Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa
File:                     3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa (raw, json)
Hash identifier:          F2JmwQ9erLMo5OArKWPbTUlgcS9M2wI6XNHn+86MLyY=
Subject key identifier:   79:15:23:86:24:7D:71:3A:5E:10:E5:2B:E0:76:EC:3C:1B:A0:E6:C2
Certificate issuer:       /CN=00742cea-2e97-42c0-9c46-fc566e540c74
Certificate serial:       010D0C9F4328584EAD1C4768C89B389D772AB600
Authority key identifier: D8:AD:EB:65:7A:D1:A0:E6:9A:BF:DF:F9:31:FC:27:A8:32:1C:99:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     979
IP address blocks:        23.178.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:47:68:c8:9b:38:9d:77:2a:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00742cea-2e97-42c0-9c46-fc566e540c74
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=5e73a42e-3933-41ce-9961-6844da3c3b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:d7:04:72:b1:a0:2b:7a:33:fe:89:7f:5d:
                    2a:bc:5a:57:0c:5f:e3:f5:61:51:13:89:d1:03:36:
                    eb:4d:40:57:68:3e:9a:02:6f:46:9c:87:70:19:9c:
                    25:91:e5:5b:fe:ce:d2:f8:91:5f:8f:be:5f:6a:d5:
                    c1:70:b6:d6:38:c4:86:d4:2e:e1:22:a2:fd:70:ae:
                    c2:97:35:8c:9d:54:bb:cd:61:ee:06:32:74:50:39:
                    6a:19:7d:43:eb:c2:03:a0:17:76:de:41:74:5f:a2:
                    f8:5b:cb:38:37:e2:a4:32:ad:1e:e8:52:03:0f:9e:
                    5d:65:47:25:80:76:23:82:dc:7d:64:12:8e:12:52:
                    b8:74:00:ad:54:6b:30:b2:d9:b2:0e:92:8c:33:87:
                    b6:7d:f7:f3:da:e3:18:47:d7:d0:22:74:80:6c:ba:
                    d9:9a:65:3f:71:37:d4:bd:83:ca:bc:80:01:b6:f7:
                    c0:9c:6b:b4:52:70:05:f0:1b:33:8f:6e:14:3f:21:
                    ec:e6:49:9d:25:a6:fa:c2:3f:5f:3c:8c:8d:01:3f:
                    42:7d:5f:a2:5e:b7:4a:28:5a:91:e3:65:e7:93:88:
                    9a:09:45:27:10:e5:29:10:62:ae:3d:7e:2f:35:05:
                    d9:09:a0:9f:1e:87:b7:a8:59:c9:05:6c:26:81:ab:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:15:23:86:24:7D:71:3A:5E:10:E5:2B:E0:76:EC:3C:1B:A0:E6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.crl

            X509v3 Authority Key Identifier:
                keyid:D8:AD:EB:65:7A:D1:A0:E6:9A:BF:DF:F9:31:FC:27:A8:32:1C:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:6d:85:1a:f5:c7:72:d6:d2:b5:d1:38:04:06:23:17:f5:
         04:37:cb:36:b1:dd:3b:e7:a7:5f:6c:0d:99:ee:9a:ba:48:78:
         7e:ee:5e:5d:44:c6:69:07:0d:62:70:1b:67:49:30:8b:13:ef:
         97:a7:85:89:81:cc:55:fb:1a:50:2f:bd:88:8a:f4:60:4e:05:
         dd:08:bc:50:2a:82:a8:34:b0:c4:18:01:24:72:fa:47:06:05:
         59:51:e4:8d:08:86:ab:3a:36:81:f3:e0:fe:6f:af:36:c1:a0:
         31:5b:27:5a:7c:33:41:cc:dd:2c:e4:ff:01:7c:6a:ac:e3:6c:
         78:74:bd:5a:9a:a2:b9:a1:3a:df:ce:2d:a8:1f:f4:70:75:9a:
         9d:39:29:a2:81:42:a0:0c:a7:9b:1a:5b:db:95:ac:9e:f3:44:
         d5:29:a8:3c:17:76:20:18:40:13:6f:f7:20:e1:ad:26:76:fc:
         73:3b:f6:48:56:49:2b:51:4e:25:62:3b:13:1e:90:7b:1f:71:
         dd:d4:18:fc:d9:2e:51:7b:7f:fe:0c:0d:3d:ef:a1:ec:2f:3b:
         2b:01:be:e4:c6:58:e7:e1:fe:d7:01:a6:3b:db:bd:b8:6f:cd:
         1a:e8:59:8f:83:cb:0d:6d:9a:da:87:be:b5:be:0d:5f:19:8e:
         7c:15:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 22:05:57 2026 by rpki-client