Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa
File:                     2411b844-923f-3fc3-b7ea-3b446b9cd500.roa (raw, json)
Hash identifier:          UdtapbWhi/z52bechyWOCp3tAV9Z4IfIEH0r3RnHkdc=
Subject key identifier:   6E:9B:EE:8E:21:71:D8:25:5E:08:52:A8:B1:FF:98:20:5D:69:22:3E
Certificate issuer:       /CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Certificate serial:       010D0C9F4328584EA78F18EDA44914CC51A0E680
Authority key identifier: 6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22665
IP address blocks:        23.190.200.0/24 maxlen: 24
                          2602:fb6c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:18:ed:a4:49:14:cc:51:a0:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=043447b7-464d-4d29-9d03-13d433108088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:fc:0b:b4:40:b4:51:c7:dc:b2:43:4f:ac:
                    5b:e1:18:f8:45:22:5d:d8:67:ab:2a:27:ff:49:8b:
                    29:bc:c0:fb:08:63:b9:4f:fb:8a:e9:95:61:12:fd:
                    cd:bc:68:d9:de:e2:73:6c:3b:a9:8f:4c:49:36:ce:
                    c3:37:c4:31:88:9f:91:0b:b8:a8:58:07:52:bd:1d:
                    45:00:2f:b3:c4:9b:6f:fa:51:cf:9e:29:08:f7:2d:
                    ab:be:f2:e0:c0:23:57:22:b7:30:03:ce:69:03:b9:
                    1d:57:90:e8:1c:e1:76:32:ce:0e:a5:b6:34:d9:2b:
                    7e:ee:6b:8b:89:3f:8d:2f:66:22:ba:c9:26:91:c9:
                    04:5b:64:5e:c9:3f:5c:8a:07:27:8a:ca:84:7f:56:
                    0c:14:71:58:6b:05:73:a0:23:a1:e2:27:8a:13:dd:
                    a7:f1:e6:84:e5:cb:ed:8a:b4:4e:00:8c:6f:73:2a:
                    a2:9c:7c:e1:cb:42:1c:16:49:85:6e:98:6a:9a:a7:
                    a2:18:49:30:0c:8b:35:27:c3:a6:63:e1:59:e6:3c:
                    5b:06:ae:ee:45:48:85:35:84:f2:11:0e:77:1f:0a:
                    fb:2a:b3:39:32:b0:a5:dc:30:45:04:9c:29:81:44:
                    38:33:d3:bc:c9:d4:56:18:ac:5b:bb:5f:5e:63:2b:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9B:EE:8E:21:71:D8:25:5E:08:52:A8:B1:FF:98:20:5D:69:22:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl

            X509v3 Authority Key Identifier:
                keyid:6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.200.0/24
                IPv6:
                  2602:fb6c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:ee:c5:94:68:4e:75:2a:7f:2a:a5:49:e3:73:02:17:16:
         1f:25:76:6d:64:40:35:49:c1:67:7d:a9:30:0d:28:27:9f:04:
         5f:5f:fa:19:b0:42:f1:af:58:e5:a8:cf:31:83:88:ef:18:f2:
         62:aa:0c:72:15:e7:a5:02:57:3e:1f:8e:58:2b:13:8b:2c:34:
         9c:43:2f:43:2a:c1:08:ce:96:79:50:b6:7d:3b:77:a7:03:8b:
         89:f5:2e:37:a2:ec:e9:0b:b9:07:bf:65:b2:43:43:7b:85:8e:
         ab:46:f9:13:b5:df:6a:a2:03:f4:c0:90:13:32:3d:f8:97:aa:
         81:d1:6d:4d:02:78:9a:e1:53:fe:7b:71:ba:64:b0:93:5c:fa:
         a4:60:d4:66:22:6e:fa:7a:77:05:bf:2b:ae:3f:96:88:a1:3e:
         9a:c7:f0:7e:c5:5f:99:54:24:fa:53:54:6c:67:d2:69:5d:23:
         de:b9:3a:ad:83:23:fa:af:01:4b:4f:73:f6:84:a2:ea:1c:db:
         29:70:dc:e8:0c:be:9b:c9:15:52:98:a4:bf:cf:5a:82:c2:7b:
         74:99:56:2a:aa:f6:98:97:dc:f4:e0:aa:75:19:63:8b:65:31:
         ac:6e:2e:a9:6f:bd:3a:be:10:cc:b9:15:a7:0a:2d:b1:e5:d9:
         a4:09:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:43:26 2026 by rpki-client