Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/25563089-977d-3df2-816d-629ad928846a.roa
File:                     25563089-977d-3df2-816d-629ad928846a.roa (raw, json)
Hash identifier:          FwaMGDRJkrog+zpwTgGeL84Y0UwdcPa55XjzJclmYw4=
Subject key identifier:   1C:36:DC:EE:0E:25:CC:03:98:A1:9D:28:A2:11:91:BB:06:AE:02:FF
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584EA79D5A6DD21E8D874F743E00
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/25563089-977d-3df2-816d-629ad928846a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11870
IP address blocks:        167.23.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:5a:6d:d2:1e:8d:87:4f:74:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ee34d7e0-880a-4010-99ae-28544a3e9970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:0a:0b:46:4d:62:87:fb:b8:10:ba:83:fd:
                    90:9d:bd:49:97:6e:b7:5d:f1:58:ed:5d:dc:8c:29:
                    6d:3a:ee:33:6b:ce:2a:fe:6b:8a:a7:75:bc:e4:b6:
                    d1:21:1a:d6:29:70:d5:04:0e:d2:8a:d0:70:ab:50:
                    93:52:92:13:bd:36:d5:02:8d:05:25:63:0c:44:9d:
                    e8:67:41:63:07:1d:9d:19:61:cf:f0:d7:63:c4:c7:
                    be:ed:13:d2:c8:fc:c9:40:a6:48:ae:c6:a6:8f:28:
                    9f:a6:f6:3b:c2:e6:a9:2a:b6:b5:c4:a4:be:71:f0:
                    b8:43:80:1b:af:e2:9b:7c:7d:73:79:9d:0f:28:0b:
                    73:2b:c1:66:01:82:23:3e:59:60:bd:51:45:75:23:
                    a0:2e:78:af:75:40:8e:18:a5:be:30:74:51:88:a7:
                    e9:3a:52:9a:78:c5:50:d6:7f:f2:71:a2:84:c3:04:
                    9d:74:1a:c7:a8:14:e1:84:0f:e4:d5:53:38:a1:1f:
                    31:e6:16:f9:5e:ab:28:e7:3b:7a:6a:98:d1:c4:94:
                    c2:d6:e2:c8:bf:ef:9c:16:15:2b:c4:02:cb:fb:d7:
                    c6:5c:6d:af:33:75:ee:1c:af:38:9a:88:b2:f7:74:
                    60:39:df:73:50:65:ab:53:85:e7:af:bd:8a:f0:03:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:DC:EE:0E:25:CC:03:98:A1:9D:28:A2:11:91:BB:06:AE:02:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/25563089-977d-3df2-816d-629ad928846a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:87:71:f9:7e:35:82:4b:82:b3:f8:d0:69:52:9a:91:98:
         05:c9:2f:2b:58:c2:61:24:37:97:2d:51:c0:b7:ec:b6:5a:b8:
         6f:7a:5a:b7:f5:bf:4e:e5:79:b0:c8:05:e4:60:1b:6f:d7:5f:
         ce:00:7e:82:05:be:f1:97:3d:9b:88:ef:f8:33:04:18:fa:1c:
         bb:14:e3:26:1d:b4:98:50:4d:a5:ae:fe:cd:a3:b6:7a:2c:52:
         c6:26:26:70:22:6a:94:72:b0:06:1d:ee:5f:66:a1:fd:fc:5c:
         fa:7a:40:1d:9a:02:48:55:6b:a9:2a:59:e8:46:4f:24:b3:a6:
         53:36:09:ad:22:bd:5a:c8:da:ab:e0:6e:c8:d6:df:bd:14:b5:
         22:a4:db:b8:02:57:e8:9e:6d:da:c4:50:5b:62:5a:5a:d9:9f:
         b2:42:7b:cb:d5:0e:46:32:81:ce:67:6d:ee:ba:9f:9b:92:c6:
         52:89:c0:18:87:6e:d6:95:75:d5:aa:51:8f:b5:e6:5e:38:f5:
         e9:b9:c8:44:9d:ad:75:6a:d5:d3:8c:ab:fe:77:61:29:23:1e:
         1b:ca:80:26:e3:a7:59:da:e3:a0:94:d9:81:92:b2:53:3d:f4:
         e6:25:0b:5f:ef:af:2e:6c:58:dd:f4:3c:bc:78:8e:f9:3e:07:
         91:18:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:00 2026 by rpki-client