Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa
File:                     1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa (raw, json)
Hash identifier:          5Pjg0Brb1jh2xxJMjarz3R9ZnHgyLLiUhn9wrK9IXfk=
Subject key identifier:   2E:00:56:60:80:A3:33:E1:80:4F:4A:94:F0:AF:D4:C1:9A:8E:B1:18
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584E37647C4B34FB14F065454580
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     30633
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:7c:4b:34:fb:14:f0:65:45:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=e8b22b63-0d37-4e5c-8b0f-a012c88904a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:bf:9b:2a:8f:a9:e2:a2:fc:08:ff:d5:05:
                    ca:2a:74:f6:df:d8:55:99:9d:c9:db:6d:22:f0:01:
                    d7:d6:3f:4f:e3:44:70:81:5d:c5:b6:df:9a:12:ee:
                    47:7b:51:c9:1b:aa:5c:4c:9a:47:2f:e7:f0:4c:9e:
                    7a:c0:53:f2:b2:27:f9:97:5c:68:f1:cb:46:ba:b3:
                    a2:97:6e:40:ed:7e:15:4b:ec:7f:a8:06:f1:f3:06:
                    80:ab:1d:cd:ec:60:21:8f:7b:c5:50:f0:d8:7a:4f:
                    14:d0:02:60:2c:4e:af:f0:aa:79:f8:b4:ed:dc:b7:
                    02:44:71:b7:27:d8:d8:ba:a0:37:58:b0:39:3b:88:
                    98:9e:89:08:5c:8a:e2:5b:48:95:4e:3e:72:0b:f1:
                    e4:79:25:c4:22:e5:64:df:87:ce:3a:8f:16:24:20:
                    eb:93:dc:4f:51:86:41:5a:03:9e:59:2b:06:da:04:
                    04:1e:30:e7:db:0c:1d:0e:e4:28:56:1d:f0:45:a4:
                    35:69:73:52:05:1a:48:71:1d:68:a8:de:88:af:4a:
                    cc:fe:d2:9b:03:87:33:d1:3f:1b:66:d9:2e:2f:2d:
                    43:3d:50:63:83:48:b3:77:ae:ca:b0:a6:36:12:63:
                    d3:28:7b:63:fb:cb:a5:c6:50:57:53:87:c8:22:e5:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:56:60:80:A3:33:E1:80:4F:4A:94:F0:AF:D4:C1:9A:8E:B1:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:40:e7:41:4d:2d:3f:50:eb:1a:81:63:77:53:20:45:ef:7f:
         b3:33:90:24:85:32:bc:9e:c6:37:37:d9:f4:fa:db:24:c4:14:
         24:e0:48:7c:b3:b9:80:8e:89:d9:57:86:e5:bb:27:72:4c:fb:
         d7:27:06:8d:ec:38:fd:55:88:86:09:fd:43:81:72:a9:8a:11:
         b7:c7:ba:c1:31:d9:22:62:a2:e5:16:9e:bb:11:d4:1c:a4:7a:
         72:0f:24:bb:d5:5d:b4:04:d1:9e:d7:41:2e:4d:89:33:00:ce:
         e3:88:a7:25:ce:c2:1f:cb:c5:cb:ed:75:da:05:7a:9b:4e:15:
         3a:f6:62:e0:c3:96:33:23:14:40:42:ca:1d:31:ae:1c:e4:cb:
         cc:3c:af:50:31:fd:02:3e:7d:ca:e3:39:81:bc:b6:7d:60:b4:
         b2:7f:5b:cc:39:f9:39:bf:b2:91:97:48:c8:16:1a:b8:37:ad:
         27:4a:94:36:e0:21:09:60:0b:6b:7c:5c:bf:8a:17:61:b4:10:
         c1:74:3a:95:e8:8a:8e:24:a5:41:8f:b5:ee:d4:3b:d4:04:6f:
         60:85:d5:fe:7b:c5:44:f2:09:93:a6:fe:9a:21:e6:7a:7e:b2:
         77:30:a8:36:1b:d3:47:fa:51:60:02:dc:66:4e:36:9e:2a:f4:
         d0:0e:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 14:53:12 2026 by rpki-client