Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/200a5c8d-d404-3d6b-acc5-028b145c4c28.roa
File:                     200a5c8d-d404-3d6b-acc5-028b145c4c28.roa (raw, json)
Hash identifier:          KHj+/k8z8L+EkKKMvYW8KFwcA8Wy8XsZtMJDOUQ0GEM=
Subject key identifier:   09:D9:A6:E2:58:56:21:EF:B4:E1:EA:83:AC:BD:26:C0:E5:B8:8F:BB
Certificate issuer:       /CN=480acd92-824c-4b47-a714-6cab20e4ce2d
Certificate serial:       010D0C9F4328584EB57C5CA853D887FB7F960670
Authority key identifier: B7:D4:E2:DF:B4:FF:89:0E:E8:B3:DA:D9:E3:E6:8D:19:C3:F8:2B:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/200a5c8d-d404-3d6b-acc5-028b145c4c28.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     7346
IP address blocks:        23.129.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:5c:a8:53:d8:87:fb:7f:96:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480acd92-824c-4b47-a714-6cab20e4ce2d
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=04686cd4-91d9-4a00-a6fc-798d4bf49793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:9d:b3:23:13:18:0f:4c:4d:c9:23:c5:b5:
                    6b:31:83:55:ad:3e:d0:cd:d8:59:30:ba:f6:d7:39:
                    95:ee:ba:c3:55:53:31:f5:fe:80:b1:bf:25:e0:57:
                    dd:bf:89:6c:5e:67:24:82:b1:ba:98:e4:aa:ab:a9:
                    24:00:54:0d:29:ab:fa:ba:1c:9f:a2:5d:ff:3e:26:
                    cb:64:cb:20:d2:24:ab:dc:22:cf:88:8b:39:53:3f:
                    94:72:a2:37:17:10:9e:f8:6e:bb:f7:43:43:f9:77:
                    94:d2:69:b5:c8:0f:ea:a5:4d:11:38:df:76:a4:25:
                    74:a6:7c:b8:26:6a:78:19:36:0f:5d:a5:21:c6:76:
                    f9:ff:50:c0:b2:de:bc:91:60:42:2b:a3:7f:bc:f0:
                    c2:6e:51:90:99:b0:cc:d1:2c:18:8f:a0:dc:33:7a:
                    13:82:0e:0a:7c:9c:30:d0:ce:8a:a7:2a:26:4d:8a:
                    63:c2:cb:85:a8:05:86:85:9f:4a:df:17:cd:99:b5:
                    87:6c:15:ff:0f:00:cc:9b:2f:8f:60:02:ed:31:cf:
                    e2:1b:8c:64:05:43:b3:e0:03:3a:bd:4c:54:1d:f4:
                    9d:15:73:45:64:79:f1:fa:5e:b9:1b:99:d0:bf:2f:
                    e6:d6:95:11:0c:a2:49:9a:73:46:51:73:8b:4a:ad:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D9:A6:E2:58:56:21:EF:B4:E1:EA:83:AC:BD:26:C0:E5:B8:8F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/200a5c8d-d404-3d6b-acc5-028b145c4c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:E2:DF:B4:FF:89:0E:E8:B3:DA:D9:E3:E6:8D:19:C3:F8:2B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:53:a6:60:0d:97:49:86:8c:ac:9e:09:11:c2:e8:45:44:a3:
         8b:76:49:69:00:97:d6:9b:bd:ab:2d:a0:90:dc:c4:94:37:39:
         14:1d:ec:04:e4:dc:21:ab:e3:38:c6:3c:ee:9e:39:dc:ef:22:
         d8:7e:7d:ba:1d:b2:3b:91:71:32:28:1e:d3:be:c2:f4:3b:4d:
         ff:b1:62:f0:81:06:2d:9f:8c:d5:98:87:3d:13:a7:08:8a:e7:
         b8:83:bc:e5:9b:6a:64:e5:0a:69:28:8b:f6:52:02:57:2f:8a:
         a1:5f:80:7d:89:a9:1a:13:e5:31:5e:16:ab:dd:6e:99:ff:9f:
         f9:b3:7b:7a:70:b9:81:34:c8:ec:70:2b:1d:93:b3:06:71:f4:
         73:f5:f8:3d:bd:94:87:ea:7a:af:a5:70:51:4e:76:df:55:9e:
         14:96:20:94:91:7b:f9:85:fb:4d:36:a9:6f:c6:99:b1:e8:3c:
         14:c3:34:68:db:40:b9:f4:ee:ae:c3:8f:1b:ed:43:c4:7e:e4:
         26:1b:03:97:d7:bb:5a:ca:9c:9a:fe:33:08:78:a4:f3:6d:ca:
         16:e0:e1:86:71:3d:13:a1:a6:fc:33:5f:c0:92:a2:ff:08:3d:
         46:ec:b4:16:5f:b3:60:7a:51:a4:0f:c9:c5:a3:81:ff:dc:40:
         80:73:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:04:40 2026 by rpki-client