Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/02793c86-b531-3c71-ae2d-0b2c1778cf27.roa
File:                     02793c86-b531-3c71-ae2d-0b2c1778cf27.roa (raw, json)
Hash identifier:          6cPK8oDyVW1iHtzQwRN+XUw8U3khZkx9uB5UhLv1MBI=
Subject key identifier:   19:2F:37:D1:13:92:D0:52:B4:03:0D:71:A5:04:7D:E1:2F:18:30:0B
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584EA79D59077FEFBD263C605200
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/02793c86-b531-3c71-ae2d-0b2c1778cf27.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11870
IP address blocks:        167.23.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:59:07:7f:ef:bd:26:3c:60:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dcf91fd3-5282-4cec-9ebf-83952b110b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:91:40:ce:15:b0:bd:d0:07:94:f8:07:38:
                    0c:0d:dd:8b:18:23:9b:79:d2:5e:fd:04:22:4a:0d:
                    cd:84:95:bc:06:4a:fa:dc:fd:1a:ed:16:78:d2:72:
                    bd:da:7e:32:8e:04:05:30:93:b7:4e:d0:0b:ce:c4:
                    25:c1:93:b3:81:5a:a4:74:2f:70:cf:ff:95:42:ae:
                    7e:50:cd:f2:4a:5b:67:e2:46:58:c9:b6:76:d0:b7:
                    4a:79:6e:0d:44:3f:fc:6f:a5:9c:30:31:48:83:36:
                    71:f1:19:a1:ce:40:36:a5:04:07:53:c1:34:51:8c:
                    0c:74:31:a9:29:78:52:c6:cd:81:15:fe:09:b2:9a:
                    46:b1:27:57:2f:66:d9:f5:dd:e9:29:6e:2b:c3:2a:
                    cb:61:27:69:78:03:d1:47:fd:c2:fc:d6:da:f9:07:
                    e1:6b:02:78:c5:e0:39:dc:14:e7:91:c1:86:4e:90:
                    fe:ee:ac:0d:95:18:ab:da:8b:a7:14:73:22:6e:b6:
                    79:94:b3:80:a9:07:15:3c:1b:51:5a:0f:ed:70:8d:
                    17:98:4a:7c:f6:8e:8c:96:d7:8c:86:fb:1d:9f:99:
                    42:b8:ef:9c:04:2f:27:db:76:69:bb:2f:e8:c7:5e:
                    2c:41:a9:f9:75:3f:b4:57:24:f6:7b:0e:e5:e8:33:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:37:D1:13:92:D0:52:B4:03:0D:71:A5:04:7D:E1:2F:18:30:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/02793c86-b531-3c71-ae2d-0b2c1778cf27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:da:d2:d4:19:f6:8b:2a:98:7f:54:46:b1:5e:1f:24:e2:0c:
         d9:6b:9f:ce:06:ed:9d:67:7c:e5:12:a7:ba:7e:18:0e:12:2b:
         48:db:53:fa:de:5c:dd:7a:0c:97:2d:9e:17:08:ed:c6:ae:43:
         75:f4:2a:40:8e:ac:a5:4f:2e:90:69:d8:ef:37:b0:a2:10:64:
         60:55:c0:47:80:7a:ad:ee:17:dc:42:09:53:eb:12:51:57:3e:
         af:03:9c:02:70:65:13:8f:18:9a:57:70:8c:60:a7:53:6c:e5:
         ca:3c:3e:b1:c2:fa:e9:4c:57:01:29:ad:e4:b1:25:15:5c:60:
         c1:23:fe:88:4c:a1:00:8f:bc:76:51:5b:c5:06:d2:66:99:9a:
         fd:df:ce:de:1c:d2:1b:f1:88:85:cc:d0:e9:fd:75:34:6c:02:
         f2:c0:f2:59:ab:30:70:86:df:ff:77:61:fc:35:f5:a4:7a:65:
         f0:20:45:ab:58:ab:47:81:56:19:c8:6a:6d:ec:e2:42:3a:09:
         1f:00:df:6d:06:aa:fa:75:d5:98:8c:f7:54:48:bd:8c:1b:4a:
         70:d5:f6:1b:6c:96:f5:3e:79:99:da:30:d4:66:59:d7:14:04:
         e0:15:2f:ce:90:81:69:57:5c:4c:fd:50:04:56:7d:22:31:c5:
         c6:57:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:58 2026 by rpki-client