Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/5a0d899d-191b-39c7-9755-f9101b431dc7.roa
File:                     5a0d899d-191b-39c7-9755-f9101b431dc7.roa (raw, json)
Hash identifier:          aDXZZ1ddhWMSx3U0cKF7kpXQZXDQ979bzzpnRM8Y0EQ=
Subject key identifier:   08:63:DC:78:34:AC:6F:14:BD:03:D7:54:A2:61:98:53:8B:86:73:38
Certificate issuer:       /CN=9f5ade9a-94ec-46e0-85bb-26aaa2053365
Certificate serial:       010D0C9F4328584E8DEFA0D946B276645BFB1D40
Authority key identifier: EB:59:6B:06:B2:75:48:C2:D5:58:F2:33:BB:09:6B:4D:5E:B0:7A:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/5a0d899d-191b-39c7-9755-f9101b431dc7.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     152179
IP address blocks:        23.151.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/9f5ade9a-94ec-46e0-85bb-26aaa2053365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/9f5ade9a-94ec-46e0-85bb-26aaa2053365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a0:d9:46:b2:76:64:5b:fb:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5ade9a-94ec-46e0-85bb-26aaa2053365
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=dac1e09f-ff0f-4676-b1f5-90156f50ff5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:f1:a3:8c:bc:57:31:42:0c:46:79:4b:04:
                    7a:bf:f6:a1:4e:88:82:8f:a1:7d:da:94:72:91:b1:
                    68:d0:a4:69:61:71:32:a6:dd:7e:3d:a0:e8:c0:3a:
                    f3:b6:d8:2e:5e:3d:ba:c0:a7:56:ea:1b:fe:ba:80:
                    8e:c0:57:c8:b1:b3:dc:16:3e:87:26:f8:84:00:6f:
                    37:02:b6:72:1d:82:41:54:c0:d7:44:6e:cd:3c:02:
                    9e:27:21:8e:6e:ac:98:b3:10:a5:8b:52:54:90:25:
                    1f:19:15:2d:3d:98:5c:bc:dd:0e:32:fc:29:c3:80:
                    fa:3d:80:e1:49:8b:f9:3f:59:84:3d:92:76:1a:3c:
                    5f:54:3c:a5:e0:6d:55:dd:15:a1:d3:98:cb:bf:ab:
                    09:78:77:fe:6e:15:8f:b1:6a:9d:e2:ea:a7:fd:36:
                    2b:f5:ad:8b:2a:59:ff:6e:92:a7:71:99:2b:4d:a0:
                    1c:d0:36:4f:b1:fd:ef:ca:de:4b:66:ea:c7:af:7d:
                    a1:3a:82:bf:5e:1b:95:ac:06:38:23:14:ed:44:3a:
                    ce:f9:19:46:d0:a0:58:a0:48:ee:4d:03:c0:52:3b:
                    f5:13:30:f3:d3:d5:84:2d:08:34:09:28:b5:c8:a3:
                    6a:7e:15:07:c4:15:f9:62:e9:25:e7:4a:68:44:f0:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:63:DC:78:34:AC:6F:14:BD:03:D7:54:A2:61:98:53:8B:86:73:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/5a0d899d-191b-39c7-9755-f9101b431dc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/9f5ade9a-94ec-46e0-85bb-26aaa2053365.crl

            X509v3 Authority Key Identifier:
                keyid:EB:59:6B:06:B2:75:48:C2:D5:58:F2:33:BB:09:6B:4D:5E:B0:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:81:5c:25:1c:14:52:8f:fe:8b:ff:8c:e3:a1:78:ff:d4:8f:
         94:de:15:b8:30:79:f9:47:12:b8:76:82:ad:5e:f9:20:a8:60:
         41:79:34:f4:ee:c7:5d:8d:e0:71:c7:54:d6:5c:b4:51:8d:5c:
         de:3b:55:dc:f0:30:c5:5f:74:e8:01:f5:58:c5:39:99:41:db:
         64:3c:37:a9:d5:e2:8c:13:85:28:ba:ef:9b:7e:8c:61:f3:f9:
         e9:27:a3:ff:cf:3f:4a:48:08:33:7a:82:07:4f:dd:fe:3e:da:
         6f:ff:d5:6a:e5:fc:cd:9e:06:7d:52:07:87:46:2c:ed:22:99:
         6f:b2:93:af:9e:d7:a2:86:57:79:56:26:30:86:21:d7:e8:89:
         56:14:83:40:f0:62:37:b5:21:92:c3:4c:aa:8c:72:17:0b:0f:
         45:db:20:16:d5:e4:7a:1d:ff:6a:5a:9f:c5:88:dd:26:88:8d:
         84:ca:cd:0f:31:3d:6a:61:8d:3f:55:15:ee:dc:c5:f1:39:4b:
         de:50:bf:5b:81:8e:24:ae:85:ce:75:b5:46:22:3c:e6:f4:19:
         c9:4a:76:ca:f9:05:30:ff:b9:6d:50:e9:93:ec:c0:41:8f:64:
         e6:24:57:b3:a6:35:42:7e:27:60:28:89:1f:55:33:30:57:c4:
         0f:d6:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:29:41 2026 by rpki-client