Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa
File:                     be57316a-e536-36f6-980b-fd2fa53779d0.roa (raw, json)
Hash identifier:          7826zxvLP8z+sUfiSWVQ1CRNpAHzL4wdAj/GVKB4YcY=
Subject key identifier:   D6:77:D1:38:88:5C:D7:5D:A5:C2:A6:87:83:F4:6D:2D:D3:52:D5:B0
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584EA787DA2001EC328F9E898060
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     152156
IP address blocks:        23.249.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:da:20:01:ec:32:8f:9e:89:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f2c38aea-5b6c-4865-9546-0017806431e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:12:73:00:d4:ee:05:57:f9:5a:38:d3:5d:
                    3c:e1:68:39:9b:a0:88:a7:86:88:77:bc:8a:3f:04:
                    5b:62:54:15:38:5a:97:0b:60:5a:be:3a:64:e1:a5:
                    e0:08:d8:8a:aa:af:19:18:6d:76:60:33:fd:19:92:
                    d4:57:3e:e6:49:f7:9b:6f:6b:b2:63:ad:ce:3e:67:
                    34:5c:ff:b1:5b:e9:3a:10:06:f5:ca:81:7d:1a:d7:
                    95:eb:af:3d:a9:13:39:95:4f:1c:c7:05:14:96:85:
                    69:c7:0b:a2:e8:51:26:40:c3:53:1e:38:71:30:6d:
                    63:35:9e:cb:14:79:d2:8f:d3:4c:da:15:7e:80:7e:
                    18:52:d2:f1:12:cc:15:83:bb:4e:80:25:e0:12:88:
                    c5:cb:7c:4b:c1:c9:51:c8:8a:1a:96:44:5c:0a:6c:
                    cc:e8:d2:f5:0b:62:72:5e:f6:3c:da:2c:f1:54:a0:
                    db:b6:3f:f9:4f:54:10:ed:0f:30:d7:6b:4b:9a:a4:
                    a5:8f:88:f7:e7:1e:cb:54:10:13:f8:e4:3b:25:52:
                    9c:5f:df:71:3f:96:fd:2b:5f:e6:66:10:fc:3c:93:
                    01:83:bb:e8:da:9b:bd:97:07:b7:9b:4b:b8:ef:da:
                    76:7d:69:46:bc:7f:5c:f3:be:4c:27:0e:96:b0:f1:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:77:D1:38:88:5C:D7:5D:A5:C2:A6:87:83:F4:6D:2D:D3:52:D5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:63:a2:44:92:53:ae:d1:cf:a7:98:ee:92:90:92:6d:2c:
         92:a6:08:e2:1a:83:21:bd:fa:f5:1e:18:9f:9f:1f:99:0e:79:
         0c:91:c7:a4:6b:f8:3c:55:25:7f:85:ee:a6:7a:e0:c6:60:17:
         b7:0c:05:6a:95:e9:4b:49:b1:f4:03:59:35:ad:0b:bd:5e:59:
         3d:84:d4:38:52:fb:5f:c5:1f:3e:a1:60:cc:06:23:13:58:31:
         f3:86:3b:63:13:89:8c:4c:e5:3a:2b:b6:e4:04:6d:6f:45:88:
         65:44:0c:a7:f3:1e:76:77:b3:5c:0b:e7:7f:12:4e:94:5b:5e:
         47:9f:57:b7:55:f7:4a:98:7b:06:d4:dc:ab:ea:d0:92:8b:57:
         2d:30:94:a6:e5:fd:57:28:9d:bf:7c:a0:e8:e9:22:cd:b2:ce:
         1f:88:bb:7c:c9:c0:94:c6:43:5c:76:25:7c:c8:df:8e:9a:e3:
         93:60:16:27:dd:e2:74:26:e4:62:c4:f7:4d:b6:43:c3:05:4f:
         52:4f:b8:fd:7a:cc:2c:df:16:04:15:70:35:88:2d:b2:cb:1d:
         4d:45:09:05:51:84:90:68:fb:3d:1c:01:60:0a:be:c9:87:c6:
         96:ba:6d:87:fe:0a:7a:c6:32:38:e9:b9:98:14:2b:ee:74:dc:
         c7:80:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:44:34 2026 by rpki-client