Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/c66c9209-421f-39c4-9438-3e3d6b2f69c5.roa
File:                     c66c9209-421f-39c4-9438-3e3d6b2f69c5.roa (raw, json)
Hash identifier:          C4u+WnnGHcMR4vdT5q4o3ujbX/d/tQ0IhxixyvFNujg=
Subject key identifier:   58:A9:E6:75:29:91:D0:38:7F:9B:6C:6B:33:6B:AA:E1:4F:33:E1:84
Certificate issuer:       /CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676
Certificate serial:       010D0C9F4328584EE22742DCA351392CE7357400
Authority key identifier: 58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/c66c9209-421f-39c4-9438-3e3d6b2f69c5.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     401942
IP address blocks:        23.155.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:42:dc:a3:51:39:2c:e7:35:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=f50827a2-5042-461e-9f5b-30d413f96dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:19:91:a3:d1:54:e0:0e:5f:e1:a2:ed:84:
                    14:a2:13:79:36:23:69:1c:44:ca:54:bd:c9:7c:4a:
                    70:a9:1a:b4:9c:e2:e2:d0:96:c1:48:11:c6:5f:14:
                    50:f3:43:20:e6:c8:f7:30:df:9c:a5:12:bc:96:37:
                    c6:bb:f6:77:00:ea:ce:02:fa:e2:65:52:84:9c:bc:
                    94:9f:64:2d:9e:4f:dc:98:d9:44:09:bc:ba:c4:93:
                    59:bb:f6:ef:09:bc:55:cc:62:2a:69:bb:ad:a1:ad:
                    ea:fc:de:7a:a8:53:aa:23:c4:39:b8:1d:12:3c:5f:
                    93:8c:3e:91:3d:cb:3c:8e:12:bb:04:1f:0c:f1:cf:
                    5d:97:4a:33:90:72:82:be:bf:04:f0:3b:16:1e:49:
                    aa:ad:3c:89:69:60:a3:1f:46:29:3f:66:4e:f2:bb:
                    fa:2c:33:0b:4d:7d:1e:28:3e:72:08:1c:bb:7d:58:
                    3d:e3:a2:f5:9d:85:d3:35:5f:ac:72:22:e4:f8:93:
                    4d:ca:6d:fd:b0:1c:90:9f:0c:e4:de:ae:6f:12:ae:
                    8b:65:f0:60:e9:3b:e0:2a:3b:5b:0b:99:19:98:43:
                    ca:be:9c:40:85:43:7b:ef:06:14:9b:3e:24:3f:55:
                    e8:d7:0c:f1:93:cd:52:17:84:b0:d0:5a:af:7d:7f:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A9:E6:75:29:91:D0:38:7F:9B:6C:6B:33:6B:AA:E1:4F:33:E1:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/c66c9209-421f-39c4-9438-3e3d6b2f69c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.crl

            X509v3 Authority Key Identifier:
                keyid:58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a9:f5:1b:de:af:e4:38:97:cb:5b:61:e8:cd:84:59:23:c6:
         b6:98:5e:ee:8f:1c:5a:de:af:d0:94:86:fc:f4:e9:87:93:8b:
         f0:5f:5b:a8:c7:f3:37:b3:e5:ed:97:bf:b6:cb:bf:5b:e0:e8:
         c6:5e:26:14:de:6d:c6:d7:ac:6e:c1:1e:2b:aa:81:4a:2f:aa:
         07:f4:84:bc:83:da:4c:8d:77:4f:24:bb:3a:08:f2:2c:f2:75:
         e4:30:76:9a:42:73:e4:71:8d:14:6b:4f:21:4a:1c:75:0a:bb:
         50:bc:f0:de:c2:7e:67:18:89:2a:51:ba:b7:41:f2:39:36:42:
         e9:cf:16:1b:7c:1a:b4:1b:d0:40:0d:b9:0f:fe:c3:c3:18:2e:
         f2:5f:52:86:ec:16:69:eb:b5:73:93:ba:09:7b:e2:47:1d:71:
         74:df:ec:98:00:78:da:a8:ab:b1:d4:d5:0e:90:ab:c4:39:16:
         13:f2:24:f9:8b:d9:e1:0c:44:0e:37:78:a7:8d:3f:0e:fb:9b:
         c2:91:cd:47:b9:ad:84:5d:68:42:f4:ab:bc:a0:34:e8:50:f7:
         12:65:5d:a0:52:41:93:bc:60:75:60:ae:e9:3d:bb:15:50:41:
         37:89:2d:4c:02:62:1a:cf:1d:f5:4b:45:77:0e:7c:d5:e9:fc:
         9c:5d:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:09 2026 by rpki-client