Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa
File:                     d0e88601-8d43-3d7d-8163-2756a51593f0.roa (raw, json)
Hash identifier:          4xshEMjhplv5MraMJEiaGJ0cJYmWmNjZ9qjV7I21Skw=
Subject key identifier:   7E:AD:E3:C6:BF:5B:40:42:3D:50:87:E5:69:61:1C:BE:60:2B:E7:D5
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C75A115C69344861813100
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     396362
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5a:11:5c:69:34:48:61:81:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=7ac4c16e-1fa5-43d8-a662-f14adcae9c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:88:68:45:46:9a:d9:c7:28:f1:ac:7a:40:
                    1a:45:a4:ce:7a:33:b5:e0:ee:5e:d7:b0:65:21:26:
                    6a:7b:40:4c:f4:22:09:1a:7b:65:ac:c7:ba:db:e7:
                    34:86:43:93:ab:1c:a3:ef:df:c0:e7:d9:d8:84:d0:
                    15:ca:0f:9d:d6:f2:16:67:d9:be:27:91:bb:dc:e5:
                    3e:25:50:32:91:e9:25:49:41:91:38:7d:ac:6a:1e:
                    db:d7:f6:43:41:ee:d4:d4:2b:d6:8b:ea:bc:4c:db:
                    b5:1d:d7:2b:f8:ca:2d:0c:c8:88:c1:fd:ef:51:81:
                    03:f5:6f:3f:2c:97:86:5e:57:36:7e:1f:a2:be:ee:
                    89:8e:15:e3:3a:74:b4:69:fb:be:f6:a2:f8:cd:e6:
                    4c:6e:c6:1a:11:d6:05:e0:95:7e:d3:53:db:e8:17:
                    21:93:6c:f5:9e:9a:68:64:8c:a8:69:2d:94:25:4b:
                    46:bd:20:bc:ac:f9:98:96:5b:34:be:40:27:cc:9f:
                    bc:5c:30:01:13:23:76:62:0e:bf:40:4f:7a:ee:0d:
                    2a:2f:7e:d6:7b:b3:cc:12:75:14:82:7f:65:0f:12:
                    77:86:3c:73:9a:b6:d7:8c:45:00:15:19:40:93:32:
                    f1:08:e4:07:07:8a:51:82:6b:f1:99:8e:25:79:f1:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:E3:C6:BF:5B:40:42:3D:50:87:E5:69:61:1C:BE:60:2B:E7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:d8:e8:84:27:c1:34:f7:34:11:4e:e5:71:fa:16:75:39:47:
         57:1a:80:38:fa:3e:75:1f:48:af:e5:2f:00:47:0a:ac:a5:45:
         83:cf:5a:0c:5e:ab:ec:89:6a:b0:40:24:ca:ca:ff:8f:60:eb:
         d5:83:64:5a:f8:08:36:e9:b2:64:ca:d6:fa:57:f9:73:fe:ee:
         b2:b3:1a:4a:8b:fe:b2:34:78:98:5a:2c:a0:a4:17:13:e9:45:
         b9:79:0c:8c:b4:26:b8:27:39:a7:ef:99:73:75:bd:7d:97:2c:
         c7:f6:b4:91:ef:86:90:e5:42:87:c8:93:12:02:08:0c:01:7f:
         3c:69:af:c5:ef:1b:59:07:ed:a2:06:cf:93:4f:15:bf:51:81:
         25:c8:7b:fb:95:fb:d6:49:bc:80:de:21:2d:dd:e5:b5:3f:35:
         7f:59:f1:da:98:66:40:6c:3a:fb:f2:61:d8:74:13:a8:81:c1:
         b0:50:ac:a4:57:a2:7e:a4:03:3d:6d:66:89:7d:9e:0f:6d:c7:
         6a:46:2e:34:1b:4c:f9:21:a7:6e:a2:db:02:6d:40:42:fe:6f:
         44:59:64:57:29:f7:dd:a6:37:3c:ba:e2:ff:d3:73:5a:84:18:
         31:35:5b:b1:a7:a5:ae:48:8e:03:cb:76:3e:9b:0b:83:c1:0b:
         76:6f:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:23:54 2026 by rpki-client