Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0/9735d16d-28b0-3a5b-8437-567995a8e423.roa
File:                     9735d16d-28b0-3a5b-8437-567995a8e423.roa (raw, json)
Hash identifier:          PTYratXEN6ZbOtwTlXBUQmE8hCyT5PZ/wjE3H+tUTGM=
Subject key identifier:   1F:BA:29:5F:4C:60:06:E4:2C:47:2F:9B:28:29:05:0E:13:E6:2C:FD
Certificate issuer:       /CN=e9a7e640-47d5-4439-b6ab-d0d011e9b3f0
Certificate serial:       010D0C9F4328584EA79205AE9D97C3328FB27400
Authority key identifier: 62:E5:E0:7B:46:50:67:15:36:DF:61:7B:87:4F:AF:97:C9:9E:E2:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0/9735d16d-28b0-3a5b-8437-567995a8e423.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     44841
IP address blocks:        23.145.252.0/24 maxlen: 24
                          2602:f551::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:05:ae:9d:97:c3:32:8f:b2:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9a7e640-47d5-4439-b6ab-d0d011e9b3f0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=95c7db1c-7eb5-489a-bc66-f905a679937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:ec:66:ea:ea:1b:46:66:f8:23:08:c1:dc:
                    ad:21:8a:a2:03:4f:92:ed:48:ca:1e:e0:e3:5a:da:
                    f5:18:55:32:41:9b:28:ba:74:55:cd:85:68:92:d2:
                    19:6d:ea:fd:36:bc:e1:70:77:c5:07:18:b9:96:ed:
                    e3:cd:3f:2f:39:37:bc:8b:c2:5f:42:cb:b0:8f:26:
                    d8:74:52:96:47:fb:bb:b9:20:4c:d0:02:10:8d:1c:
                    59:06:ad:d8:44:74:55:07:4e:54:36:10:eb:7a:f0:
                    6a:38:a9:18:31:20:47:e4:5c:b1:9e:e8:3f:20:61:
                    d5:c5:4d:b5:40:6b:6a:97:d7:dc:e0:05:07:2b:03:
                    92:62:c0:30:07:6f:bd:8c:d2:31:94:52:e4:3e:0c:
                    ce:4d:c6:be:27:2b:17:48:1b:42:b6:16:92:26:e2:
                    22:a9:ee:1a:01:78:d3:ad:8c:4b:83:39:1f:59:34:
                    0b:73:a3:e1:35:77:93:27:24:25:7a:9e:50:d1:6c:
                    db:ba:35:3c:40:86:c9:31:0c:40:6d:ee:46:3d:06:
                    6d:b8:c4:4e:84:02:15:ab:4b:ce:c1:e6:59:d8:42:
                    b8:94:c5:de:77:0d:3b:48:a0:d9:86:d9:c7:15:98:
                    29:be:45:59:1c:5b:96:be:d8:7c:fa:af:3d:35:b4:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:29:5F:4C:60:06:E4:2C:47:2F:9B:28:29:05:0E:13:E6:2C:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0/9735d16d-28b0-3a5b-8437-567995a8e423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0.crl

            X509v3 Authority Key Identifier:
                keyid:62:E5:E0:7B:46:50:67:15:36:DF:61:7B:87:4F:AF:97:C9:9E:E2:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9a7e640-47d5-4439-b6ab-d0d011e9b3f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.252.0/24
                IPv6:
                  2602:f551::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:12:8c:b3:5f:fe:df:e5:0b:9e:5a:31:18:21:d4:d2:a2:cf:
         8b:aa:d2:e5:cc:de:94:af:ef:6a:1f:c5:06:81:ea:31:ba:d8:
         50:e7:15:76:46:4f:38:b7:53:45:2c:c4:f0:2a:1d:c2:a0:c2:
         54:41:bc:ff:4f:d3:87:c4:93:80:2b:9d:bb:1f:f3:b6:b0:52:
         ae:04:5b:9f:ac:79:28:0f:6f:dd:41:36:1d:f7:b6:ab:39:b7:
         2b:0c:25:bc:02:a8:9e:67:48:09:f2:2d:7b:bc:c1:87:98:67:
         b9:80:45:d8:c6:b6:93:1d:99:b1:7d:3d:b5:c7:f8:e7:b9:50:
         95:aa:ca:3a:c5:48:1a:45:27:0c:55:83:10:bd:a8:48:09:ab:
         02:38:36:5f:dd:cb:76:ce:c2:c9:56:73:16:da:d0:65:a1:8e:
         c5:12:f5:e0:f7:ec:73:68:8b:de:02:25:aa:c0:83:a5:17:bb:
         77:5f:7e:57:ac:90:90:97:32:da:a0:3a:10:b0:e9:cb:23:88:
         ce:89:9e:68:3f:62:0f:9c:6d:24:db:29:51:be:60:01:ef:4f:
         a5:6e:c5:35:48:91:66:d3:e7:22:14:11:e1:91:a4:aa:1a:90:
         07:b3:3b:fd:1e:af:ac:8b:d2:b7:41:44:f9:54:4a:d1:a9:10:
         a8:ba:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:18 2026 by rpki-client