Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/38e2e50a-5910-3051-b9d5-9b847d8668d6.roa
File:                     38e2e50a-5910-3051-b9d5-9b847d8668d6.roa (raw, json)
Hash identifier:          t12wu32lXwcxg1Er03ifvd9Ry8YG0+svuEdx247aF/0=
Subject key identifier:   A4:9E:5B:DF:62:86:B9:7F:10:10:02:B3:DA:4A:73:83:3E:A1:80:BA
Certificate issuer:       /CN=87d73aae-debf-43be-9698-ca01eb327c27
Certificate serial:       010D0C9F4328584E4559CEC806DEA0F9CF150800
Authority key identifier: EC:41:D8:DA:6C:CE:94:76:28:D3:EE:88:72:85:24:66:CD:11:47:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/38e2e50a-5910-3051-b9d5-9b847d8668d6.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     2914
IP address blocks:        23.134.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/87d73aae-debf-43be-9698-ca01eb327c27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/87d73aae-debf-43be-9698-ca01eb327c27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ce:c8:06:de:a0:f9:cf:15:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d73aae-debf-43be-9698-ca01eb327c27
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=b885c364-4ba5-4e3f-b402-e7661c304fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e4:9f:8b:a7:0e:2f:d0:d5:86:f6:01:84:cf:
                    9b:b6:94:01:de:3c:ba:35:be:d8:1a:fe:4a:e7:09:
                    81:d5:a3:18:02:b5:97:30:79:8d:48:aa:37:c3:fc:
                    b8:ab:08:ba:79:71:91:92:eb:ae:ac:06:a2:53:7a:
                    13:9c:12:40:cf:3f:91:55:fb:ca:f1:21:36:87:70:
                    6a:b5:6b:06:3e:1a:4f:37:9e:33:42:21:2a:aa:9c:
                    b4:0e:7b:31:56:a4:9a:55:d5:58:f7:b4:8c:5a:7d:
                    cb:6a:f0:18:d5:d2:45:b4:74:3b:7f:09:8a:79:33:
                    2c:14:db:3c:ce:2a:72:60:1e:82:5c:28:c6:94:82:
                    4d:30:5f:49:47:32:0b:56:9b:89:8c:8f:bf:a1:a5:
                    c4:18:0e:97:08:fe:c5:ce:61:64:f1:79:13:a8:65:
                    d9:09:00:2b:5f:c0:fb:6d:97:3f:81:d4:17:9b:f1:
                    f0:b7:d7:df:53:9c:b6:b7:6f:8e:9b:e5:39:a3:27:
                    b5:53:fe:11:3c:0c:93:e6:a2:95:66:e1:79:50:06:
                    27:29:7a:a2:5d:21:67:04:c7:49:48:c1:09:06:44:
                    45:a5:50:78:81:0e:4a:dc:8d:fe:2a:7d:a7:e6:d8:
                    4c:b0:93:de:ec:a5:43:21:65:f0:c3:be:4a:7c:54:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9E:5B:DF:62:86:B9:7F:10:10:02:B3:DA:4A:73:83:3E:A1:80:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/38e2e50a-5910-3051-b9d5-9b847d8668d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/87d73aae-debf-43be-9698-ca01eb327c27.crl

            X509v3 Authority Key Identifier:
                keyid:EC:41:D8:DA:6C:CE:94:76:28:D3:EE:88:72:85:24:66:CD:11:47:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:74:8f:0c:45:31:79:ba:3f:24:8b:62:58:09:f5:67:75:d8:
         63:d1:ff:b5:e6:05:99:ba:89:d8:e8:1f:6c:f1:3a:92:2c:a4:
         95:03:98:e7:11:74:ea:9e:ed:d8:bb:28:a7:90:86:15:0c:60:
         1f:49:6e:52:86:a5:b0:51:08:a8:99:af:dc:c0:b2:bd:ce:73:
         27:df:78:b9:ba:f9:9c:64:ff:b4:3b:dd:85:b0:f2:3d:11:ac:
         23:7c:03:87:9b:f0:8f:a1:4a:36:be:02:a3:93:d8:82:4e:c1:
         bb:6d:81:54:f9:89:98:14:29:58:30:6c:bc:e8:b8:a5:ca:65:
         53:94:90:ee:3d:40:e6:4d:14:02:08:e1:a6:76:5b:f7:f1:cc:
         88:65:e4:9a:02:4c:60:cf:4f:25:83:8e:26:e5:13:e1:40:58:
         7c:06:ba:e8:ba:b8:1f:ff:0f:d4:cb:01:24:39:f8:fc:fe:b5:
         37:f3:e4:44:c9:94:78:c5:cc:d7:74:37:d1:f6:60:ed:22:e6:
         23:a5:ab:44:5d:10:3e:be:51:20:46:f6:e1:7a:57:6e:3e:4a:
         ba:b0:f7:74:1a:9e:c3:ca:98:3b:de:e8:85:fa:fe:19:b2:94:
         e3:b1:32:3d:5d:a6:65:a4:32:92:4d:31:24:70:ee:b5:f6:b3:
         87:8e:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:07:15 2026 by rpki-client