Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa
File:                     1aa4c712-289c-3632-8103-98b72f2ecced.roa (raw, json)
Hash identifier:          b1ZZLKKTGYII38R2D4HAnK+M19fw0VcK83Ry4S3xRMM=
Subject key identifier:   61:37:67:49:85:32:9A:60:1C:BA:A2:B7:1F:42:C8:FA:78:89:F0:3A
Certificate issuer:       /CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac
Certificate serial:       010D0C9F4328584E7204E3213777F26FEE83FE80
Authority key identifier: F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     402410
IP address blocks:        23.156.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:e3:21:37:77:f2:6f:ee:83:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=6f3d3bf7-4c29-415b-89e9-252abafaebc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:97:83:cb:7b:ea:9f:3f:97:88:05:22:e0:
                    32:ff:f9:3d:29:72:ab:c8:eb:b7:f2:be:da:f2:5d:
                    a6:d5:25:c0:c3:d1:86:07:a4:7e:ec:f8:27:72:c2:
                    5f:ae:d1:06:cb:d1:6b:f2:58:84:9d:ad:81:f6:fe:
                    53:a5:41:01:2f:82:c2:3d:6b:6d:96:fb:e6:6c:72:
                    ce:3c:0c:7a:c9:64:37:de:b4:25:3d:d5:fc:11:f4:
                    d0:04:bf:d4:7f:1b:64:a9:51:86:87:62:a5:5a:b8:
                    0a:fe:5a:94:ff:11:6c:e4:18:0d:3f:f7:83:02:bf:
                    54:4d:be:16:5d:f6:e7:dd:cb:e9:3b:2e:e3:a0:56:
                    13:fc:85:f2:fc:cd:25:8f:fb:e5:24:a1:ec:af:b5:
                    2a:6f:20:21:8d:6d:59:e5:d1:22:9a:f0:e5:ba:a5:
                    40:c5:b4:73:02:4c:4d:8e:1a:36:f3:f6:b9:1f:06:
                    0c:23:69:e7:55:5a:d0:7f:62:3d:35:c0:4b:87:0f:
                    c2:ff:4a:5d:1d:d5:61:af:3d:cd:b7:c5:67:8f:05:
                    e4:18:4b:60:e5:ba:5c:31:45:c3:6e:2f:81:5b:27:
                    0a:e6:51:98:b3:d3:37:e4:cc:c0:d1:21:d2:cb:a8:
                    76:40:74:c6:0d:6e:e8:59:11:ea:ea:4e:0e:b9:93:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:37:67:49:85:32:9A:60:1C:BA:A2:B7:1F:42:C8:FA:78:89:F0:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.crl

            X509v3 Authority Key Identifier:
                keyid:F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:44:b7:fd:63:8d:88:00:a5:2d:a5:d4:72:f9:37:1f:d4:75:
         24:d1:80:4d:d5:80:ff:03:d1:84:52:16:2c:af:ca:08:3c:27:
         fd:5f:7e:92:c0:b5:04:08:d7:93:c2:e1:c1:a1:a9:94:a4:16:
         51:b6:a3:83:04:51:1a:be:39:eb:ca:82:8d:fa:77:c9:26:5f:
         b1:d1:b7:f2:c2:c3:7c:09:07:7b:20:3e:1a:d5:a7:44:14:20:
         a6:17:7f:de:5b:6b:5b:6f:bf:5e:d5:a8:eb:fd:ad:ea:14:c7:
         73:6a:01:12:12:bc:51:87:29:17:17:8b:4a:9d:3e:95:e5:6e:
         67:18:8a:c1:d6:f5:9f:c1:59:76:0d:98:2c:8a:0d:4f:2a:bc:
         1b:fc:69:1b:af:a9:c7:1c:7a:37:cd:2d:fb:a9:42:a0:b2:88:
         26:1b:cf:a1:6c:d1:56:37:1b:f0:0f:23:e2:82:df:3c:d0:2f:
         32:68:66:bc:f6:dc:67:4a:f7:e8:08:78:0b:6e:8c:84:f9:2a:
         eb:27:22:27:83:a2:d1:89:96:3d:81:e1:02:ef:3f:10:48:3f:
         a7:fd:70:eb:4e:78:e4:50:84:ba:80:b9:50:83:35:81:5d:db:
         19:87:97:75:b0:51:34:77:e2:9e:6b:aa:84:2b:db:10:71:43:
         17:1e:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:18:29 2026 by rpki-client