Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa
File:                     a7d20787-ab53-329d-990c-d091714ed0e7.roa (raw, json)
Hash identifier:          bNVjYCEjc7VboyxM/1W5G6k8vtGKKNOqEwCeUDVm6vY=
Subject key identifier:   E3:A6:A4:7D:2D:56:EC:0A:16:6A:A4:FF:A5:2E:E5:C1:6B:A8:FF:03
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584ED9C74016DE83C17160E55680
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     25655
IP address blocks:        173.241.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:40:16:de:83:c1:71:60:e5:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=fa7ae06c-a418-427a-b53a-5a18300162b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d4:23:bf:6a:71:32:45:c7:a5:87:88:0e:9b:
                    62:ed:73:fe:f0:f0:01:2b:6b:a4:c0:49:02:79:ad:
                    83:b0:07:a6:70:cb:ab:06:0a:b9:31:14:b6:92:0d:
                    cb:f2:05:cf:7d:16:f3:15:dc:6f:f8:74:7d:93:1a:
                    cd:89:46:5c:db:f6:e1:9a:43:ff:7a:86:2b:42:4b:
                    74:9d:06:e3:39:a2:ba:8c:29:d1:6c:d8:df:ab:39:
                    0d:37:9c:5c:37:be:f0:6e:ce:34:1e:a4:54:2c:07:
                    24:50:18:c3:9b:5a:6d:52:3f:db:13:16:d6:f1:f6:
                    48:24:30:3f:06:f1:45:bd:e8:d8:33:02:89:a9:ea:
                    37:c9:3d:ce:be:db:44:f6:91:31:88:1e:bb:c6:fe:
                    69:45:ae:bf:ef:ef:3e:2c:7b:40:f3:ad:d0:58:a4:
                    1c:9d:9c:00:90:fc:31:fe:f9:90:5a:d8:fc:93:e2:
                    45:92:03:17:3f:e7:32:1a:4e:0f:70:24:57:c4:51:
                    9d:e6:fa:b2:6b:3d:15:ef:89:c8:e1:77:9f:dc:b4:
                    0c:5b:1b:ab:d4:02:f2:a3:a4:87:89:38:d6:74:83:
                    81:09:d2:63:b4:26:3b:13:ba:37:b0:d8:d5:a1:80:
                    95:92:0a:d5:05:3d:a7:0d:9d:75:eb:ba:c4:95:3c:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:A4:7D:2D:56:EC:0A:16:6A:A4:FF:A5:2E:E5:C1:6B:A8:FF:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/a7d20787-ab53-329d-990c-d091714ed0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:20:14:87:09:1f:aa:3f:15:8f:b6:3e:bd:d3:15:f8:f4:d3:
         2e:99:4b:a5:e6:96:10:54:4c:2f:7b:91:62:09:11:cb:77:2b:
         66:0a:db:97:14:97:41:ee:db:ce:99:70:0a:98:f9:9e:b0:6b:
         44:61:d3:23:30:ba:a1:66:54:7f:3f:f8:e7:c5:13:da:1c:72:
         7a:33:aa:0a:b8:5f:63:ce:5f:b4:aa:30:80:16:a6:3e:c4:68:
         2c:72:17:5f:e6:a8:6c:4f:0e:55:c0:54:cb:78:87:86:ee:5a:
         79:ec:2c:fb:1b:34:35:87:c6:60:ec:44:28:04:b2:b0:59:ec:
         31:9c:bc:0f:0b:27:c9:32:09:95:2a:b1:9d:3f:22:a6:8b:b8:
         6d:c8:c1:93:6e:3a:0f:a6:21:75:5e:8b:31:b7:91:3c:88:1f:
         76:16:e4:59:65:60:91:53:71:50:e4:cf:9c:69:66:3a:e0:4c:
         1f:90:fa:73:4c:ec:02:75:75:40:6b:be:37:87:33:ab:d8:f0:
         6a:c5:f5:e4:17:d9:bb:ab:4f:d9:3e:0f:1a:1b:23:d0:21:fd:
         f9:83:02:dd:6e:e7:1c:90:09:b5:fa:44:c7:10:a0:7f:a0:77:
         15:a6:b9:90:6e:48:a1:68:a6:3a:f9:dc:3f:38:6e:10:94:fd:
         28:78:ac:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:38:13 2026 by rpki-client