Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20ba63ab-2de0-3859-a5d2-0da61369a22b.roa
File:                     20ba63ab-2de0-3859-a5d2-0da61369a22b.roa (raw, json)
Hash identifier:          O2JA1WdVP2MnTY1MRaR62aN1iFYqlRPHvke/oisuFLY=
Subject key identifier:   37:03:BA:49:36:A8:63:B5:12:4D:12:DB:6B:BA:89:76:8C:7D:A3:1E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB9C9828318699DFD31553300
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20ba63ab-2de0-3859-a5d2-0da61369a22b.roa
Signing time:             Tue 04 Aug 2026 13:59:04 +0000
ROA not before:           Tue 04 Aug 2026 13:59:04 +0000
ROA not after:            Mon 02 Nov 2026 14:59:04 +0000
asID:                     7203
IP address blocks:        23.82.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:c9:82:83:18:69:9d:fd:31:55:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 13:59:04 2026 GMT
            Not After : Nov  2 14:59:04 2026 GMT
        Subject: CN=56816f0c-c807-4161-812f-58dea08c7d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:d3:fe:93:42:6a:38:b0:f2:a7:27:d9:4f:
                    a0:35:09:64:71:83:16:6e:f6:ad:bf:71:5e:8b:8f:
                    a4:c1:77:28:7e:83:a9:30:c8:d3:fc:8a:56:0e:9f:
                    8b:90:99:ac:16:d5:8b:85:bb:92:e8:d4:0c:df:15:
                    5e:c4:a1:1b:2c:49:c5:2b:33:e1:ef:2e:8b:74:bb:
                    4d:eb:3c:19:8c:ea:ba:32:b6:c0:19:5c:ac:ef:44:
                    ab:9a:dc:99:a7:ea:6d:6c:c3:0d:01:82:aa:37:3b:
                    bf:df:70:3d:cb:0c:fc:13:6e:a3:c5:e6:aa:77:0a:
                    b4:9d:9e:43:ea:98:ea:0e:21:52:5e:9b:c0:9f:48:
                    ab:13:29:85:44:f7:8c:8b:3a:02:a2:d5:15:4f:0a:
                    fb:b1:03:4d:34:ee:f6:3c:d8:ea:a0:13:73:7b:e7:
                    f5:30:a0:42:69:7c:79:8e:6f:00:b5:14:ae:b4:f0:
                    6d:56:96:2c:2e:03:c4:f7:84:47:39:aa:3d:11:86:
                    ea:57:21:fe:45:f0:fa:7e:c6:b5:ac:8f:29:bb:18:
                    7e:55:55:27:87:a1:22:17:97:e0:87:7d:c6:9e:de:
                    38:3c:13:46:eb:94:03:26:b9:7c:31:01:a2:02:3f:
                    47:7d:ea:6d:11:a7:70:45:b1:e5:15:a6:2d:e7:29:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:03:BA:49:36:A8:63:B5:12:4D:12:DB:6B:BA:89:76:8C:7D:A3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/20ba63ab-2de0-3859-a5d2-0da61369a22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.82.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:64:83:73:73:7a:b0:8a:d6:ce:f7:09:21:bf:0c:06:35:f3:
         dc:b7:55:b9:6b:c7:4b:bc:25:36:b8:31:9c:bc:4a:6f:6a:89:
         14:a2:5b:4e:1b:9c:3d:48:f2:41:ae:91:23:03:b0:32:f3:60:
         28:4d:54:25:81:21:4f:a7:27:a0:9f:1c:ea:2a:45:0d:dd:5c:
         01:58:81:84:8e:ef:69:c5:dd:7e:62:76:d2:ff:3d:a1:89:2b:
         e6:9b:08:9e:36:91:a3:2e:1e:85:13:fe:73:2a:e0:48:3a:9f:
         54:13:7b:91:11:22:cc:22:cc:88:34:70:35:7f:e5:5a:fe:f6:
         c7:2f:3e:74:b3:8f:89:18:1e:e6:a0:bf:68:34:de:3f:30:c1:
         a6:05:f1:97:7d:b3:45:86:2a:64:1c:80:2e:27:54:16:14:f0:
         48:39:3c:57:ed:a9:f6:c3:09:a8:3f:c8:b3:25:d0:c8:17:b3:
         7d:70:8b:28:c6:e1:b1:90:9b:d1:d4:72:a8:6c:3c:db:c6:6a:
         9f:84:7a:7c:6f:74:db:e1:a1:2e:19:c5:13:0b:be:c2:b9:da:
         35:31:b0:4e:70:5b:3b:bc:02:31:86:bb:64:f5:b9:c1:a7:e3:
         b8:dd:e0:06:3d:95:bf:c4:a5:ac:15:71:bd:2f:b8:4d:ab:c4:
         93:2b:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:23 2026 by rpki-client