Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ead5ff18-6f5a-3fa5-bc6f-1b90cb052fa8.roa
File:                     ead5ff18-6f5a-3fa5-bc6f-1b90cb052fa8.roa (raw, json)
Hash identifier:          p1uH1UR+gQ4aUZEOWQmjKsbq8NaWDGsuyezqcZgKaV0=
Subject key identifier:   43:BB:41:62:94:B4:27:DA:A6:9A:FE:E1:07:11:58:ED:BD:5E:B5:62
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB9C3FE481A17E6A93A5CEF00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ead5ff18-6f5a-3fa5-bc6f-1b90cb052fa8.roa
Signing time:             Tue 04 Aug 2026 13:47:58 +0000
ROA not before:           Tue 04 Aug 2026 13:47:58 +0000
ROA not after:            Mon 02 Nov 2026 14:47:58 +0000
asID:                     7203
IP address blocks:        23.19.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:c3:fe:48:1a:17:e6:a9:3a:5c:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 13:47:58 2026 GMT
            Not After : Nov  2 14:47:58 2026 GMT
        Subject: CN=3c6f332d-f405-41da-9c74-fabe0b40c6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:d9:65:d3:03:0f:b6:97:52:3f:00:d1:1a:
                    af:c6:92:55:09:64:ce:82:0f:66:32:a6:8c:c5:29:
                    f1:1f:34:ce:3b:93:77:d1:b8:96:88:00:82:ea:11:
                    6d:70:24:4d:1e:25:ce:5f:97:b2:32:07:b0:33:aa:
                    13:0c:e9:cd:e6:ed:ad:d3:f5:46:8c:45:6e:cd:16:
                    c2:d6:ee:dd:7b:d6:3e:77:90:23:10:44:9a:9b:f3:
                    2b:ef:68:9b:97:62:42:a0:91:d0:e7:0e:fa:5f:05:
                    34:89:4c:61:a6:d8:ad:83:25:7f:cd:07:ce:59:d5:
                    53:fd:e3:ac:aa:6d:f7:31:09:83:8e:a3:f6:d8:1b:
                    dd:7b:c3:52:50:e7:ec:24:f2:26:c0:63:47:a9:4e:
                    a7:34:98:a2:18:89:a8:e3:50:b4:07:98:68:4b:40:
                    45:52:c4:60:57:00:a4:3b:c5:62:0d:ea:84:3a:49:
                    b7:90:07:12:35:bf:91:38:1f:83:0f:25:c0:33:c9:
                    d1:52:ac:52:6c:14:10:fa:e9:32:0d:f6:a3:27:b8:
                    c5:d0:51:b0:ed:0c:53:b8:9b:76:fb:28:08:c7:1b:
                    32:df:ef:4e:a8:5a:ca:2f:48:b3:1a:5c:3f:c0:29:
                    14:1f:a4:af:26:b2:ed:46:54:cb:cd:92:f0:68:22:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BB:41:62:94:B4:27:DA:A6:9A:FE:E1:07:11:58:ED:BD:5E:B5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ead5ff18-6f5a-3fa5-bc6f-1b90cb052fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:e0:3f:b0:36:f0:b9:08:81:1c:50:12:7b:a4:65:15:47:
         79:c4:e5:b9:a5:14:59:49:78:83:21:f5:62:a5:96:a2:66:56:
         7b:56:9e:0d:20:67:e3:c8:72:21:92:f4:d1:bb:63:7f:75:d3:
         58:2a:a1:87:77:4a:93:dd:d1:e2:6c:1b:6f:cb:ec:28:03:e9:
         cb:54:2e:03:29:85:86:29:74:de:64:6b:52:91:cd:c2:e4:e4:
         64:a9:6e:08:a8:d0:57:c0:3a:ff:cf:6f:1f:74:b3:03:cc:b9:
         91:a6:af:ec:81:fd:10:b8:ed:05:30:39:44:bb:c2:88:74:7a:
         9d:48:7d:3b:e5:68:0d:27:58:eb:20:ec:c2:92:fc:0d:4d:4e:
         8d:af:71:b3:13:aa:fd:c3:eb:73:7b:77:fd:8b:d9:98:15:3b:
         20:8e:f1:28:09:40:4a:79:75:dc:a4:81:5f:0f:ea:34:e2:6c:
         95:d3:58:73:cc:ef:d3:10:47:a6:50:5c:64:5f:d3:7c:62:04:
         3c:6e:a5:13:d5:bf:f1:75:b1:bc:a8:39:40:ef:ca:a0:e1:6f:
         69:d2:88:c3:f4:dc:92:02:89:b2:c2:40:1d:09:6a:c4:74:de:
         38:2a:25:08:f8:05:56:7f:ce:13:e2:ab:3f:40:38:46:4f:43:
         05:b1:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:37:53 2026 by rpki-client