Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa
File:                     533e30dd-0c0f-371b-8de9-b5ee71425ace.roa (raw, json)
Hash identifier:          S1TDKC7SGGFqp/4RzmsQ5i7in2qyLvbbu4oXH20j15E=
Subject key identifier:   A0:0C:00:48:BB:02:EA:1F:F2:A3:40:59:59:9D:C0:6D:E3:66:2D:1B
Certificate issuer:       /CN=1f767e4f-700e-495f-8a3b-72eed82055b4
Certificate serial:       010D0C9F4328584EA7989F43DCB015AD11A46780
Authority key identifier: 18:39:30:73:F9:D2:68:2D:B0:5F:52:03:A1:24:32:10:D5:96:C6:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1097
IP address blocks:        23.145.20.0/24 maxlen: 24
                          2602:81c:3000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:9f:43:dc:b0:15:ad:11:a4:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f767e4f-700e-495f-8a3b-72eed82055b4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bcf3146c-643e-46a0-bc67-3c7bd57d399f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ff:87:32:47:ec:09:b4:9c:64:04:c0:e9:19:
                    20:2a:3e:c6:ad:2f:16:38:60:67:9b:13:e3:78:6a:
                    b5:b5:9f:5d:08:f6:46:2c:9c:60:36:bb:93:d9:43:
                    ec:92:9c:1a:ae:ae:1b:51:14:d8:a7:24:e7:c8:0e:
                    70:3b:d6:95:88:1b:9f:5c:93:64:42:14:2b:40:2b:
                    51:b1:6c:26:9a:db:d9:63:40:ac:03:09:66:43:e5:
                    7f:a5:82:47:6c:ed:75:8a:60:32:56:d2:59:d1:3f:
                    33:0e:a3:3a:1d:22:ee:6e:69:18:6d:e5:4f:c4:c6:
                    f1:91:d6:98:a4:38:f4:a3:56:22:a0:26:51:5b:d5:
                    26:aa:78:54:6f:f6:03:5a:68:df:1f:84:cd:0d:d4:
                    55:9f:40:31:d3:f9:78:79:88:67:db:de:85:e6:b1:
                    ab:c6:9a:ba:6c:ca:18:b5:9e:a4:84:e0:68:c2:55:
                    63:3f:fb:46:92:c8:19:54:d6:e8:3f:4e:ad:6d:4c:
                    b4:f8:25:f4:49:45:13:93:22:e5:ab:a5:25:fe:25:
                    09:07:40:e7:4f:ef:19:d2:ae:5d:6e:97:7b:22:34:
                    8a:05:40:5b:a2:e0:99:31:27:18:1f:4e:5e:2c:1e:
                    a7:21:58:90:4e:93:ab:f6:39:52:9e:f7:02:8e:ef:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0C:00:48:BB:02:EA:1F:F2:A3:40:59:59:9D:C0:6D:E3:66:2D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.crl

            X509v3 Authority Key Identifier:
                keyid:18:39:30:73:F9:D2:68:2D:B0:5F:52:03:A1:24:32:10:D5:96:C6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.20.0/24
                IPv6:
                  2602:81c:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:b3:0a:0a:9f:18:06:af:19:eb:14:79:80:41:a1:fa:fa:
         c0:73:82:2b:10:5f:5b:96:91:7e:1f:12:d4:60:ab:3f:80:70:
         d7:c5:a9:13:61:e6:8d:a0:60:50:74:3b:17:60:fe:b5:42:5d:
         2a:65:ea:19:69:9d:de:b6:b1:cc:29:0a:c3:2a:9b:61:3a:3d:
         fa:19:53:4b:bb:59:4f:9c:8a:86:d6:a1:5e:bb:d5:33:de:a7:
         53:57:0c:47:12:04:76:13:e4:dc:fa:b8:2b:da:b1:62:4d:ac:
         ce:43:19:d2:7a:47:39:f2:69:bd:f9:ca:ac:43:39:8c:16:71:
         ee:6b:69:e2:0a:24:93:15:31:9a:c3:06:fe:1b:61:d8:72:6d:
         ca:ef:a1:e9:43:11:1c:21:f5:b0:68:a8:d9:a7:27:2d:e3:bc:
         36:69:34:4f:c7:44:fc:ee:0b:d7:1b:b1:87:b1:2e:14:18:8a:
         de:73:20:e3:08:ed:b8:70:a6:46:58:22:16:b5:5f:14:0c:ba:
         77:ea:0a:65:f0:c3:27:d4:94:9e:23:0b:9f:45:45:52:fa:35:
         47:aa:dc:cb:75:25:7c:09:fd:9d:a1:51:b3:0b:13:41:1d:1b:
         2f:b3:46:3f:c8:52:3d:e4:9e:82:13:93:42:ea:a0:76:ac:2d:
         9e:26:2d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:41 2026 by rpki-client