Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa
File:                     3669ecca-f135-306c-9018-d762944294a1.roa (raw, json)
Hash identifier:          +NmOipn8IPdihl3i1T/EAOPVvjc7SQLjtP0DZ6qAyDk=
Subject key identifier:   35:1C:61:AD:21:3C:B2:D6:3C:7A:23:EA:05:36:1C:77:52:7C:25:E8
Certificate issuer:       /CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce
Certificate serial:       010D0C9F4328584EA788BBC901EDD89F55C6DE50
Authority key identifier: EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401990
IP address blocks:        23.145.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:bb:c9:01:ed:d8:9f:55:c6:de:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ad3e1b2e-7695-4e85-84d7-bbb320539168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:4d:b1:cd:b5:69:a9:88:cc:46:ec:8e:7f:
                    1d:7d:ac:bc:71:0f:7d:1b:75:6d:0f:15:82:8e:f3:
                    79:97:0a:22:c0:7a:13:b5:f9:46:f9:27:ea:f9:45:
                    0d:7f:d3:22:2f:25:6c:e6:26:2d:9e:c6:b7:e8:40:
                    df:3c:44:4f:fa:78:65:bd:d5:24:44:5f:20:a2:1a:
                    b1:cb:5c:f6:92:ef:ec:c9:45:cb:d0:bf:43:2c:cc:
                    62:80:ef:c1:cd:1f:00:ec:19:3e:cc:6e:e2:57:63:
                    15:0b:3b:a9:b2:d4:d4:66:a4:0a:6b:94:09:37:b2:
                    b9:3f:a4:b1:12:37:56:00:a7:a2:f5:aa:87:d5:a2:
                    db:2e:41:de:07:cb:c2:1f:9a:70:21:78:39:b3:d9:
                    50:1f:0e:96:6d:19:bc:c7:3f:6a:c7:bc:13:7d:90:
                    8a:e6:bd:01:cf:59:a3:59:6b:42:b7:94:8f:5d:b1:
                    2c:b7:30:18:0f:40:61:bd:b7:83:0b:ce:db:e3:0e:
                    8a:c0:8f:74:89:ff:c8:d6:e0:87:0a:4a:04:de:1f:
                    10:c6:5e:56:a2:87:36:b5:9f:0d:3a:10:16:51:aa:
                    8d:24:78:fb:64:df:48:9d:4d:b5:64:b7:2b:a9:4f:
                    5a:43:93:05:c1:4c:83:82:79:7f:a8:1b:ab:78:d3:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1C:61:AD:21:3C:B2:D6:3C:7A:23:EA:05:36:1C:77:52:7C:25:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.crl

            X509v3 Authority Key Identifier:
                keyid:EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:88:df:fa:b4:b6:63:b4:93:35:6d:de:86:8b:a0:db:44:
         fb:ab:af:ae:50:9c:10:78:bd:21:5d:f8:96:cd:f0:7c:0b:54:
         5c:79:df:08:0c:29:de:31:dc:f5:e1:46:2f:31:bc:4d:19:1d:
         5d:37:76:14:e4:78:71:46:52:45:06:46:bf:27:16:a3:0b:49:
         f0:02:c8:8d:22:cd:d2:30:bc:8b:65:fe:9d:18:1f:f6:b1:67:
         ad:00:d0:99:52:1d:83:f9:fc:fa:d7:3f:75:2e:ac:b0:54:a1:
         45:52:41:f4:33:7f:6a:9e:7e:0b:f6:00:58:5c:23:bf:c3:3c:
         45:92:dd:72:77:b9:0b:d9:cc:94:d0:29:77:be:15:ef:9e:3e:
         5a:8e:4a:7f:5d:3e:73:eb:7b:63:83:19:6c:55:e9:f0:a6:5d:
         e6:ba:1c:61:c9:0f:5c:26:59:a5:81:20:85:c9:41:76:4a:f2:
         31:d6:22:2f:b2:aa:a4:5e:23:31:c4:c0:7f:ff:dd:09:7f:61:
         c4:14:54:59:29:a7:de:1a:3a:59:68:73:17:2a:45:c1:39:d0:
         31:e7:f4:58:4c:af:7e:2d:17:75:ef:ea:db:62:4a:99:2b:8d:
         6a:d3:62:17:06:9c:b1:ba:3e:00:27:f2:9b:29:66:5d:9d:47:
         38:8a:3d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:58:46 2026 by rpki-client