Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7c137b70-a21a-36ef-8459-58f30f715136.roa
File:                     7c137b70-a21a-36ef-8459-58f30f715136.roa (raw, json)
Hash identifier:          fh/CUdve8hFCCGrmxAfQrFjr2CF8F/kCaaGqU0GtTTc=
Subject key identifier:   2E:CA:93:82:63:A4:14:86:61:3E:23:F3:F3:34:1C:D9:50:F4:AF:BD
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBC01302395E0CEB36CF35000
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7c137b70-a21a-36ef-8459-58f30f715136.roa
Signing time:             Wed 05 Aug 2026 09:02:53 +0000
ROA not before:           Wed 05 Aug 2026 09:02:53 +0000
ROA not after:            Tue 03 Nov 2026 10:02:53 +0000
asID:                     19148
IP address blocks:        23.82.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:01:30:23:95:e0:ce:b3:6c:f3:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 09:02:53 2026 GMT
            Not After : Nov  3 10:02:53 2026 GMT
        Subject: CN=6a3109cf-0b86-4d3e-aa7f-696dbad1760f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:4a:4c:e1:51:30:07:6b:a3:d9:83:54:4d:
                    38:b8:6b:93:7d:2d:59:6f:cc:4f:8c:23:a5:00:ba:
                    75:e1:e4:71:f9:9a:9a:3f:da:41:91:c0:10:b5:06:
                    1f:33:f0:c4:6e:a8:34:b5:6c:77:64:d9:d1:55:ab:
                    c2:b7:84:21:a9:22:18:4b:28:a9:dc:3c:3b:86:58:
                    f1:19:5c:53:59:59:3f:c9:3c:5f:df:ca:9c:35:f2:
                    ce:8b:e4:df:fe:1a:ff:ed:99:df:f8:cc:70:1d:d1:
                    75:d8:46:8f:03:8f:d9:d4:99:59:0b:b5:4f:ee:62:
                    d9:f6:47:b6:f0:37:13:1e:ad:29:cc:00:7e:7c:e6:
                    ae:40:6b:26:12:a8:26:b3:51:23:d3:3b:f7:74:76:
                    db:03:a5:95:e0:e0:b9:47:cc:0a:a2:83:1d:d8:1e:
                    de:3c:ac:69:cd:0c:ff:71:31:e1:e4:1f:1e:4a:5c:
                    ff:3f:c8:38:d7:21:27:2e:1e:af:99:50:bf:cb:f6:
                    d5:b0:c8:e5:28:6b:ca:91:c0:2e:21:90:b7:53:33:
                    d0:c4:96:eb:20:5a:59:91:76:36:93:dd:8c:e9:ae:
                    83:bf:42:85:13:91:1d:b6:61:7b:c4:91:3c:cc:4a:
                    3e:f0:f0:98:ef:63:29:68:73:02:5c:2b:47:5f:a0:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CA:93:82:63:A4:14:86:61:3E:23:F3:F3:34:1C:D9:50:F4:AF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7c137b70-a21a-36ef-8459-58f30f715136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.82.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:51:2a:1e:8d:8d:04:f4:e2:c5:30:23:b3:12:ef:1e:01:
         27:4a:25:4a:b3:4a:9e:40:37:96:6d:8c:0f:81:ed:c2:39:f6:
         b7:10:18:95:1c:b3:ce:04:e2:28:31:ba:d0:6c:32:cf:6b:f0:
         13:36:f4:8a:12:c9:12:7b:e1:66:ca:43:7f:cd:7d:0f:c7:a7:
         1f:51:27:66:af:fa:04:ec:2f:3e:da:9b:d7:d9:2f:31:c7:85:
         e0:87:bf:ea:b9:35:48:b6:63:92:f4:91:0a:ec:d5:b9:76:4a:
         3d:f2:4a:d9:be:fb:c0:00:b4:bb:10:63:fd:a5:71:19:ca:21:
         5a:d0:d4:34:6c:de:80:c3:24:10:8e:85:4e:e0:22:01:b5:d7:
         e1:a8:c3:c4:b7:71:58:70:69:03:fd:4a:9d:88:7e:a2:e1:6c:
         0a:5b:cb:29:16:f7:ef:51:36:f3:e7:4c:7d:22:44:b9:f9:54:
         10:bf:f8:b2:56:6b:dd:cf:4e:57:30:0a:99:fa:9a:1f:33:f4:
         c4:7f:79:73:0a:fd:00:0c:3b:76:b1:58:e6:5f:61:f2:9d:09:
         b0:f2:47:f2:a4:4e:09:63:ae:3e:f4:12:90:9b:7d:05:cb:12:
         c4:28:3f:72:70:5c:c5:bb:c0:8a:d7:fc:65:dd:af:33:f2:04:
         f7:3e:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:37 2026 by rpki-client