:77:19:
                    bb:1d:b6:8d:02:89:d2:b7:03:90:25:21:4a:60:3f:
                    f3:2d:68:d7:d5:7a:99:5c:c5:5d:86:31:a4:6e:c4:
                    f9:20:29:ff:0d:91:7d:27:02:86:88:13:81:96:a8:
                    b6:df:b6:7c:b7:bc:ee:a7:28:21:9b:38:02:6d:71:
                    2e:03:9b:de:33:7b:f2:6b:97:df:32:66:23:d8:f1:
                    5e:9b:c0:a1:c8:94:63:5c:15:41:94:0a:11:a7:0a:
                    97:31:ef:a1:f1:bb:e2:84:3e:84:75:a2:8e:e6:7f:
                    1c:62:63:9d:33:48:14:49:63:3a:e7:18:0f:74:81:
                    d1:fd:4a:f3:07:3a:72:1a:1b:16:c7:93:d6:bf:37:
                    96:7e:3f:0f:fb:d2:35:ec:e7:6f:ee:a4:5c:fd:93:
                    21:f5:5d:34:7b:13:7f:5a:4d:58:8d:e0:d1:f3:46:
                    a4:4a:5d:99:89:d3:18:e5:62:18:01:49:2c:38:32:
                    56:0d:c4:e5:d0:cc:7f:84:9c:66:e0:ba:1c:3c:7c:
                    00:05:62:fc:e2:86:5d:d2:98:b5:5e:2e:ec:1f:10:
                    a9:f7:68:44:be:c6:d2:34:ad:e1:1b:89:2b:98:63:
                    83:d5:b5:e2:f8:c0:47:2b:77:ed:7d:8e:0e:f0:7b:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:B5:51:38:CE:DF:2A:E0:AD:3B:37:5F:BF:FF:68:0C:93:25:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl

            X509v3 Authority Key Identifier:
                keyid:00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:99:23:45:42:c2:68:64:1e:a6:4c:59:eb:00:36:7f:c2:1a:
         df:58:1f:ef:a8:d8:41:5d:43:61:92:54:cc:20:76:e8:32:d0:
         1c:2d:51:bb:81:a6:73:2f:24:93:ca:eb:73:93:c9:dd:5a:00:
         78:30:66:1a:7a:a5:d8:0f:57:1f:21:f7:a9:fc:52:bd:57:81:
         96:57:c4:ee:ea:90:6a:1d:6b:82:bb:ff:ae:d9:c1:06:f8:e6:
         83:71:dd:cb:a7:73:5d:e6:8c:49:33:59:02:b2:30:3f:55:af:
         89:81:5c:25:7e:43:3f:2e:23:b5:4f:d4:3c:9a:d5:27:4d:b4:
         51:bd:de:76:28:1e:91:75:89:61:e0:a5:6d:23:69:31:a2:de:
         50:72:3d:03:a7:d3:35:0c:8c:02:47:ac:0c:b6:13:be:a1:73:
         25:b2:30:a3:bf:92:14:a6:c3:3a:e4:f5:70:66:ca:d2:af:fe:
         63:62:91:72:da:9f:21:04:42:7e:dd:f1:49:ca:4e:77:20:57:
         9f:57:95:e8:c4:f0:64:de:e3:e3:3f:5d:b3:42:d9:d9:af:90:
         17:1d:85:56:bf:cf:c1:34:b0:04:64:e4:0d:47:4c:7d:2f:da:
         b1:aa:5e:47:9d:8c:e9:fc:85:71:b0:0f:d2:4b:eb:70:4a:7a:
         6d:a6:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:13 2026 by rpki-client