Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa
File:                     d6700884-10a1-34b7-9970-7d3f38008d31.roa (raw, json)
Hash identifier:          Vy7s8ZDs3z8i9wt49rUgayzzHK3HjIrqx5TJZNVvKdw=
Subject key identifier:   79:03:0E:C4:4E:32:1F:4E:E2:A6:65:10:2D:24:00:3A:6F:E8:DE:1E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7204BF6C4E0F3EA5B61B4900
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     62904
IP address blocks:        23.231.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:bf:6c:4e:0f:3e:a5:b6:1b:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=e2814572-e612-461b-bc21-1a68314391d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8e:b9:22:81:a4:5a:c2:a9:9a:c8:c3:ac:c5:
                    ce:40:79:a1:13:40:21:bc:dd:04:ce:05:8f:84:94:
                    e5:63:0f:4d:84:10:01:c9:45:e2:cf:04:c2:85:0e:
                    dd:5e:0c:a6:2f:88:ac:56:39:3c:bf:3c:37:4b:37:
                    52:7b:ce:92:57:ff:f2:4a:92:da:78:dd:4a:e9:00:
                    4d:36:9f:75:4a:fd:92:23:29:e2:38:46:fa:ae:aa:
                    a9:5d:5f:df:8e:43:39:15:1e:f2:89:4a:ab:64:89:
                    b8:a4:a9:fb:6a:64:f2:a8:8b:73:a9:1c:25:03:dc:
                    e3:3a:f2:c9:1d:0d:e5:50:05:96:0b:a5:ac:db:54:
                    d0:1d:8d:b7:f0:48:04:62:e8:a4:20:2b:aa:9f:23:
                    da:9e:e2:52:16:d0:0d:57:b6:4d:da:4a:e1:88:30:
                    08:0a:24:e8:3a:ad:8a:10:6c:6b:a8:f3:e8:96:49:
                    5d:53:45:39:1f:f8:f8:4c:2f:68:62:83:5d:02:90:
                    a5:b1:d7:af:a9:a3:32:37:45:f5:15:f7:29:26:53:
                    0f:ea:89:89:75:37:87:54:5d:47:c3:10:c4:25:15:
                    16:e8:37:16:12:43:f1:23:34:c8:ef:f2:15:ab:f7:
                    d6:91:ec:1b:14:1d:b8:8d:bc:f3:5a:b3:d9:02:3f:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:0E:C4:4E:32:1F:4E:E2:A6:65:10:2D:24:00:3A:6F:E8:DE:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3c:57:cf:f7:46:8e:db:02:39:b4:38:56:f5:29:3f:db:fe:
         93:83:a7:ee:84:ca:4b:64:2f:c7:cd:e4:5d:b5:9c:6f:f6:2b:
         3d:36:17:b4:ff:ef:54:60:a0:81:e9:81:b9:83:14:78:2a:bd:
         c9:6a:20:48:18:43:f8:eb:1b:99:44:38:da:08:10:c6:36:d6:
         3f:d6:8a:c5:64:f3:8d:66:83:ff:ce:6d:d6:80:ca:03:b7:01:
         ca:cb:56:2c:6d:13:08:6e:7e:8e:1d:37:65:8d:5d:a9:ec:f7:
         62:df:65:f8:46:cc:35:39:a1:d0:ca:d7:fb:13:a2:4b:d5:24:
         ac:bf:02:c5:3c:0b:80:92:ce:42:aa:71:31:99:b5:79:f8:11:
         42:6e:2c:d8:04:8e:aa:02:45:47:2d:23:4f:49:1d:43:d3:5d:
         3c:a0:90:fc:72:92:01:d2:df:5d:71:84:78:0f:90:e9:d2:8a:
         59:88:ed:52:fc:42:9b:bb:48:2c:d5:aa:4e:52:ab:04:7a:72:
         5b:73:f6:13:ff:a9:b5:ae:1f:41:f2:12:2f:74:14:a9:da:68:
         2f:2c:f1:15:23:b8:60:7a:39:73:de:a7:8f:5f:ff:dc:09:a8:
         1a:3b:2f:37:69:ed:8b:4b:02:05:37:3f:a0:4f:45:d2:3c:98:
         ca:a8:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:29:40 2026 by rpki-client