Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/a809f4a0-6268-3eaa-9865-5bcde9f9ee2f.roa
File:                     a809f4a0-6268-3eaa-9865-5bcde9f9ee2f.roa (raw, json)
Hash identifier:          PAXSbJ6EzHRAsel46URc6NLILI52/DeLDkNfGo4gDgk=
Subject key identifier:   0B:06:CB:7E:B5:EE:65:55:42:0B:FE:F1:0D:D1:64:56:8F:69:C9:86
Certificate issuer:       /CN=95280188-8bb7-4cee-9c9c-6ad9b785e0c3
Certificate serial:       010D0C9F4328584E4559E56E563E3E600787B280
Authority key identifier: 9C:BB:F4:D6:88:8A:45:17:B2:27:10:57:A4:76:FE:73:EB:63:03:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/a809f4a0-6268-3eaa-9865-5bcde9f9ee2f.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     2914
IP address blocks:        23.134.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e5:6e:56:3e:3e:60:07:87:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95280188-8bb7-4cee-9c9c-6ad9b785e0c3
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=d45c0467-322e-4d00-8f89-d166430009df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:98:6b:eb:b9:a6:48:5a:c4:5c:8e:45:f2:
                    b4:4f:d0:e4:f8:b0:9b:07:d4:24:27:89:24:21:5d:
                    80:ac:06:58:00:28:e5:ba:2d:38:07:96:a0:30:99:
                    90:c5:1f:6c:18:2c:69:72:1c:4a:5b:01:16:5c:1f:
                    99:fe:bb:0b:62:5d:b7:15:c3:5a:12:1e:2a:8d:17:
                    d2:5a:33:fd:35:31:0f:55:c6:d1:19:7b:bd:ca:38:
                    07:4c:11:d8:7f:70:5f:24:5e:86:c5:72:f3:98:8b:
                    38:c2:6c:5c:03:c9:58:e7:f5:3d:50:2b:d1:00:cc:
                    1b:7a:c8:7c:22:17:dd:c2:ff:72:3c:14:75:87:bc:
                    bf:f0:3a:40:d1:a9:bb:8d:b6:a6:68:ef:50:fc:3d:
                    6f:14:f5:04:f4:1d:91:32:ad:d5:96:eb:de:fc:90:
                    7b:20:15:d7:63:73:97:c5:8e:9c:af:be:1c:29:ca:
                    97:62:9b:fc:4e:07:dd:5a:75:a9:9a:fd:39:bc:d2:
                    a0:95:5a:dc:4f:9a:0e:57:f6:79:10:f2:98:d4:93:
                    9f:47:eb:e6:9d:7a:5f:55:e4:80:11:4b:bd:2a:02:
                    e7:d9:f6:ef:12:fb:3d:ec:47:2c:e6:00:c0:18:34:
                    01:66:72:b4:88:ee:28:17:ed:8c:0d:e1:14:33:dc:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:06:CB:7E:B5:EE:65:55:42:0B:FE:F1:0D:D1:64:56:8F:69:C9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/a809f4a0-6268-3eaa-9865-5bcde9f9ee2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:BB:F4:D6:88:8A:45:17:B2:27:10:57:A4:76:FE:73:EB:63:03:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:39:5e:40:c9:dd:1c:4a:3a:37:a3:7a:1f:8a:86:8b:65:ff:
         ec:8b:ef:21:38:a8:07:31:d6:52:99:1d:b9:6b:94:2b:87:b8:
         fc:c0:1f:8e:b1:d8:55:37:aa:eb:d7:3a:62:a4:e1:c4:92:13:
         66:92:25:1d:12:90:a6:b3:fb:a3:cb:b0:c4:46:6a:54:1e:e9:
         af:cf:7d:47:3c:5a:d3:b9:d6:bc:23:b8:26:be:7a:ca:e8:7a:
         c3:04:6f:c2:35:45:22:cd:c3:01:9e:59:7e:4b:17:ff:15:a3:
         11:4b:60:ae:5b:8b:f0:d5:50:9c:22:43:56:25:96:e2:dd:88:
         fd:30:4b:5b:69:f2:7f:8a:d0:07:37:b9:9d:b3:d6:08:d9:02:
         56:f1:da:5f:c8:b5:cb:d8:b4:83:7d:d6:1a:cf:e1:8b:4b:e2:
         8c:96:c3:fc:79:e7:25:f5:9b:e9:ab:30:7f:42:55:a6:71:b2:
         d9:c1:b3:cf:70:76:c5:ec:10:3e:7e:68:d6:b4:81:86:e5:24:
         15:3e:6f:8a:f1:a2:71:dd:dc:aa:a1:50:c2:fe:18:4b:ab:50:
         d1:be:17:61:a6:60:95:d4:b8:db:13:3e:40:cd:4b:87:ae:47:
         5d:9a:c3:e3:59:d2:39:24:16:9e:60:3b:08:f9:a5:92:52:5f:
         a6:85:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:03:24 2026 by rpki-client