Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa
File:                     f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa (raw, json)
Hash identifier:          DOLNfuqsjFRx8iztxqDdUvhRUNQdFAavAIDTmAfEbHU=
Subject key identifier:   ED:42:20:1B:A1:87:15:B6:9F:85:71:74:BA:E2:71:6E:89:2B:49:98
Certificate issuer:       /CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
Certificate serial:       010D0C9F4328584EC4D70D204901EC7D1C5DEE40
Authority key identifier: 8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     401736
IP address blocks:        23.142.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0d:20:49:01:ec:7d:1c:5d:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=a09d16da-4b45-4bc2-8d45-7c27d43d6a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:d7:fc:68:3b:df:81:1c:7f:0b:11:19:3c:
                    13:19:6a:41:d4:16:89:cd:5c:2d:b5:a1:e4:be:65:
                    71:05:e6:59:e8:36:af:c6:81:8f:ef:94:7d:a7:22:
                    41:c3:bf:c7:64:5c:68:31:94:a4:fa:c8:64:94:a3:
                    6d:39:4e:e8:20:22:6e:e4:b1:aa:0c:3b:48:00:b2:
                    fc:18:5a:8d:c2:8c:bc:cf:2a:34:0c:46:15:87:aa:
                    6f:3f:7b:80:b1:5b:a7:d4:25:a0:45:a3:c0:08:f9:
                    79:ed:37:04:5d:11:e2:83:c2:a5:c9:34:3e:85:1a:
                    04:b8:fe:1b:9b:1a:d5:14:d8:07:45:db:7f:18:9f:
                    dd:b3:04:4a:e5:9c:23:94:1f:3e:0e:b8:ad:85:34:
                    15:50:0b:09:6e:78:3c:76:8b:e0:21:7a:4b:7a:8c:
                    02:1b:9e:5e:2f:33:d2:28:47:0f:a3:f5:12:c1:78:
                    72:0b:9d:a3:21:f5:40:8d:b2:dd:31:7d:61:83:c6:
                    0b:b8:0f:88:ff:1c:73:f8:5d:ce:a4:70:e8:7c:04:
                    b3:bd:6d:b6:be:14:89:f1:a1:33:25:69:cd:5c:3e:
                    96:a5:9c:5e:2e:a1:41:97:14:9a:f1:d9:17:ac:30:
                    0a:fb:e8:3e:3c:4d:fa:8e:16:b4:35:cb:22:46:c1:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:42:20:1B:A1:87:15:B6:9F:85:71:74:BA:E2:71:6E:89:2B:49:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl

            X509v3 Authority Key Identifier:
                keyid:8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:af:49:72:68:92:3a:cb:ec:10:dc:d4:5e:05:0e:40:50:5f:
         d6:a1:e4:c4:60:94:c6:41:08:a9:7b:a5:a8:f3:bf:bc:4f:ea:
         df:33:c7:1b:d8:2f:65:90:47:2c:2d:22:24:78:ae:9d:77:9b:
         39:cf:c3:79:cf:f4:4d:09:28:2c:32:da:a2:5e:01:d1:bf:d6:
         5d:70:72:53:c8:0e:00:5a:9c:e9:ef:e7:9c:e4:08:31:6c:2e:
         06:ca:ea:d9:9f:8e:a8:dd:15:79:59:0a:c3:01:5a:48:f7:65:
         dd:bc:78:26:59:95:b4:18:e3:91:52:f7:a7:f1:cd:da:37:36:
         cb:4c:6f:9f:6e:7a:22:8a:0b:5d:87:9e:d7:b9:8f:ab:c5:8f:
         79:c9:fc:66:2a:51:19:20:a2:65:7e:07:a5:32:29:42:53:c3:
         a6:e2:14:e8:53:e4:5f:a7:39:7f:47:cc:81:fc:8b:ae:50:e7:
         96:0a:56:13:48:ae:f7:e3:c0:74:dc:25:2e:bb:96:6f:2a:97:
         15:2d:17:95:8b:22:76:66:8d:87:cd:51:58:a5:06:c1:54:d8:
         49:dc:49:af:79:23:7b:ba:ce:28:29:8f:fd:e8:2d:25:00:e7:
         3e:28:04:11:13:04:76:df:ef:06:dc:db:d4:5d:7e:55:b2:21:
         09:f7:27:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:47 2026 by rpki-client