Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/311373b8-c574-3e4b-8761-885bd74148a2.roa
File:                     311373b8-c574-3e4b-8761-885bd74148a2.roa (raw, json)
Hash identifier:          zQWIZHW3a39r4r+TC0gqFYsYcMBz9TXEJmhdYToK6aI=
Subject key identifier:   B7:EC:5C:8E:C9:B9:A6:C7:28:4D:EB:80:CA:75:19:56:2E:2D:10:C6
Certificate issuer:       /CN=f769d6bd-b4ab-4fe6-b057-419528f2f4f4
Certificate serial:       010D0C9F4328584E683F5BC29292E2EC08953800
Authority key identifier: 44:26:C5:2E:71:00:E8:A5:EE:D6:2F:77:80:48:71:0B:E1:2F:20:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/311373b8-c574-3e4b-8761-885bd74148a2.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     402397
IP address blocks:        23.156.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:5b:c2:92:92:e2:ec:08:95:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f769d6bd-b4ab-4fe6-b057-419528f2f4f4
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=453e2bda-738e-4d1e-97cc-8f9f0cd29853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:9b:14:56:dc:36:57:08:b5:45:64:58:0f:
                    84:70:19:83:21:28:12:86:89:5d:9e:3c:63:b1:7a:
                    6e:4d:bd:0f:c0:3d:a9:0b:64:d4:ca:19:33:2a:80:
                    d7:6d:23:ca:fe:b6:3d:71:fb:c7:e8:33:0b:2b:c6:
                    99:86:a9:78:e0:1b:91:82:1f:57:83:b0:47:83:1e:
                    78:09:ad:92:5f:18:9f:e5:f7:6b:79:bd:1c:3e:57:
                    ef:e9:5e:74:1d:36:87:77:03:a6:97:68:fd:c0:64:
                    a3:01:39:fe:4b:ca:0d:aa:fa:b7:3e:71:44:a7:dd:
                    e5:08:68:54:05:a9:ed:3d:e8:3e:f5:28:c1:14:d3:
                    4c:09:41:de:80:5a:62:07:99:cb:5d:8a:81:f2:0d:
                    7b:f8:ab:88:82:c0:7e:41:e4:e7:10:4b:f2:37:d0:
                    4b:83:da:b2:a6:6a:f8:2b:8e:db:2d:06:9c:bc:18:
                    d6:5c:63:6a:cd:51:4c:1b:a4:a2:28:71:24:02:ff:
                    31:7b:b2:45:56:b6:65:fa:6b:59:b1:d0:ff:16:08:
                    d9:0f:21:2e:ee:fd:49:08:66:23:34:03:1b:88:60:
                    b4:de:c0:71:8e:f7:d6:35:57:87:0c:88:f7:83:0e:
                    33:f4:b7:ef:fa:f3:42:88:e1:00:34:eb:11:7f:cd:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:5C:8E:C9:B9:A6:C7:28:4D:EB:80:CA:75:19:56:2E:2D:10:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/311373b8-c574-3e4b-8761-885bd74148a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.crl

            X509v3 Authority Key Identifier:
                keyid:44:26:C5:2E:71:00:E8:A5:EE:D6:2F:77:80:48:71:0B:E1:2F:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:b3:01:a6:98:f5:d5:91:fd:3b:70:4c:f7:5b:07:78:5b:
         34:84:22:77:d2:97:5a:d7:cb:93:b0:70:c6:2b:86:41:3c:f9:
         57:0a:6c:86:45:b6:1b:55:f7:8e:eb:42:36:72:97:3a:a7:1f:
         d1:c0:66:fe:aa:fc:89:b2:78:f1:5e:46:6c:34:e8:f8:ea:a2:
         46:bc:c6:c4:03:1e:c4:0f:d2:db:c3:35:29:31:0f:e1:fd:a9:
         6d:44:41:4e:7e:2f:49:4a:05:90:b5:2e:3e:63:69:53:d2:cb:
         70:b7:97:8e:7f:93:2e:cb:2b:a9:52:8e:77:14:fa:5a:df:a6:
         cf:b2:7c:e9:b9:1f:c8:8a:42:fa:e1:51:c6:3c:64:4b:66:20:
         49:6d:90:d2:19:1b:05:98:70:06:2d:94:5e:71:e2:3c:c4:e7:
         5f:a9:69:91:49:87:4b:e2:1a:34:44:f8:25:32:a4:8d:3d:d2:
         f4:76:f1:c4:eb:18:ad:4f:fe:d1:ca:7a:e2:5c:b9:23:a6:05:
         96:7b:4d:4d:66:9e:90:13:ad:bb:6c:36:5e:85:a8:fc:67:a3:
         0d:e9:e9:33:7a:1b:93:21:ca:f3:50:bc:98:e4:06:cf:01:22:
         c7:86:f1:39:87:67:de:f7:3a:64:e4:d7:29:83:8a:c9:b2:a5:
         51:e3:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:14:32 2026 by rpki-client