Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa
File:                     942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa (raw, json)
Hash identifier:          pc/QkWXLBgYewZpyKKUAF1VMtflZlaS/kSORzz2OYNA=
Subject key identifier:   CC:81:D6:50:7A:02:1F:89:8B:3E:C9:13:92:0F:E1:0E:24:92:FC:A0
Certificate issuer:       /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Certificate serial:       010D0C9F4328584EA78719B1B04851234C05F000
Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20119
IP address blocks:        23.151.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:19:b1:b0:48:51:23:4c:05:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e2f70846-b32a-4753-b6a9-6871034f6287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:5c:1f:a1:ef:db:c6:9a:1a:cb:5b:9d:b6:
                    a6:40:07:38:82:b0:d7:be:01:8b:86:74:05:a7:88:
                    ca:b9:a0:4c:c2:a1:ce:90:19:35:7d:11:98:9d:93:
                    df:4b:a1:9a:fc:ee:2a:a5:91:b0:d6:14:22:1c:a4:
                    ca:f1:20:70:a0:e8:a8:64:c6:aa:6c:bc:a0:08:ed:
                    b5:6b:c6:88:92:1f:a8:8d:92:38:06:f7:8a:e5:db:
                    bb:2a:c2:e1:1f:e9:ca:67:01:36:d8:89:94:88:b3:
                    c5:1e:85:dd:99:6e:18:76:11:84:da:59:91:d4:34:
                    82:fd:b8:5e:32:15:83:5a:c5:b2:1c:af:1d:cc:d5:
                    cb:c7:2d:3b:7b:78:7e:70:95:c1:32:a5:a5:b9:96:
                    f8:3a:81:f1:05:b2:2d:08:28:4d:8e:76:e6:ad:cd:
                    d0:87:4f:4f:88:db:dc:78:6a:07:6b:f6:0a:82:3c:
                    3a:08:d1:4a:f7:89:3d:85:3a:90:42:f0:50:b0:6e:
                    9c:8c:01:32:22:0b:c3:73:82:ce:e9:d7:54:3a:48:
                    c3:cf:ae:20:54:1d:e5:70:23:ed:bd:fc:7e:2f:7b:
                    04:d5:b1:6d:fe:f9:86:92:56:fa:45:12:96:f6:f3:
                    92:4c:50:d9:a9:35:7b:e2:44:18:7f:3d:20:39:76:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:81:D6:50:7A:02:1F:89:8B:3E:C9:13:92:0F:E1:0E:24:92:FC:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl

            X509v3 Authority Key Identifier:
                keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:3b:ef:a1:57:66:93:0c:33:f1:c1:f2:16:62:37:c3:c9:
         82:de:99:5a:f0:dd:87:58:cc:28:8c:9c:73:00:7f:4b:c7:09:
         2d:b7:84:a9:e9:96:11:14:5f:c6:4a:45:9c:e4:54:f2:54:f3:
         ec:76:2c:3d:48:b2:62:70:9a:74:1e:e3:0e:11:de:05:dd:fa:
         1a:ad:20:9c:c3:35:5b:4c:7c:ef:a4:3a:d0:c1:83:9f:a1:8c:
         4f:90:d1:15:10:60:50:6e:ce:33:b4:81:f4:c8:55:37:70:c8:
         2e:72:2b:7d:ad:f8:a7:f9:4f:3c:51:5e:13:60:7a:71:10:44:
         83:14:24:8d:b9:53:ff:1e:70:87:d0:44:18:7a:12:e3:d0:0c:
         09:47:a5:bb:f3:86:ac:c0:b0:87:63:b5:69:c8:fd:04:68:99:
         35:f3:e1:33:dd:05:d2:f2:25:72:53:27:fd:11:10:9f:ec:cb:
         aa:ff:af:6e:68:1f:7c:08:f5:5f:a3:5c:67:c0:dd:f9:d6:6d:
         7b:93:87:70:ec:99:6a:e5:6c:83:34:71:6b:45:d9:d0:48:ea:
         bf:64:4e:86:45:53:fd:8c:62:8c:ee:0d:1d:12:03:2c:83:1c:
         78:27:75:69:4b:ff:c0:43:36:df:18:5a:1b:f8:04:05:07:35:
         a6:19:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:28 2026 by rpki-client