Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/7c0bbde6-9801-3628-ac38-c03d4f1c2cfd.roa
File:                     7c0bbde6-9801-3628-ac38-c03d4f1c2cfd.roa (raw, json)
Hash identifier:          q46Kc6LwXzkSLxppPay6bCCHVh3AfktJYl9AYfddAIw=
Subject key identifier:   A8:64:AA:FA:F9:29:81:41:D1:E1:BE:E8:55:D3:B4:04:E8:C8:00:5B
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F4328584ED001DE91B76E940CB6591AD8
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/7c0bbde6-9801-3628-ac38-c03d4f1c2cfd.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     397131
IP address blocks:        23.159.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:de:91:b7:6e:94:0c:b6:59:1a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=a705c065-0f23-4729-8d11-dbcb83b90501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:84:38:35:11:71:ab:5c:75:e7:22:5c:c1:9d:
                    e2:4e:e9:82:12:f7:fe:2b:c7:ff:2f:ea:b4:a6:3a:
                    2a:c1:e9:8e:70:65:1a:45:c1:73:30:b0:50:10:91:
                    05:29:70:2d:dd:b2:5a:02:a6:28:eb:f7:4f:38:00:
                    d1:5e:07:60:d0:3b:4f:4f:d1:ef:93:f7:2e:7a:b4:
                    10:65:62:7e:03:0a:08:b9:66:ef:61:e0:c6:b9:cc:
                    7f:19:88:91:f3:fb:10:e8:08:78:dc:ef:65:71:64:
                    1e:02:ec:f4:8a:dc:fb:ce:66:5b:ef:34:5c:3e:c5:
                    63:95:cd:de:20:40:6d:e4:e3:8e:fa:de:a2:6b:c2:
                    38:92:02:c9:94:02:0e:1f:1d:7a:d0:9b:0a:5e:24:
                    a9:5e:d7:6e:6d:4e:2e:7e:85:3f:65:51:38:0c:b4:
                    c5:f8:ad:81:6b:52:ca:c1:84:3c:a8:08:af:36:77:
                    dc:4f:fc:e8:29:7c:fd:a8:55:b7:46:f6:0d:2b:65:
                    07:f9:44:d8:8a:57:f2:5c:cb:c2:cd:e5:fc:a7:d7:
                    21:d6:76:74:44:44:01:33:bb:4b:12:9b:e6:7b:6e:
                    69:13:ac:f9:f2:39:45:e8:12:68:1b:6e:52:f5:ad:
                    0b:21:50:c3:71:17:95:65:4b:f6:96:f6:36:7f:51:
                    9d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:64:AA:FA:F9:29:81:41:D1:E1:BE:E8:55:D3:B4:04:E8:C8:00:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/7c0bbde6-9801-3628-ac38-c03d4f1c2cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:87:87:04:c5:29:7a:bb:c2:8a:f4:26:ab:41:56:b6:e3:
         34:aa:2e:32:11:a5:53:ae:4e:08:2e:12:0e:34:ef:91:0f:e5:
         a0:88:09:1f:a9:6c:62:4c:8d:27:48:d7:51:0f:16:39:a4:59:
         fa:e8:64:13:60:57:b5:51:9c:cd:0b:62:83:4d:54:10:b4:d3:
         c0:6e:35:43:64:13:81:11:fb:fa:cd:b4:9b:59:de:c7:28:ae:
         5e:50:a0:3a:08:63:35:0d:98:c8:3e:62:7f:c1:46:b0:5e:1a:
         ba:e3:4c:a9:e1:0a:a7:35:bd:0f:8b:08:2d:75:54:2a:40:f7:
         02:50:07:9d:34:ce:6f:1f:58:80:14:b2:0f:02:60:d0:02:aa:
         37:01:ff:7a:2f:ec:62:16:1f:f1:69:7b:ca:bf:df:2c:ff:3e:
         37:26:ff:7a:bf:a8:e9:ed:c6:7a:16:ea:6c:e8:91:fd:b8:2d:
         49:8c:10:b3:39:dd:97:84:d4:f8:67:15:61:09:fb:bd:51:6c:
         c4:2c:2c:ce:13:78:d9:68:da:85:1a:5b:4b:85:41:be:b7:cc:
         a9:9d:9f:c4:53:33:81:a8:2d:57:98:fa:62:81:fd:41:fa:04:
         8f:d1:58:1c:80:90:f9:79:6c:78:29:6a:b6:6b:82:5d:79:f9:
         8e:5c:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:52:23 2026 by rpki-client