Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/299f2283-5d6e-3b6f-9f77-88f9b8f8f832.roa
File:                     299f2283-5d6e-3b6f-9f77-88f9b8f8f832.roa (raw, json)
Hash identifier:          yB/WWTzJ6jWU3qVJ/3gMwCOVR41PsCoB1MW8D3JpIGU=
Subject key identifier:   4C:27:18:70:5C:E9:BB:35:D8:B8:50:51:A4:C6:1D:91:A4:E9:3D:4C
Certificate issuer:       /CN=ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0
Certificate serial:       010D0C9F4328584E3499AE3C28B40CEA8D9F7180
Authority key identifier: 2E:7B:FC:DB:33:BB:51:D0:4E:F6:CA:E5:E0:67:53:DD:08:AA:24:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/299f2283-5d6e-3b6f-9f77-88f9b8f8f832.roa
Signing time:             Wed 17 Jun 2026 21:00:11 +0000
ROA not before:           Wed 17 Jun 2026 21:00:11 +0000
ROA not after:            Tue 15 Sep 2026 21:00:11 +0000
asID:                     174
IP address blocks:        23.151.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:99:ae:3c:28:b4:0c:ea:8d:9f:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0
        Validity
            Not Before: Jun 17 21:00:11 2026 GMT
            Not After : Sep 15 21:00:11 2026 GMT
        Subject: CN=2a52ec1a-a4f4-4d43-ab96-cb1e50c9124d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:42:81:94:96:1b:dd:41:a3:e8:12:5a:2e:5e:
                    63:fd:cc:92:72:0b:f6:f5:2f:be:83:d2:9b:aa:c8:
                    1c:fa:bf:f6:bd:36:bd:6e:8a:c8:64:27:4c:c3:c5:
                    86:71:a9:2f:09:8b:fe:f3:26:48:fd:36:58:3d:01:
                    2f:26:96:5a:f9:f4:2e:c6:1a:fc:f7:32:ae:99:78:
                    e2:41:d3:61:2a:a7:d7:7a:57:ec:5e:b0:62:77:d8:
                    3b:38:d7:dd:9f:58:8b:02:cf:29:a2:81:87:63:32:
                    e0:f3:cd:4a:16:11:c7:1a:2b:d3:03:ab:71:6d:82:
                    c5:6e:4e:2d:1a:85:2a:57:57:1d:3a:33:8d:84:eb:
                    a6:60:29:60:af:1d:d0:6c:84:7b:3a:95:97:9b:da:
                    d0:98:8a:1c:ca:c8:88:60:1e:e0:df:d9:48:f8:fd:
                    d2:cb:47:5e:f7:c1:d9:2b:5b:1d:14:54:42:f0:6c:
                    fa:5e:8a:34:e1:2a:5a:99:a4:ac:8a:83:c1:f9:82:
                    90:0d:92:d4:8b:19:ac:8c:3d:44:9b:0d:16:f3:eb:
                    d9:90:fc:8c:15:85:a2:af:c9:39:57:b0:fc:68:c0:
                    fd:25:5f:fe:9f:21:f9:3b:bf:9c:21:ef:3a:b2:6b:
                    dd:15:ab:f4:6b:47:00:82:b7:00:a6:6c:0c:a8:2f:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:18:70:5C:E9:BB:35:D8:B8:50:51:A4:C6:1D:91:A4:E9:3D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/299f2283-5d6e-3b6f-9f77-88f9b8f8f832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:FC:DB:33:BB:51:D0:4E:F6:CA:E5:E0:67:53:DD:08:AA:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:62:22:69:43:e3:9e:ae:92:02:cf:b3:77:c3:59:61:68:
         80:10:fc:42:0d:68:35:f5:dd:c0:20:98:7e:e7:cc:52:90:65:
         a8:7f:e9:d2:52:aa:7a:a9:73:d1:2c:14:7c:aa:d8:55:b7:34:
         b0:fd:b0:25:07:94:59:03:bb:0f:dd:7a:01:f4:e3:f6:51:c9:
         65:22:f1:26:20:4a:1a:b2:16:0d:6a:2d:28:dd:12:08:24:37:
         bc:29:75:77:0c:fa:bf:6c:ff:7f:b6:9a:d4:82:20:1a:22:00:
         29:f0:fb:fc:c5:21:b8:05:03:16:d8:8a:a9:5f:35:a5:6c:e1:
         98:b8:d4:e4:55:d8:7a:0b:f9:c4:82:74:84:d5:bc:e4:4e:45:
         9d:6b:07:5f:8e:24:f5:76:53:a6:80:fe:82:61:31:49:47:92:
         72:04:3a:f1:6a:57:ef:78:23:89:66:f9:6d:05:99:f7:06:50:
         e9:2f:96:3c:06:17:d8:a5:58:f4:dc:e8:85:a4:21:cc:82:fb:
         fa:9b:94:b3:8a:01:b2:89:bf:46:3a:5c:04:02:c5:03:b7:a4:
         45:4b:5a:41:dc:92:dd:84:3e:79:81:b7:46:e3:c9:71:ca:cb:
         ae:68:9e:57:8e:29:7e:72:98:77:28:61:50:28:e6:6d:b0:92:
         12:40:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 03:04:44 2026 by rpki-client