Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa
File:                     c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa (raw, json)
Hash identifier:          7kciOCIUT/M51ggIsAiL6Z0srjCx1I3FdlAHX18fZsw=
Subject key identifier:   25:24:64:61:16:67:09:B0:43:A6:83:5B:9E:76:33:E8:BA:A0:55:BA
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C75A9A85C93A7D55071000
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     30633
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5a:9a:85:c9:3a:7d:55:07:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=28824173-d6d8-4d20-b626-0b75ff55099f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:03:3a:f1:ff:72:cf:90:81:42:8e:2b:7c:a9:
                    5b:ef:6c:5d:88:96:12:71:38:6a:cb:ae:f8:d6:49:
                    a9:ed:30:f7:fb:79:3d:77:09:d1:eb:f8:89:6d:2b:
                    3f:81:f9:e2:17:7b:33:59:a1:cf:a7:19:53:73:17:
                    10:07:63:23:61:1e:74:e1:18:b8:98:84:92:4f:01:
                    71:d0:ef:4e:b7:c4:26:61:2b:04:5d:fe:43:bc:bd:
                    44:6d:c1:44:f1:b4:c2:a5:6e:90:c9:e8:ba:9f:ac:
                    6e:f0:c7:db:b6:76:63:cc:26:bc:c9:05:e4:7c:2d:
                    cf:95:ba:e3:86:66:e7:63:7c:bd:13:5f:ac:ba:91:
                    d8:dd:2c:6e:94:30:50:bb:98:b7:84:7e:0a:0c:c4:
                    bb:ef:38:d4:ee:4e:6c:0a:05:7b:dc:e8:bb:6e:c5:
                    73:b4:64:12:a9:f4:40:12:15:1d:19:99:51:69:51:
                    de:1c:bb:5b:12:1b:a8:77:ae:67:0a:e9:77:9f:01:
                    d6:0c:f1:3a:0f:ee:46:11:9e:3c:ba:2e:85:d4:7a:
                    42:9e:3c:dc:86:ee:af:6e:c7:bc:9a:25:e0:23:56:
                    05:72:52:c9:d6:4b:ef:9f:8b:ae:7d:8f:1d:9d:2d:
                    c6:10:88:a7:c1:45:27:e6:e4:0b:a0:8e:cc:fb:af:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:24:64:61:16:67:09:B0:43:A6:83:5B:9E:76:33:E8:BA:A0:55:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8a:8c:2d:90:9a:dc:d6:3a:95:7b:1a:08:c6:bb:fc:77:ee:
         6d:8c:5c:df:4a:f1:9b:f0:18:da:4c:f5:dc:7b:88:70:c4:bc:
         23:10:cb:a2:9f:31:58:7d:57:3a:ba:4d:6e:ba:02:4e:28:63:
         8a:92:35:51:09:f2:54:03:cb:e9:ab:7c:f4:5e:38:a7:fd:71:
         86:38:49:b8:ec:46:bf:39:70:4a:31:bc:10:1d:63:eb:5c:90:
         a9:2e:91:d7:b9:fe:72:32:39:78:f0:30:bd:ab:7c:63:95:94:
         ae:43:cf:69:10:76:77:45:78:35:11:ec:1b:48:2c:ae:d2:b7:
         b2:18:72:02:c8:87:7e:30:81:bd:4b:34:ec:d4:c9:fb:ae:6f:
         ea:d8:01:72:2b:73:1e:4f:83:4d:62:72:b8:f8:e8:69:03:23:
         ce:88:bf:fe:00:52:4d:a6:d5:e6:ab:e8:e4:39:55:74:db:1a:
         05:ff:e4:d6:0f:96:6e:eb:76:a8:8b:61:51:35:6e:64:d9:36:
         f5:86:04:53:fa:ae:fa:1d:cb:9e:6e:65:a1:6c:f1:2c:f3:5e:
         b1:55:82:c0:86:81:4e:e5:d3:06:fc:33:ed:72:63:cc:6c:27:
         4b:9e:30:be:b1:87:c6:f5:be:99:76:98:4d:ae:ab:61:9b:da:
         12:92:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:13 2026 by rpki-client