Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/f5ad1316-5f42-355a-ab6d-bde34e4515a0.roa
File:                     f5ad1316-5f42-355a-ab6d-bde34e4515a0.roa (raw, json)
Hash identifier:          kyQvejlS28fOGw3iTCGfm+WlDxk2IjSFuYOyTYVgf0Y=
Subject key identifier:   E4:FB:E2:29:2F:8C:FC:D5:51:97:7C:15:B2:E2:39:F3:B4:85:48:27
Certificate issuer:       /CN=55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3
Certificate serial:       010D0C9F4328584E4AEF2E55FFB9C66528A69080
Authority key identifier: 88:9F:BC:7A:6D:8E:4B:B1:51:08:02:A9:F8:0A:C4:84:C7:B6:9D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/f5ad1316-5f42-355a-ab6d-bde34e4515a0.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     401903
IP address blocks:        23.143.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:2e:55:ff:b9:c6:65:28:a6:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=8baca38b-5c1b-4829-b182-a29131e6e30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:4c:96:54:dc:a4:97:ad:6b:65:ba:fb:75:
                    78:9a:b8:7c:cc:33:8d:8e:54:a6:40:96:0a:d4:73:
                    42:8b:a4:a6:ef:bd:6e:71:95:44:91:33:1a:08:09:
                    e7:cc:75:74:ad:77:ea:64:fa:e1:8f:a3:c3:19:57:
                    84:eb:9e:20:d6:f9:31:01:cf:25:11:62:fb:52:96:
                    0d:62:f6:17:7e:4a:ec:b9:04:8a:6e:07:26:2a:e1:
                    8f:65:d1:d2:9e:28:0f:e2:52:74:ec:10:1c:3f:fb:
                    64:4e:57:ef:dd:86:33:6c:20:1c:cd:ee:59:3b:a0:
                    af:9c:37:64:63:7c:16:7e:95:b6:39:fe:b6:d8:57:
                    8c:ce:ec:7c:ad:71:d2:bb:b5:02:b1:bf:69:b7:de:
                    7a:ac:36:63:4f:79:4b:14:ea:c6:b8:93:f3:b3:32:
                    36:a1:06:77:ea:44:94:3c:d7:ea:80:5c:d0:f4:e1:
                    18:9a:4a:85:09:a9:a6:b4:1c:aa:a8:97:d5:bd:98:
                    be:5c:a3:ee:02:94:ac:e9:3a:5c:06:d2:bb:7f:51:
                    b8:d1:14:3b:d9:83:76:29:c7:de:af:cc:74:1e:be:
                    d0:35:be:94:d2:f0:a0:15:41:20:d4:61:9b:39:7b:
                    bc:38:7a:c8:f5:c9:09:d1:a5:db:f7:e9:9f:44:06:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FB:E2:29:2F:8C:FC:D5:51:97:7C:15:B2:E2:39:F3:B4:85:48:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/f5ad1316-5f42-355a-ab6d-bde34e4515a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.crl

            X509v3 Authority Key Identifier:
                keyid:88:9F:BC:7A:6D:8E:4B:B1:51:08:02:A9:F8:0A:C4:84:C7:B6:9D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:30:10:bd:23:e8:1c:20:ed:18:3d:b4:a1:1a:3c:af:22:
         35:16:cb:2f:cc:7f:9e:2c:26:02:62:bb:3a:1e:24:66:b0:4a:
         2a:aa:ca:37:c0:16:06:04:11:85:95:62:b5:22:7e:85:10:30:
         05:1e:87:f2:12:af:b7:09:74:87:f0:ea:0b:aa:4f:6e:12:1b:
         09:be:b5:a6:a9:43:4c:ae:1e:3e:9b:25:28:85:f9:cd:91:bd:
         67:b7:d5:1e:18:39:ae:18:cb:43:45:f7:d0:6d:88:07:84:60:
         52:83:d8:74:10:3d:65:51:29:5a:33:c1:0d:13:d4:cc:d0:6f:
         d0:a7:18:b5:a3:db:9f:94:00:88:dc:b0:5e:e7:74:2e:52:2f:
         48:d6:22:9d:11:b0:b0:d7:75:90:95:12:7e:37:c0:a5:62:00:
         4a:02:22:cf:af:d5:fb:62:e6:29:b0:ae:b2:1a:83:7e:e6:46:
         4d:ca:47:96:c5:fb:3c:34:48:fb:a8:a9:67:f6:a1:2a:f7:14:
         b6:16:af:33:22:6c:5d:01:31:7d:28:be:db:fb:0d:96:f0:a4:
         fa:dc:0d:d8:c6:ea:b0:a6:7a:44:5d:10:b4:10:1d:08:1f:f4:
         11:8b:3d:30:53:fc:30:aa:84:8d:35:97:f2:7b:d1:d1:36:df:
         ac:fb:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:08:04 2026 by rpki-client