Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ec611dd2-d3ab-3a31-8ca8-6725aac97670.roa
File:                     ec611dd2-d3ab-3a31-8ca8-6725aac97670.roa (raw, json)
Hash identifier:          aXwiAA4fsEZExrDKeH6oVyJNoj54d90bv3THS9FAE5A=
Subject key identifier:   A7:5C:FB:23:AA:EF:3D:32:B6:C9:08:F4:48:45:BF:30:25:7E:32:66
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C759DDDE3022FBD1D20680
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ec611dd2-d3ab-3a31-8ca8-6725aac97670.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     28753
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:59:dd:de:30:22:fb:d1:d2:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=4bcbd90a-08d4-4cf3-89b2-f4b38f384f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:a7:3c:b4:ec:64:0e:27:50:4c:93:06:ff:
                    43:2b:c2:3e:d3:4b:86:51:17:db:96:dc:20:4e:83:
                    77:f0:07:65:92:c3:9f:be:92:64:d2:d5:2b:dc:f6:
                    91:4a:9c:73:ee:f7:be:98:3c:fa:e9:68:e8:4d:2c:
                    50:ff:de:fd:80:e7:9f:40:22:a3:04:83:88:53:81:
                    26:9d:2f:63:2b:b2:8d:51:67:e1:40:44:5b:ba:38:
                    62:bd:5c:96:d3:3d:d8:f5:e8:45:95:68:c8:47:d2:
                    da:05:93:02:e8:f3:e8:16:5a:2c:cf:44:7d:c2:1f:
                    0e:ec:a9:f1:03:71:d7:5a:4e:22:cd:cb:78:32:19:
                    a3:f5:be:01:26:b2:08:4b:7c:88:2b:70:4a:ef:b1:
                    45:d6:ce:74:4f:21:e1:74:57:85:75:64:3d:0d:48:
                    5e:04:a2:5a:f4:7d:65:4d:1c:d0:a3:60:d8:e1:9a:
                    9a:32:b4:ee:66:65:36:04:85:90:2e:c3:d1:4d:2e:
                    6e:07:70:61:d1:53:05:4a:c2:b5:ff:be:77:d1:ac:
                    20:28:2d:87:dd:1f:e0:fd:4a:e7:14:02:6b:23:b7:
                    fb:eb:3d:fe:27:14:55:4d:bc:5d:9e:90:6b:59:bf:
                    17:54:de:1a:b2:3f:59:a0:a9:1c:9a:09:a2:35:18:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5C:FB:23:AA:EF:3D:32:B6:C9:08:F4:48:45:BF:30:25:7E:32:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ec611dd2-d3ab-3a31-8ca8-6725aac97670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ee:08:59:04:a3:2c:5f:8a:24:7b:fe:98:d2:d9:1e:ca:57:
         d0:65:bf:ff:29:94:ac:65:10:81:a7:72:12:d4:57:d8:da:a9:
         e0:ec:fb:be:fd:28:64:66:c2:65:e5:ff:2e:b2:15:ce:1e:d1:
         45:3b:97:b6:99:77:ac:99:22:64:b3:df:56:fa:d8:58:85:b7:
         5e:22:c3:cc:b6:80:10:d9:3b:c3:8e:d4:79:1f:2c:e8:d6:41:
         11:55:0e:6d:c0:2c:28:1a:4e:8e:c3:4e:78:1e:25:55:cb:58:
         d3:a8:15:ba:10:d4:6f:86:45:f1:9e:9b:21:73:13:f8:10:0c:
         a1:30:8f:9c:37:3c:7a:aa:02:aa:51:04:e4:e5:07:da:fb:8b:
         01:c4:8a:35:7a:bc:2d:8b:fa:6a:28:54:7c:f6:91:91:b1:0b:
         cf:14:8d:ca:bf:0a:15:e4:2a:69:7c:a2:30:0f:f7:6a:84:ac:
         93:62:5f:b8:fd:2e:ad:e1:50:1c:1c:95:1c:8b:30:c9:fb:79:
         4b:d1:93:b7:c0:95:d7:0e:44:04:64:94:c2:28:98:75:ff:fb:
         e6:5d:e8:91:db:f8:93:f2:4c:b7:10:45:90:02:80:ac:19:33:
         c7:15:67:db:6f:d8:59:9c:13:cb:7f:7f:60:f4:fd:c8:93:47:
         a0:f4:20:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:45 2026 by rpki-client