Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/80391595-86f3-31c6-bccf-05075d5c246d.roa
File:                     80391595-86f3-31c6-bccf-05075d5c246d.roa (raw, json)
Hash identifier:          CZPk7bpZHQD6s84mud6wCulO/u21VjHOL4knd/B5lfE=
Subject key identifier:   41:7A:FA:7C:B6:68:E1:FE:06:BB:33:09:E9:24:96:C2:ED:9C:BF:1B
Certificate issuer:       /CN=9c3c60d3-2280-4c4e-a6f4-bf16d96b4896
Certificate serial:       010D0C9F4328584E4559CE9D2D7782AC05665EC0
Authority key identifier: D4:35:F9:45:84:B6:D3:39:4B:FA:A3:31:E2:25:86:DF:D9:2F:56:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/80391595-86f3-31c6-bccf-05075d5c246d.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        23.143.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ce:9d:2d:77:82:ac:05:66:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3c60d3-2280-4c4e-a6f4-bf16d96b4896
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=7bd99e20-da81-47f6-9113-808b6b04d969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:0f:99:e3:00:ce:b8:be:c5:f6:bb:9e:aa:
                    ce:21:78:52:fe:2a:2c:75:fb:b9:10:4b:8c:44:fa:
                    54:85:01:06:79:99:4a:ea:c2:d1:e1:05:64:21:31:
                    89:c9:1e:b3:c0:9e:f6:e9:0d:64:49:1a:7a:37:cf:
                    ff:ef:b5:be:db:71:e6:be:61:62:4f:5b:12:53:c3:
                    ed:de:9a:1e:ac:ea:c5:74:a2:c5:55:88:f1:c2:d1:
                    51:9b:6b:a6:62:cf:b4:5e:71:03:35:b9:18:15:70:
                    94:af:42:8d:b1:9e:51:a7:25:b2:2a:55:06:9b:bf:
                    7f:60:8d:ee:ba:83:86:2c:a2:ad:31:fb:ce:c4:43:
                    8f:30:9e:ce:c1:de:30:49:29:14:be:79:93:11:15:
                    20:11:6e:fb:53:3b:db:08:95:00:94:9d:30:c6:65:
                    0c:89:ed:3f:d0:12:d7:0c:68:9c:c2:12:9a:ed:c8:
                    56:11:53:68:ef:06:8c:de:6d:a2:4a:de:82:e9:49:
                    ee:9d:46:a7:12:9d:67:ec:5d:29:8b:38:c2:86:36:
                    0e:d6:61:92:dc:7c:af:59:e3:60:fb:b3:ce:c9:b7:
                    76:8c:3e:2f:5a:37:09:b0:a6:a0:ef:eb:37:32:12:
                    49:e3:9a:53:f9:9a:b1:6a:f3:fc:ae:5b:84:38:77:
                    18:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7A:FA:7C:B6:68:E1:FE:06:BB:33:09:E9:24:96:C2:ED:9C:BF:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/80391595-86f3-31c6-bccf-05075d5c246d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.crl

            X509v3 Authority Key Identifier:
                keyid:D4:35:F9:45:84:B6:D3:39:4B:FA:A3:31:E2:25:86:DF:D9:2F:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:da:df:9d:0d:a9:bb:87:79:cb:2e:4b:51:4a:11:88:c0:bc:
         e6:80:83:c7:6c:44:1d:df:89:a3:6d:4c:9c:dd:02:cc:35:e0:
         5b:fa:76:23:58:7c:19:00:5e:51:53:1f:6f:15:0e:98:f3:e7:
         65:92:89:81:45:05:9d:5b:2b:a8:0f:ca:e9:22:69:e7:2a:05:
         35:55:45:e1:6c:98:69:08:3a:7e:02:9a:33:6d:1e:be:29:46:
         bd:39:46:1c:4d:e3:60:06:eb:8c:6f:3a:96:c3:7f:c4:de:23:
         76:e0:27:fe:fa:3c:29:6c:c4:25:c4:1e:9c:9f:43:35:6a:a2:
         9e:6b:80:b9:6d:ec:71:5c:31:d8:d2:d8:cc:fa:3a:a4:1b:ae:
         be:f9:12:0d:a5:e9:e8:f0:7f:7a:39:61:2b:94:73:94:ad:a3:
         5e:13:5e:ba:bd:1f:3a:02:e8:4b:4a:41:df:75:26:a2:09:65:
         eb:cf:5c:5d:95:ea:b2:4d:4f:79:97:f0:7f:19:6d:fe:af:1b:
         45:ea:f3:fc:31:a1:0f:72:55:fe:5b:04:a1:f9:07:3e:50:e7:
         89:d3:1c:4b:b8:96:da:45:3c:37:d9:cb:4e:cb:c8:42:89:0c:
         29:ca:ce:f9:88:e1:a1:87:a5:c5:c6:61:6b:55:2d:ba:49:90:
         01:19:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:09 2026 by rpki-client