Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/9cdbc979-32b7-3767-b223-c4de9565be2e.roa
File:                     9cdbc979-32b7-3767-b223-c4de9565be2e.roa (raw, json)
Hash identifier:          FeQByjCO9DZKHm98FT+c6rJNg81Si5et7JQCnrEm+DY=
Subject key identifier:   16:64:31:6D:45:8E:20:10:A3:E1:5C:94:1C:ED:77:A6:EC:59:E4:89
Certificate issuer:       /CN=fdcd44d1-5710-43a1-847c-fc86cb51a82e
Certificate serial:       010D0C9F4328584E428F2A43EE514ED4F6331700
Authority key identifier: FD:8A:89:B2:E7:14:FB:DE:FB:09:FF:8B:B4:FE:24:BF:EF:90:F2:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/9cdbc979-32b7-3767-b223-c4de9565be2e.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     402173
IP address blocks:        23.152.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:2a:43:ee:51:4e:d4:f6:33:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcd44d1-5710-43a1-847c-fc86cb51a82e
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=58781276-f669-4c04-acac-e7fa1033df75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:07:37:9f:95:13:b7:c4:40:0d:8c:7a:76:
                    fe:b9:ee:5e:ef:d4:94:5d:fe:0f:7f:c1:3c:c9:8a:
                    e7:2d:95:c6:f9:b1:31:a4:b9:1f:5d:8d:c1:14:10:
                    99:ac:9a:13:e7:d5:39:c3:98:12:1f:9b:ae:eb:64:
                    6a:3c:1a:db:b2:e4:d4:1a:26:6c:03:80:d4:ee:4b:
                    02:75:5f:be:41:79:ec:04:ba:bc:aa:62:4d:2d:96:
                    f4:a8:ef:26:0d:a9:9c:f7:39:17:2d:b3:14:be:03:
                    64:69:d4:01:ea:ad:38:da:86:e4:7e:af:24:1f:85:
                    89:63:6f:f5:ae:7e:73:65:23:21:ea:6f:75:f7:fc:
                    77:2d:b6:77:4b:08:2e:f4:c4:7d:e3:12:0c:11:0d:
                    35:f9:3d:4b:78:4b:79:79:b6:4a:5c:85:bb:74:d8:
                    19:fc:17:13:3f:3f:3b:8e:f7:36:eb:2f:b0:68:7f:
                    98:34:6e:47:9e:c7:f1:42:c3:41:a3:40:75:74:d1:
                    da:41:bf:3b:84:a4:52:b4:26:8f:41:8c:4d:ed:70:
                    2f:98:c2:26:32:1a:2b:62:14:89:7c:76:05:e4:f3:
                    2d:92:85:69:1d:5c:58:73:24:93:55:f7:35:77:e1:
                    e0:66:97:cd:08:48:be:a4:2d:f6:05:d4:c5:ec:ec:
                    a6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:64:31:6D:45:8E:20:10:A3:E1:5C:94:1C:ED:77:A6:EC:59:E4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/9cdbc979-32b7-3767-b223-c4de9565be2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.crl

            X509v3 Authority Key Identifier:
                keyid:FD:8A:89:B2:E7:14:FB:DE:FB:09:FF:8B:B4:FE:24:BF:EF:90:F2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fa:27:48:e7:f0:b9:41:2f:61:4a:32:3c:9b:de:24:74:00:
         f4:43:db:7f:fb:4d:cc:6f:cb:1e:61:17:9a:28:94:54:52:95:
         9d:40:c0:97:5a:10:38:e0:f1:29:df:44:31:f4:52:72:fd:6b:
         ba:bc:9f:cb:3c:83:44:b2:06:ad:bb:7d:f1:cc:ef:43:64:37:
         61:1c:80:c4:c9:d9:c8:6c:30:f6:b3:c6:e5:aa:ec:54:4a:0c:
         6b:fe:7b:69:f2:70:14:0f:17:9e:34:f7:da:72:aa:73:aa:77:
         2f:86:f5:21:e7:f6:e8:b0:9a:3b:8f:56:da:fc:2e:4c:e2:89:
         94:bb:5e:7b:ee:53:70:55:da:ea:6a:34:54:ba:ac:34:8c:11:
         23:a6:2e:bc:f0:e2:6f:06:87:80:b5:f8:3c:7f:be:9d:93:8e:
         32:d2:c0:c9:25:b5:c7:a5:3b:10:d7:e1:a0:14:f4:44:e5:ea:
         ed:b3:33:2d:b4:fe:81:63:67:3e:ef:c6:cd:4f:ea:f0:46:4f:
         24:72:c1:7b:72:e2:ae:f3:fe:22:3e:ba:31:df:04:bc:98:ba:
         31:94:34:13:29:5b:20:0a:d6:d4:36:1d:ac:cc:ed:cf:e2:82:
         2e:fa:7f:6a:06:2c:52:83:4b:9f:ed:8a:01:0e:3e:72:d0:e4:
         d5:58:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:11:34 2026 by rpki-client