Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa
File:                     bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa (raw, json)
Hash identifier:          udKudQAyNkX33yHizKeQbVP5OhH3+hI7tw88c7E6SdI=
Subject key identifier:   B5:42:B2:73:1A:2C:23:DA:03:D6:F5:0D:4D:A2:A1:C4:A9:CE:E8:62
Certificate issuer:       /CN=917f6233-a0b4-4398-980d-f443910c2d2e
Certificate serial:       010D0C9F4328584EAD1C655B28AEFE8E5696AF80
Authority key identifier: 0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     979
IP address blocks:        23.144.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:65:5b:28:ae:fe:8e:56:96:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917f6233-a0b4-4398-980d-f443910c2d2e
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=7a7990d2-4575-4baa-8fda-ca649b1fe5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:36:b9:b4:c2:44:4d:fe:e5:2f:40:03:b1:
                    16:1b:d0:69:0b:df:19:4f:b7:37:41:03:d2:c1:4b:
                    b8:a5:5f:27:e0:06:9a:14:60:85:d2:55:31:8d:e3:
                    70:21:54:20:b8:d9:f9:17:9b:66:46:e7:ef:17:9f:
                    5b:ad:2b:6d:e4:68:6d:ad:43:79:e5:63:de:95:4e:
                    78:d4:3f:d2:0e:44:19:3c:1e:90:b4:86:da:f3:09:
                    0e:fc:5c:2c:b0:37:9c:c6:f7:53:56:d0:b2:8a:e7:
                    c6:79:92:e6:61:07:0b:9b:b7:0a:03:f8:fe:b7:99:
                    36:be:b0:c7:e1:24:eb:53:73:09:2d:a3:28:13:3a:
                    2c:6c:cf:82:ad:11:22:7c:f8:a4:cb:be:8c:45:0c:
                    86:2c:eb:bf:12:cb:bc:d0:24:58:51:55:9e:55:fb:
                    40:22:ea:5d:5c:ae:ea:ce:4c:c4:d0:33:63:78:1b:
                    2d:a0:22:a9:51:fe:16:ad:d2:b8:d7:be:f9:80:34:
                    d8:5c:38:63:da:8a:14:59:7c:c8:68:bc:e2:fa:d2:
                    7f:29:13:54:bf:2d:e3:53:db:c7:31:aa:4e:2b:3b:
                    09:ec:4a:5b:0b:c2:1f:a0:cf:5c:07:2a:e7:59:c5:
                    de:e6:c2:1e:d1:8f:e4:bb:67:04:e9:e3:4b:28:8d:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:42:B2:73:1A:2C:23:DA:03:D6:F5:0D:4D:A2:A1:C4:A9:CE:E8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl

            X509v3 Authority Key Identifier:
                keyid:0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ab:e8:2a:ef:5b:f5:3e:b5:d9:6e:10:ff:36:99:6c:d7:aa:
         cc:94:fe:ce:2e:b9:b9:ec:1c:bf:c3:f7:e2:95:be:4c:d4:de:
         50:03:db:1b:ad:5e:a0:28:d0:30:4c:ed:25:dd:6d:24:7d:c6:
         31:c3:a5:98:ac:44:30:03:c4:28:66:1b:e3:bc:5f:4d:9c:20:
         a1:91:8e:f7:73:08:f6:a3:36:38:1d:d9:b3:50:fb:df:07:9c:
         3f:03:9a:c4:90:99:6a:95:f7:04:62:34:05:43:38:b4:d6:ed:
         e9:e5:cb:6f:ef:55:1b:e0:82:37:81:51:71:23:37:9b:6c:6e:
         f6:b3:8a:06:83:08:2c:a0:6c:0a:72:dd:78:06:45:ce:81:f8:
         00:1a:c0:ec:c6:d5:9f:94:08:86:d4:91:26:b9:a7:1a:c0:35:
         4b:c7:a9:f1:5b:5f:31:79:03:4b:f6:78:27:b3:04:fc:fe:2c:
         26:6e:c7:f7:73:49:cf:42:4a:19:d2:5c:10:44:4a:d5:5d:27:
         2a:78:10:84:17:81:3d:a9:70:2a:39:34:1e:18:c2:c3:70:b5:
         dd:de:19:9e:45:18:72:8d:dc:c2:13:eb:d4:7e:19:06:50:c4:
         67:b3:ae:1d:57:9d:31:5d:6b:e3:f0:70:53:85:e3:f7:73:d4:
         28:53:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 22:06:10 2026 by rpki-client