Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/020bd197-92f7-34a7-8834-cf913b23a02f.roa
File:                     020bd197-92f7-34a7-8834-cf913b23a02f.roa (raw, json)
Hash identifier:          Z5jOVT+1VGFo2XKL2u2yk4EGJwsN0x/6F23un2wUGVk=
Subject key identifier:   5D:1A:67:38:2E:B6:72:10:43:E8:68:FD:48:6E:96:F2:D8:4E:C1:A5
Certificate issuer:       /CN=050e47bb-bc0f-4540-9e2d-42e08982e4d3
Certificate serial:       010D0C9F4328584EA792726F4DB376897CC5BE00
Authority key identifier: 16:44:88:91:39:5C:8D:AD:E8:D7:18:F5:16:87:40:5C:2B:2E:8B:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/020bd197-92f7-34a7-8834-cf913b23a02f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7018
IP address blocks:        23.132.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/050e47bb-bc0f-4540-9e2d-42e08982e4d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/050e47bb-bc0f-4540-9e2d-42e08982e4d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:72:6f:4d:b3:76:89:7c:c5:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e47bb-bc0f-4540-9e2d-42e08982e4d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9e8da960-6bde-4a99-ba80-e1be22abd47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:d5:ad:28:fd:36:bb:1e:31:ce:6f:59:6e:
                    25:db:59:54:0d:b8:01:a6:6a:77:90:64:44:6e:08:
                    35:1f:c4:a2:f4:c7:c5:70:61:a0:0c:0f:97:42:8c:
                    df:9f:82:17:0d:10:04:0d:ef:2b:42:5a:32:d0:a8:
                    6e:c4:a2:b8:a8:d1:56:dd:78:67:6d:17:00:66:eb:
                    bf:15:74:9b:2e:0a:4c:67:5c:24:93:04:6e:a4:33:
                    d4:a7:91:8f:3d:6b:71:45:09:38:55:19:5b:da:1b:
                    ae:2f:2b:6f:f9:8c:a3:15:0a:7b:72:ce:51:9e:51:
                    c8:eb:7d:6d:13:65:21:d9:8f:57:30:55:73:f0:d5:
                    74:17:32:12:17:1c:27:fe:b6:71:dd:22:32:cb:14:
                    58:86:fd:2c:87:25:e8:a7:ce:72:05:14:ec:ca:9b:
                    d3:b5:69:4b:1c:ee:f3:88:16:c5:3c:f2:0b:cf:42:
                    8e:54:90:30:53:82:fd:d5:c0:59:b7:44:ff:ad:13:
                    3d:78:96:26:6a:ea:14:72:1e:72:1f:2e:40:32:d5:
                    1a:79:e5:0c:96:ae:bd:18:56:76:4c:fd:4c:0d:33:
                    de:d4:ea:b7:29:85:5e:71:4f:98:61:c2:8f:6e:3a:
                    f8:cc:bb:a4:17:fc:99:09:d2:bb:d0:1b:3e:6d:5e:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1A:67:38:2E:B6:72:10:43:E8:68:FD:48:6E:96:F2:D8:4E:C1:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/020bd197-92f7-34a7-8834-cf913b23a02f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/050e47bb-bc0f-4540-9e2d-42e08982e4d3.crl

            X509v3 Authority Key Identifier:
                keyid:16:44:88:91:39:5C:8D:AD:E8:D7:18:F5:16:87:40:5C:2B:2E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:42:7e:4d:e2:d3:f6:b2:d9:cb:a7:c7:da:69:14:b8:82:63:
         80:8f:c3:0c:4d:fb:a2:1b:57:13:f7:3a:e6:77:b0:ad:d8:11:
         6f:09:9e:30:ca:e2:e1:f2:08:34:41:e7:46:1f:c0:88:39:c9:
         fc:4b:16:ab:8c:6a:5e:0a:9b:26:55:93:0d:ea:99:49:f6:e3:
         7a:d2:6d:bd:43:09:0c:aa:c6:71:3c:40:81:ff:34:bb:3c:54:
         f1:27:ca:1d:f0:dd:42:bd:87:34:5a:dd:a0:69:88:f0:ca:a1:
         3c:a2:bb:28:42:2b:fb:ab:7b:47:b4:42:e4:b8:62:80:25:08:
         eb:88:4d:59:2e:2d:c4:93:77:9c:3c:62:1e:e2:43:e4:ae:5b:
         1d:f0:34:c0:de:d2:6e:1d:63:5e:b7:f4:2b:0c:8f:01:4b:a7:
         c1:48:e4:ae:67:49:0c:4b:cd:2c:34:62:72:0a:39:43:82:bb:
         70:38:ce:b7:75:a6:51:3c:a9:cc:02:6c:37:a3:ad:ae:a3:de:
         50:02:f6:02:ef:4e:b7:93:69:b7:36:d1:1a:2c:6d:19:58:ce:
         16:b4:83:7d:d0:fe:1f:5e:9f:24:4a:0a:7a:fe:88:dc:f4:12:
         ec:e7:43:d4:a7:55:f1:9b:88:d3:dc:0b:0c:bd:e1:e1:0b:46:
         b2:68:61:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:27 2026 by rpki-client