Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/87116794-90fc-3c18-9b22-2faae252aa65.roa
File:                     87116794-90fc-3c18-9b22-2faae252aa65.roa (raw, json)
Hash identifier:          Z4w/RGuoISrFrhDOezwqqIYX0VnYE8GsYFWw41Xswgw=
Subject key identifier:   38:A7:99:3B:AF:7A:7D:76:AB:62:2C:4D:66:DB:6C:8C:63:CC:35:DB
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584EA7881A550C368E087DAAA814
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/87116794-90fc-3c18-9b22-2faae252aa65.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33442
IP address blocks:        149.23.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:1a:55:0c:36:8e:08:7d:aa:a8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5c2a75d5-3763-4dd0-8af5-3422cc97c440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:0e:bd:aa:39:13:ce:bf:76:33:c6:04:87:
                    43:62:54:bf:e4:53:47:7f:5a:9f:f0:ac:e6:83:76:
                    d7:3c:a6:67:95:ff:5f:c7:57:6d:05:0e:c1:ae:df:
                    d0:4a:01:02:53:6c:80:1f:b7:f3:04:90:49:2d:df:
                    31:df:58:6b:6f:e8:46:ab:d7:81:d4:66:09:69:fc:
                    ed:4f:53:d7:34:5c:19:d5:ff:b6:d6:9d:e3:02:ef:
                    a0:cb:64:22:e7:af:58:21:bd:05:c7:87:e3:71:05:
                    79:6f:62:45:02:2e:84:c1:5b:6d:de:e4:66:90:97:
                    28:67:71:15:25:00:91:0e:44:23:7c:1a:2f:5e:82:
                    98:aa:9d:cf:5e:f3:02:7d:1c:a2:dc:44:12:b8:13:
                    23:e6:16:e7:f6:ce:3c:02:8a:db:e2:4f:55:c4:13:
                    09:40:7c:cb:dc:f2:64:d7:1e:25:5a:a4:71:44:d7:
                    3a:ed:19:90:cf:ea:6b:1e:38:92:1e:60:ac:1d:22:
                    87:a3:bb:1b:72:5f:35:4d:a0:0f:a7:16:d0:7e:b2:
                    71:c7:4f:79:5d:8e:8a:cd:50:06:1c:a7:0e:45:a9:
                    29:d8:3a:60:51:7d:f7:34:11:a5:a9:d4:f6:39:c0:
                    89:9d:d6:47:9c:76:30:d4:04:3d:92:8f:60:2d:4e:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A7:99:3B:AF:7A:7D:76:AB:62:2C:4D:66:DB:6C:8C:63:CC:35:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/87116794-90fc-3c18-9b22-2faae252aa65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4a:d9:cb:64:bd:c0:84:8a:f9:05:d1:f1:8a:10:91:8b:c1:
         bc:56:10:58:6a:c5:10:ea:b4:39:b8:27:43:4e:81:22:8b:9a:
         6d:69:02:a0:51:ed:ba:31:48:e5:a8:67:e5:9f:75:98:a3:e8:
         4d:ae:cc:38:b4:f1:89:7c:22:8b:0c:ff:21:db:dc:bb:c6:92:
         96:18:29:e1:ba:55:49:d9:2f:3d:2b:7d:c2:4c:7c:1b:6e:6d:
         2a:ae:3b:70:8b:23:ec:b9:ce:89:f0:4a:a6:14:a9:37:63:38:
         22:8c:c6:36:64:8e:27:d4:6a:5b:d2:c9:4b:7d:7c:72:53:5b:
         fa:31:50:75:21:15:7b:1c:e3:a9:fc:62:96:a9:eb:d2:73:34:
         d5:16:6a:66:85:6c:e9:aa:98:aa:0f:9f:8c:83:aa:66:d0:f3:
         76:3a:03:d8:24:37:52:29:a3:45:57:1a:e3:3e:6d:d2:39:9b:
         92:75:1a:cc:fc:6c:fe:f5:4a:bf:1e:28:02:95:ca:3f:7b:c6:
         b5:4f:d3:3f:95:81:ad:45:17:9a:2e:c3:f8:fe:8a:d6:39:45:
         c4:db:e2:7e:cc:16:70:a5:64:c4:a6:af:cc:4b:72:f9:4d:69:
         13:4c:7a:9c:69:7a:14:21:6b:bd:77:bb:34:25:22:4f:d0:83:
         d3:1b:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:14:54 2026 by rpki-client