Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/595f5ff9-0aab-3fbc-8ca4-56b1b79ac20c.roa
File:                     595f5ff9-0aab-3fbc-8ca4-56b1b79ac20c.roa (raw, json)
Hash identifier:          moKxjP1KnUTbjQVyUCLYuPn/496LEyLIBZvZIDMoRmQ=
Subject key identifier:   A4:80:66:6E:76:9C:47:B5:CA:EA:96:B7:F5:94:DB:3F:E4:6F:ED:41
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F0FAB56E4E438AF3A8D761000
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/595f5ff9-0aab-3fbc-8ca4-56b1b79ac20c.roa
Signing time:             Fri 04 Sep 2026 08:17:48 +0000
ROA not before:           Fri 04 Sep 2026 08:17:48 +0000
ROA not after:            Thu 03 Dec 2026 09:17:48 +0000
asID:                     30633
IP address blocks:        23.82.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0f:ab:56:e4:e4:38:af:3a:8d:76:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep  4 08:17:48 2026 GMT
            Not After : Dec  3 09:17:48 2026 GMT
        Subject: CN=8c00db07-c430-4e70-8dfa-0a2d9cab0540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:37:d9:15:da:55:48:61:29:9f:ad:be:59:
                    b9:a4:92:82:ce:2c:c9:c7:1b:83:fe:12:57:86:8d:
                    e6:ab:a7:46:26:07:54:f4:2f:f9:7f:05:d3:8b:ad:
                    2e:04:77:57:86:31:73:51:80:8f:7a:68:72:1d:90:
                    7a:3b:11:4a:9e:58:3f:ff:9a:12:3e:f1:49:07:84:
                    0a:08:8c:12:81:69:f4:e5:51:df:b4:f2:4b:d4:5f:
                    c6:47:4a:29:61:bf:85:ab:44:7f:1e:f1:b5:f9:03:
                    15:d0:6c:07:79:62:3c:1f:bf:2f:5c:ed:8a:05:d0:
                    42:1d:81:6c:6c:52:42:a1:cf:d3:a3:04:7f:bd:8d:
                    1b:79:14:7b:3b:1d:07:61:2b:58:63:81:fd:16:ee:
                    ac:22:15:4a:d8:89:c2:41:6e:1f:6e:8e:f0:1c:dc:
                    e9:e8:44:67:95:09:3f:4a:11:16:fc:fc:72:d5:6d:
                    3d:84:4d:41:88:34:de:ef:06:11:fe:0b:15:ab:4e:
                    3d:d8:aa:2f:e1:09:ac:70:2f:bb:72:0d:88:03:de:
                    a2:5d:70:cd:c4:1d:95:47:8a:67:36:1c:e6:f8:d9:
                    53:62:c2:65:3a:d3:7e:b8:5c:f5:26:d9:40:d7:8a:
                    39:54:b6:cf:cc:b2:e4:80:80:7f:aa:dc:97:ba:09:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:80:66:6E:76:9C:47:B5:CA:EA:96:B7:F5:94:DB:3F:E4:6F:ED:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/595f5ff9-0aab-3fbc-8ca4-56b1b79ac20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.82.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0f:83:f1:0d:63:d4:bd:97:3d:4f:ef:1c:3d:fc:01:a1:5c:
         1b:ba:88:57:d0:b2:b1:8d:8e:10:ce:80:c8:2b:05:93:7c:bf:
         f0:6d:31:44:57:f5:31:cb:47:3a:aa:4a:18:12:9a:e3:2b:1f:
         31:64:05:26:7f:c9:43:47:6c:a5:c6:60:d2:97:6d:be:5a:47:
         cd:94:4c:49:d7:41:79:7e:33:9f:81:0e:f9:7a:21:e5:47:a9:
         13:91:3c:c3:23:41:64:67:28:8e:d7:36:72:14:78:2c:34:77:
         16:0b:ac:9a:54:57:9c:a4:8b:4b:08:b7:5b:c6:1b:ec:31:49:
         40:5b:26:3f:bc:47:d8:f5:ed:4f:87:65:c0:1a:49:a8:72:4c:
         0f:64:1f:22:66:40:e1:73:10:13:67:e2:23:2e:29:04:0d:ac:
         b8:e1:31:7e:1b:50:45:65:fd:30:d6:71:88:af:a9:93:21:75:
         ea:25:be:78:3b:43:d2:a5:48:5a:91:81:70:ee:0b:27:6c:c6:
         17:05:da:97:5b:7f:c8:31:22:d7:04:39:ce:ea:10:f2:1b:3a:
         36:9b:8e:fc:2f:11:20:5e:a3:ca:c7:5d:99:77:a6:af:5d:c1:
         46:7a:cb:a5:a2:96:3b:52:a7:8a:15:87:ff:70:c0:55:08:75:
         70:c4:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:59 2026 by rpki-client