Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa
File:                     c29da368-12a4-3190-8fb2-2391e3134074.roa (raw, json)
Hash identifier:          Bb23vSDJM6CRqebVx63lwobZnrWcPA48b2hTsWc2x7A=
Subject key identifier:   51:93:DF:8D:52:5C:75:CA:18:5F:7D:53:A9:07:5F:77:A2:16:F1:12
Certificate issuer:       /CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea
Certificate serial:       010D0C9F4328584EA787705875CE590E4771FA00
Authority key identifier: 79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395656
IP address blocks:        23.134.100.0/24 maxlen: 24
                          2602:f6ef::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:70:58:75:ce:59:0e:47:71:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df62fdf2-846e-43d9-81e6-a7e20a3b40ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:78:a3:35:41:08:8b:38:fb:89:86:4d:06:b4:
                    65:c0:84:c7:65:1e:55:e7:7c:26:0f:1c:b4:68:32:
                    f7:d2:cb:aa:16:cd:21:4d:8e:59:ba:9b:f0:d3:27:
                    23:b1:71:4e:5f:2b:f9:b7:8b:3e:83:cd:88:f0:99:
                    52:dd:45:ae:60:7d:3e:eb:b8:fb:86:a8:27:1f:f7:
                    c1:d7:47:a8:05:61:ae:93:4f:fe:f8:31:91:43:d4:
                    88:c0:a8:19:94:f7:56:74:72:02:c7:26:6f:96:ea:
                    1d:94:18:a7:93:13:4d:22:34:13:40:d3:9d:82:09:
                    7c:39:ad:bc:7c:f2:2a:0a:9e:9b:08:a7:62:b5:83:
                    3d:e2:e0:79:99:39:88:fa:77:b4:53:5e:56:4a:d7:
                    5d:36:e9:09:39:a2:94:1c:35:b3:50:6e:d6:41:42:
                    60:3e:c7:9b:21:31:79:1f:1f:ff:c2:5e:9f:d5:44:
                    eb:fb:b3:71:5e:93:6a:e8:ea:99:a3:c5:b9:75:8a:
                    96:2a:5c:ef:1d:bb:ab:4f:ca:8e:66:11:24:17:c3:
                    8b:a9:92:d5:05:39:f7:55:7b:4f:53:8c:fa:8a:c9:
                    a6:f6:71:9f:64:45:ab:2a:3d:26:83:a9:05:9d:92:
                    76:b8:f0:c7:35:86:e3:d7:16:bc:0c:5a:8f:e8:26:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:93:DF:8D:52:5C:75:CA:18:5F:7D:53:A9:07:5F:77:A2:16:F1:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl

            X509v3 Authority Key Identifier:
                keyid:79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.100.0/24
                IPv6:
                  2602:f6ef::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:6b:ce:7f:25:58:e4:5e:5a:e5:53:a3:61:15:d7:b9:29:
         f8:b0:d8:f2:3b:3f:48:be:38:73:ac:df:2c:29:dc:82:3c:fa:
         53:17:3a:4c:c6:85:6e:8b:9b:21:29:29:53:2c:08:b5:55:d8:
         fd:1d:1c:9a:48:6f:0b:cc:4f:6f:ce:d5:f1:91:15:66:be:50:
         c0:76:b5:fc:6e:a9:18:52:9f:b3:38:04:9b:ee:b5:36:94:a2:
         ab:10:9c:ef:53:06:7c:d4:22:3a:67:dc:4a:2a:53:61:57:91:
         56:0a:6e:ac:f5:cd:88:86:2f:8d:5d:ef:08:77:6b:24:05:da:
         59:48:19:42:ce:3c:a1:1e:c3:71:35:39:b7:c8:d6:02:e5:2d:
         f6:7b:b4:0d:f2:12:cd:0b:a0:b5:86:d5:b8:e8:23:4e:68:57:
         82:ee:b6:cf:8f:1c:0b:d5:8a:90:a2:98:c1:b6:a7:a4:b8:5e:
         0c:c8:f2:c9:82:2f:1d:1e:f0:4e:bb:e9:50:17:ea:e3:b5:f3:
         e8:bd:93:b0:92:5e:77:93:8a:be:ca:ad:a5:26:bb:5e:14:5a:
         c4:1d:c3:00:5a:05:7d:46:3e:2d:4a:6e:ca:c7:5c:7f:ed:c2:
         cd:63:6e:bb:bd:b0:c5:9f:a2:0b:82:9d:f6:e6:b6:89:eb:9a:
         9d:30:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:55:32 2026 by rpki-client