Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/392c442f-4976-38a3-baee-a5ba6a90ffec.roa
File:                     392c442f-4976-38a3-baee-a5ba6a90ffec.roa (raw, json)
Hash identifier:          cyktOLMTvb4NWQA7aSPi5wokaJjqEf0OIjM4eiq67Z0=
Subject key identifier:   82:4C:0F:B5:88:DC:FC:51:E5:A1:84:9A:1B:7B:E9:CE:70:83:4E:30
Certificate issuer:       /CN=b30fdc34-5ac1-47ab-b516-fc1c3adfaa08
Certificate serial:       010D0C9F4328584EA79B1F3C06960930A15FEB00
Authority key identifier: 7A:8C:BB:71:58:E6:E9:72:5A:87:4F:EC:3A:D5:CC:BE:84:19:79:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/392c442f-4976-38a3-baee-a5ba6a90ffec.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     152179
IP address blocks:        23.141.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:1f:3c:06:96:09:30:a1:5f:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30fdc34-5ac1-47ab-b516-fc1c3adfaa08
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=18e82657-e0c9-487c-b1f6-fb9671dead50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:e1:ef:16:3e:ae:ec:31:e7:3c:c1:00:73:
                    8b:14:f7:ad:6c:57:c0:bf:6e:9b:d3:f6:da:d9:c1:
                    39:f4:f9:99:ac:04:7e:61:cd:e3:e1:b1:3e:c5:23:
                    ef:7e:99:f6:f8:18:70:b5:42:cd:0d:53:18:51:74:
                    46:38:63:78:8b:0d:e2:a5:6b:1b:91:f7:f0:ff:df:
                    d3:39:72:58:04:29:c8:49:19:2c:02:81:47:bb:e7:
                    e3:32:05:69:ca:4b:77:14:a5:67:9a:9e:cb:dd:29:
                    a6:a3:f9:42:32:89:32:1f:1d:52:48:d2:45:58:5e:
                    90:72:d9:af:fd:61:d1:46:28:80:87:82:b8:27:b2:
                    73:3a:76:f6:bd:7c:fc:bb:35:40:0d:5a:06:ea:f2:
                    35:4c:88:96:e0:e4:5f:d7:12:b3:82:b0:26:1a:44:
                    7a:3e:69:f6:07:33:d3:10:97:4a:51:e8:ab:9c:06:
                    5c:1e:61:63:92:3f:ba:28:52:5c:8b:d8:0c:19:26:
                    d9:bb:40:fa:e9:1b:b4:dd:7e:7a:49:45:43:87:7b:
                    94:8d:27:9c:e2:60:fa:19:b0:fd:63:1b:01:51:83:
                    6c:49:f7:f7:89:47:dc:b5:f1:57:6b:e0:6f:cb:de:
                    93:e2:b1:d1:a1:18:49:d3:ae:b4:10:fa:f0:44:2f:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4C:0F:B5:88:DC:FC:51:E5:A1:84:9A:1B:7B:E9:CE:70:83:4E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/392c442f-4976-38a3-baee-a5ba6a90ffec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.crl

            X509v3 Authority Key Identifier:
                keyid:7A:8C:BB:71:58:E6:E9:72:5A:87:4F:EC:3A:D5:CC:BE:84:19:79:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:50:ee:62:97:43:15:00:d0:67:14:e0:dd:d2:a3:8f:7d:
         ad:f2:a9:0e:98:70:18:62:bf:35:f2:50:00:47:e7:4d:fd:71:
         c1:88:d3:03:dd:68:d3:c1:41:80:8a:0d:b2:c1:54:0d:b7:26:
         35:77:76:55:d3:fe:20:29:5f:af:a3:92:f7:3a:bb:1a:be:a2:
         4b:a4:20:41:4d:8b:83:a8:1c:25:d5:6d:2d:ff:ac:25:f5:bf:
         5b:e7:3c:1a:16:61:5d:8e:69:cf:0c:72:6b:ad:80:f2:b9:e1:
         48:0a:39:1a:14:2e:57:9e:4a:34:45:cc:ed:06:7e:d7:29:59:
         4a:b1:61:46:2b:4b:9b:c3:0e:88:a9:bc:ed:0e:bf:f2:2d:05:
         20:9c:11:23:02:e0:9b:82:a3:d8:a4:1b:b7:a1:d6:6b:25:50:
         3e:c7:5d:7a:ad:c0:53:c3:eb:0d:ee:37:89:6e:9a:26:51:79:
         f2:f1:27:23:09:98:65:b9:6b:83:d1:85:34:99:3d:82:a3:32:
         88:6c:b9:d0:c8:ad:54:b7:ba:6f:e1:b3:cd:79:e7:f5:e2:e7:
         9f:53:0c:09:e5:07:65:09:5e:ec:3d:90:bb:9e:62:c7:db:d6:
         7c:df:37:c3:8a:a8:3b:94:70:e4:8e:1f:08:d8:64:e3:46:fd:
         31:c8:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:05:19 2026 by rpki-client