Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6d0b1073-cbb1-3f59-bfc2-68863bb34283.roa
File:                     6d0b1073-cbb1-3f59-bfc2-68863bb34283.roa (raw, json)
Hash identifier:          rb8TYRC2JEeO/1Bga2vp0gTvl3F7mppTeGy9sz8+ivs=
Subject key identifier:   88:C3:DA:94:B8:F6:C1:1F:FE:14:A6:4D:E4:EE:C7:75:42:38:61:E8
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ECA92F76489651569B2345000
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6d0b1073-cbb1-3f59-bfc2-68863bb34283.roa
Signing time:             Mon 10 Aug 2026 14:17:55 +0000
ROA not before:           Mon 10 Aug 2026 14:17:55 +0000
ROA not after:            Sun 08 Nov 2026 15:17:55 +0000
asID:                     395954
IP address blocks:        23.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:92:f7:64:89:65:15:69:b2:34:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 10 14:17:55 2026 GMT
            Not After : Nov  8 15:17:55 2026 GMT
        Subject: CN=372e6f55-90c6-4c3c-a357-73fe202f8ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:ed:c6:56:f6:74:80:0b:5c:98:97:01:01:
                    87:e7:2c:40:f2:81:b1:d5:86:8d:df:36:42:5c:16:
                    5e:03:4b:0f:6e:0a:2f:0f:ed:ce:ce:ea:cf:6c:85:
                    f1:f9:b4:3a:27:95:2e:0c:29:9c:b7:c7:8a:30:34:
                    1c:b2:b2:52:41:c0:2d:23:21:0e:25:44:31:fd:21:
                    3f:bf:7f:10:69:5b:e7:11:bb:54:77:58:c4:22:76:
                    0f:60:8f:63:3c:a1:08:7a:99:d3:21:12:62:a9:ca:
                    ad:6a:02:77:d5:70:a8:a0:18:aa:79:bb:57:72:56:
                    c9:72:fb:ea:1a:61:6f:72:48:a2:c3:5d:88:4c:1a:
                    30:99:84:3d:42:9b:58:d2:96:06:80:d0:81:0b:79:
                    29:d1:84:65:c8:a1:90:8b:3b:38:ed:8e:59:f2:20:
                    9a:22:0f:db:5f:25:ed:46:3b:f7:e3:52:0d:3b:9d:
                    3f:0f:d5:09:67:08:54:45:14:e7:6e:54:61:66:da:
                    ec:ef:78:fe:45:28:22:1e:0e:a0:3b:11:fc:d3:e6:
                    b8:64:41:d3:c3:8d:96:47:39:54:36:c9:95:93:59:
                    36:30:6a:36:3a:68:d9:80:04:f0:ed:dc:a3:82:be:
                    79:d6:2c:01:9a:6c:cf:a4:16:7b:95:3b:bd:bf:7d:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:DA:94:B8:F6:C1:1F:FE:14:A6:4D:E4:EE:C7:75:42:38:61:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6d0b1073-cbb1-3f59-bfc2-68863bb34283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9b:3c:ea:fe:c0:23:ac:ff:b5:bf:09:24:59:4b:27:dc:98:
         55:37:7d:8b:44:b3:f3:f4:12:5c:2d:a0:b3:70:9a:2d:9c:ca:
         c0:31:dc:fb:32:1f:cb:09:5b:f6:de:6c:d3:6e:5d:b0:ab:3e:
         a4:f6:1f:d8:b7:44:79:fa:f1:5a:6d:87:1a:bf:58:90:57:f8:
         ee:8f:1c:04:c9:2f:6a:e6:7f:28:e9:59:64:31:00:f5:b0:e4:
         63:52:8a:6d:de:92:a4:df:a7:dc:e3:b7:c6:34:53:74:31:b2:
         41:79:84:28:fe:97:cf:b4:7f:a6:64:08:21:43:d8:b3:c9:a1:
         5b:af:f0:c6:52:cf:3c:f1:a6:bb:c2:a9:2c:59:9a:f3:3f:a7:
         7a:41:d9:40:10:bd:8f:0b:f5:9b:07:07:7e:4d:a9:2a:98:dd:
         fe:2f:07:25:e5:0e:b7:ff:91:ce:4e:c6:e4:38:83:bf:38:7e:
         51:9a:b6:7c:76:2a:3f:5a:88:13:ca:b4:ef:81:c0:ba:b1:d6:
         13:33:11:ad:fe:02:ea:0d:b3:b5:bf:31:bd:4c:5a:c0:eb:17:
         6b:40:c0:01:ff:f1:1a:7c:b6:43:43:f8:6f:b7:23:85:1f:81:
         4b:8f:a2:ce:b8:76:c0:2a:74:e9:46:6f:20:d9:7b:c9:68:4e:
         45:5a:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:44 2026 by rpki-client