Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b/064e6951-28a2-387a-b9f9-374f24f3b116.roa
File:                     064e6951-28a2-387a-b9f9-374f24f3b116.roa (raw, json)
Hash identifier:          6oskRjqQp4u+WsDXo4sSU0qRaB9N0tgo8/DA+mIpD+U=
Subject key identifier:   53:58:E0:2E:05:64:A1:94:E0:3C:41:BA:E1:E8:34:3B:64:15:A9:23
Certificate issuer:       /CN=c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b
Certificate serial:       010D0C9F4328584EBB11B25B5C71275688E686D0
Authority key identifier: 58:39:09:F4:3B:39:94:3A:8E:18:94:03:AC:C2:2A:07:0B:36:C6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b/064e6951-28a2-387a-b9f9-374f24f3b116.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     33335
IP address blocks:        23.135.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b2:5b:5c:71:27:56:88:e6:86:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=7bc4e0b6-6563-49ef-9565-0c8392b4ad7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:4e:a0:c4:a7:5d:da:5c:24:c5:fc:9d:6f:
                    a1:43:4c:b7:b4:a5:cd:14:9d:b8:30:13:ff:f2:84:
                    cb:ee:68:3f:85:f3:46:46:f5:06:e0:af:e4:b8:21:
                    21:10:b9:c9:08:8f:7d:a2:db:68:be:04:76:ff:11:
                    9b:3f:4c:ac:c5:3a:41:c3:a1:47:81:3c:55:7a:68:
                    f3:e1:55:52:c5:7d:51:b3:2a:2a:31:89:1d:13:2e:
                    70:0a:55:33:b4:1c:a9:5d:b0:84:7a:73:7e:7d:85:
                    2b:8b:82:6f:16:1c:7e:28:c8:c3:46:3e:cb:78:eb:
                    71:86:a5:e2:92:c7:66:6b:76:81:ca:5a:7e:58:39:
                    af:bf:2b:1d:fa:c4:13:2f:02:cb:63:48:83:b9:e3:
                    dd:6e:c6:48:8a:62:da:e7:89:c0:eb:28:8b:95:1d:
                    b0:56:09:c7:f9:86:b6:07:80:29:78:b9:b5:d5:b4:
                    ca:fe:4d:01:60:df:03:3f:0a:c7:f8:7d:50:ed:d9:
                    cb:b0:c4:50:06:2a:44:ed:4f:c5:97:c0:93:cc:ea:
                    3b:e8:b5:1d:e7:bf:d7:2a:57:23:26:36:28:78:f0:
                    13:15:56:1b:c2:6d:6e:3f:71:bf:5d:dd:12:86:61:
                    d6:f1:92:7c:1a:10:a8:36:96:f0:d1:c8:8f:60:c4:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:58:E0:2E:05:64:A1:94:E0:3C:41:BA:E1:E8:34:3B:64:15:A9:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b/064e6951-28a2-387a-b9f9-374f24f3b116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b.crl

            X509v3 Authority Key Identifier:
                keyid:58:39:09:F4:3B:39:94:3A:8E:18:94:03:AC:C2:2A:07:0B:36:C6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c043f6a9-9703-4ec5-b6c4-4ea83fbeb28b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:0b:86:0c:75:d2:dc:5a:61:96:2d:f4:b7:72:b2:dc:dc:
         39:42:11:81:38:04:b8:aa:f4:e4:35:dd:a1:2b:a2:4b:13:c5:
         a1:a9:5a:21:e4:84:59:ff:33:a4:65:12:15:6f:58:1c:a2:db:
         9a:7a:92:32:05:38:79:a3:bd:5d:f0:16:dd:d0:de:cb:02:80:
         7c:d4:04:10:18:ab:22:c3:d7:80:e0:72:67:03:6e:7f:95:bb:
         07:c3:15:03:63:c4:89:12:6f:2a:0e:1a:11:58:4b:0f:e0:1c:
         37:e9:f6:79:d2:d2:3a:fd:58:17:fe:cf:22:9d:6e:05:29:d6:
         b2:c4:50:6e:ce:77:61:28:86:c1:22:a9:5c:b0:06:bd:02:99:
         93:76:53:4f:90:16:82:10:34:11:b6:7e:a9:7c:99:a2:49:84:
         5d:4f:1f:06:db:64:a7:1e:58:ea:80:0a:b2:3a:db:07:e4:da:
         80:5a:74:7e:b3:58:d0:12:33:17:56:c4:16:0a:c9:8e:c6:81:
         26:54:a9:6a:2b:e5:84:d2:50:75:62:3f:3b:7b:7c:4e:d2:61:
         d1:95:e4:49:36:6a:65:6c:45:81:dc:20:22:17:c4:76:84:7f:
         8f:64:62:62:ff:41:e9:d1:40:23:d8:cd:c8:03:7e:fe:21:fb:
         33:39:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:30:08 2026 by rpki-client