Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8955fd4a-db19-3523-bd5c-29a336021991.roa
File:                     8955fd4a-db19-3523-bd5c-29a336021991.roa (raw, json)
Hash identifier:          YkI2nrLe2hOswUkY+2DBfOLAYnPUA3EiueDQBtvs4nE=
Subject key identifier:   B2:21:C2:FF:1C:51:A1:32:95:54:6F:70:5B:90:EB:60:AC:BA:F5:7E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F0FAA713554114D00C8688710
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8955fd4a-db19-3523-bd5c-29a336021991.roa
Signing time:             Fri 04 Sep 2026 08:16:00 +0000
ROA not before:           Fri 04 Sep 2026 08:16:00 +0000
ROA not after:            Thu 03 Dec 2026 09:16:00 +0000
asID:                     30633
IP address blocks:        23.105.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0f:aa:71:35:54:11:4d:00:c8:68:87:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep  4 08:16:00 2026 GMT
            Not After : Dec  3 09:16:00 2026 GMT
        Subject: CN=68b7a8ab-7eb9-421c-9da7-0b61387d833c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:70:9c:07:38:12:1b:8c:7f:ac:24:31:04:
                    e5:8f:3a:16:40:a6:f4:2c:cb:06:ec:22:cc:14:51:
                    99:28:28:47:18:bc:f4:e2:42:50:9f:23:7b:84:27:
                    b8:36:96:44:3c:98:cd:fb:79:fd:f1:3a:71:95:8a:
                    75:59:9a:49:b9:2b:d2:10:7d:50:ec:d1:b5:83:ef:
                    57:39:0c:f3:f6:d0:05:e0:ad:1f:d0:b3:8d:88:5e:
                    66:74:3a:3f:86:e3:de:1e:f6:6f:d8:fe:71:eb:b3:
                    c4:47:9f:71:b7:94:55:f0:42:27:87:b0:8a:d7:23:
                    b6:1d:e1:21:44:d1:9f:53:94:17:e3:4b:d9:0f:da:
                    04:91:a1:b8:bc:34:24:3b:72:c3:f9:0a:b6:31:61:
                    88:fa:3a:0c:05:75:9c:08:08:41:f7:f6:22:20:17:
                    b3:6b:8f:92:8d:5c:9e:fb:5f:53:ab:b7:28:72:65:
                    79:ee:1c:1d:92:f6:5c:79:5c:a4:a9:20:ad:73:d8:
                    ca:10:7c:ad:e0:a2:2a:47:17:fd:9e:af:ab:be:14:
                    ca:b6:be:ff:90:23:d2:2a:2e:16:31:91:32:89:71:
                    5a:37:06:2b:67:16:28:d0:da:39:7e:f1:a5:f0:b0:
                    c3:06:df:9c:a3:93:ed:db:54:2b:4e:67:95:98:4a:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:21:C2:FF:1C:51:A1:32:95:54:6F:70:5B:90:EB:60:AC:BA:F5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8955fd4a-db19-3523-bd5c-29a336021991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7d:f2:98:cc:29:01:9e:45:28:a9:36:9f:98:87:6c:04:cd:
         c6:8c:8b:9e:36:33:ac:92:94:f1:6b:06:5b:b0:f0:f5:4f:42:
         b8:84:58:23:d8:db:25:30:b2:61:5d:54:43:c4:11:6c:6c:ca:
         bb:96:d3:0b:0e:3e:97:60:a8:df:c1:63:fa:b6:92:54:d4:7b:
         37:12:c6:74:67:66:a2:01:36:1d:51:eb:03:41:28:e9:54:cc:
         c7:df:77:8e:38:2d:37:86:55:29:cc:67:b8:ef:50:af:b5:b7:
         38:a1:c3:6a:95:62:31:f9:35:6a:7c:18:60:36:22:91:b7:8f:
         37:f0:30:c3:68:5a:dd:d2:95:82:4a:30:ba:72:10:53:40:de:
         5e:9b:35:8c:3e:c8:99:7e:b5:45:c4:2b:0f:25:ad:0d:d4:46:
         0d:99:a2:21:26:62:fd:29:b8:f3:08:3b:79:fd:2b:8d:2b:ac:
         64:a6:ad:90:d0:ec:9a:f4:10:27:d4:f6:3e:95:bd:73:5d:c5:
         fc:e8:a9:b1:7e:fe:28:e9:8d:ff:c9:27:a7:26:76:4c:da:06:
         f8:d6:36:d6:9b:bd:b9:05:59:40:1f:82:ef:fb:23:97:d4:40:
         c0:97:38:c1:13:b8:a9:83:ea:8d:60:b7:ec:46:22:52:9a:a8:
         14:02:4a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:56 2026 by rpki-client