Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/2d6d421b-b254-3866-8906-ceaa3a095505.roa
File:                     2d6d421b-b254-3866-8906-ceaa3a095505.roa (raw, json)
Hash identifier:          kAo/aM7wK0fYFSjj8HMv+bPvWSKmpDPPQCvqT2TGqcs=
Subject key identifier:   DC:0C:F4:5E:18:CC:61:23:8D:0A:E7:BE:4C:49:DB:DC:17:5A:29:F7
Certificate issuer:       /CN=a5c518d0-6c8f-4cc0-8433-e63522746509
Certificate serial:       010D0C9F4328584EA1B5C4EC971E752F2F287E80
Authority key identifier: 2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/2d6d421b-b254-3866-8906-ceaa3a095505.roa
Signing time:             Sun 26 Jul 2026 22:59:54 +0000
ROA not before:           Sun 26 Jul 2026 22:59:54 +0000
ROA not after:            Sat 24 Oct 2026 22:59:54 +0000
asID:                     402778
IP address blocks:        23.161.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:b5:c4:ec:97:1e:75:2f:2f:28:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c518d0-6c8f-4cc0-8433-e63522746509
        Validity
            Not Before: Jul 26 22:59:54 2026 GMT
            Not After : Oct 24 22:59:54 2026 GMT
        Subject: CN=d8d9d66c-7559-4feb-a648-ced1e16efa88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:13:b3:32:d8:4b:80:50:f7:38:ef:aa:05:
                    bb:e5:a8:0b:d0:5a:c0:8d:a7:58:78:0d:9b:94:74:
                    a3:53:18:4b:cf:bb:f8:4a:70:eb:c4:82:a1:71:bc:
                    b2:5b:44:a1:b4:f3:dd:33:fe:f0:7d:f2:d0:50:9d:
                    46:51:fd:c9:fa:54:3a:a9:74:0b:b5:c9:c1:34:26:
                    21:62:79:07:c1:14:4d:fa:57:52:b0:cf:2b:8e:f5:
                    a0:36:a3:d2:34:b7:67:39:d9:1d:be:fa:03:30:86:
                    27:8f:06:e9:20:06:cd:83:72:a3:3e:a3:cb:dd:85:
                    11:4c:cd:39:24:e4:80:bf:88:67:89:e6:3e:89:b8:
                    71:10:07:09:a8:f0:d9:07:0d:8a:dd:80:14:b0:5f:
                    d9:e2:7f:7d:12:cb:de:48:15:97:bb:86:37:42:20:
                    ac:31:7e:76:5f:1b:86:38:72:1a:eb:8e:a3:ef:c1:
                    57:c1:71:de:69:d9:b8:dc:e4:da:08:a3:43:15:c0:
                    94:e8:ec:ce:a8:e3:04:09:7c:cd:b3:6f:54:9e:b8:
                    ea:55:70:61:d6:82:7e:15:4a:89:4a:9b:dc:cb:e7:
                    55:e9:0d:3b:b2:51:0b:09:30:49:57:ec:8e:10:7a:
                    30:b6:45:b5:37:84:75:93:29:e0:7a:80:ca:49:65:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0C:F4:5E:18:CC:61:23:8D:0A:E7:BE:4C:49:DB:DC:17:5A:29:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/2d6d421b-b254-3866-8906-ceaa3a095505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl

            X509v3 Authority Key Identifier:
                keyid:2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:4c:5c:b4:f5:f9:59:b1:34:2a:6f:b8:33:15:7d:13:90:
         3b:08:ab:c9:91:89:f4:e5:84:95:be:ad:e6:0a:10:8a:74:25:
         f6:58:01:ef:f4:5c:d1:83:7a:b6:4f:10:33:cc:9d:3c:b9:d6:
         34:2c:50:60:4f:6b:ae:f0:a5:c7:ca:46:6c:84:55:04:42:6b:
         b8:2d:31:40:06:6d:5c:54:ad:6c:d4:c4:06:a3:3e:1d:4d:07:
         b6:49:0d:fe:be:da:1a:4a:15:f9:89:2a:24:37:ba:4b:47:24:
         e0:d5:8d:0c:23:fd:6a:6a:d2:aa:77:ba:2f:c0:b0:9d:4d:16:
         71:e6:75:74:b4:b6:73:9a:75:29:c8:27:05:39:2f:de:20:56:
         12:0b:aa:02:d5:6d:a2:60:f4:be:48:dd:43:f0:ed:c2:df:01:
         82:53:1b:19:63:21:c3:12:70:6e:7d:4b:5d:bd:5f:a1:db:2f:
         d6:1d:2d:b3:c4:22:62:e8:a0:6d:c0:82:17:77:c4:af:39:b7:
         f8:e9:3d:d5:c2:ed:57:d0:38:82:18:7b:5b:3f:cc:8c:44:c7:
         13:49:c2:a8:c9:5c:7e:44:34:4d:0e:39:17:d6:ee:1e:75:57:
         b3:ac:51:8a:b8:03:8a:09:ca:c3:5b:2d:80:ef:51:5f:ad:a2:
         d1:bf:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:43:43 2026 by rpki-client