Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa
File:                     050f5b90-2bc6-3aa7-b968-699b132d1876.roa (raw, json)
Hash identifier:          hKfLtmKBe9o8Q+Xv2FmgaOOnEUqKN/SAl+ZIWdq6USg=
Subject key identifier:   CC:6D:D2:29:F7:3F:42:CF:9E:05:B1:DC:A4:22:B7:5E:88:96:D8:39
Certificate issuer:       /CN=aec61144-8dba-4096-a6cb-11d1d289ff0f
Certificate serial:       010D0C9F4328584EA7915744721D13CA1630A940
Authority key identifier: 31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396967
IP address blocks:        23.171.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:57:44:72:1d:13:ca:16:30:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec61144-8dba-4096-a6cb-11d1d289ff0f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f894b7b1-9de6-46a1-a6ab-51ab701937b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:47:85:a0:dd:f9:26:c5:3d:a7:54:2d:90:
                    0e:a2:62:0e:a7:39:9a:a6:cc:ef:d5:24:53:66:1e:
                    ed:03:93:35:8e:01:cd:8f:8f:65:ba:d7:34:76:57:
                    6f:c1:dd:71:c2:16:70:ca:a2:2e:c7:3f:0d:6e:a8:
                    18:6a:8e:a5:a2:86:25:ff:6c:24:4a:cf:05:df:5b:
                    09:ea:90:70:e5:4e:33:64:91:39:ae:2f:6f:ee:a9:
                    58:b8:94:18:6f:f8:71:e4:22:c4:83:0a:69:89:3b:
                    a0:cf:e4:4c:c3:d7:ff:ab:86:af:7d:ea:58:51:cb:
                    72:33:62:66:ec:ab:0f:6f:64:4d:d5:3b:71:2d:f5:
                    66:4a:bf:25:7e:d6:10:51:8a:10:98:0d:da:23:55:
                    43:f2:b8:4f:70:48:d7:49:d5:da:ad:b5:47:6f:38:
                    e1:ab:f2:6e:81:30:9a:b6:5d:45:e5:3b:b8:a2:3e:
                    2b:d1:cc:a9:43:25:68:b5:71:e8:8d:94:8f:a3:7f:
                    c3:9f:5b:7c:ce:49:02:bd:0b:b3:8d:cb:d3:3f:93:
                    51:b0:84:e7:22:bb:1a:4a:50:82:79:8d:00:74:67:
                    23:d5:a4:93:b7:8f:ba:55:c3:df:94:da:1e:f3:74:
                    a8:1d:f0:1f:78:05:e1:e6:8f:05:ff:b9:f3:0d:f8:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:D2:29:F7:3F:42:CF:9E:05:B1:DC:A4:22:B7:5E:88:96:D8:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.crl

            X509v3 Authority Key Identifier:
                keyid:31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:ad:d8:c8:06:a8:24:60:ca:90:da:c3:dd:86:6f:c6:52:
         02:eb:1b:eb:db:0e:42:c8:7a:bf:dd:fc:65:7e:03:8c:63:7c:
         4a:69:22:22:55:ad:3a:8d:f6:67:fd:21:25:19:cd:57:b6:4e:
         c2:af:b0:e6:9d:1b:38:c6:91:ba:0c:7a:c3:56:57:fc:7b:fd:
         3d:0a:3a:ae:64:03:45:50:cf:c5:57:50:00:3d:c1:ee:be:b6:
         5d:ae:8b:2c:5a:30:e2:d2:9c:4e:9c:f1:e8:bf:41:83:37:1a:
         35:b3:d7:10:34:c8:88:c5:95:51:4f:30:ab:89:66:71:04:ad:
         d1:7c:3e:e1:0c:13:14:24:1b:20:3d:b5:1f:e2:10:1d:b6:a8:
         4b:b9:fc:f6:2a:69:1a:c5:75:2f:3a:81:34:93:b0:b2:6d:f2:
         9d:46:97:21:1c:c6:c8:60:c0:11:95:b9:78:6a:22:9a:a5:85:
         43:06:84:0f:53:87:17:7a:1f:37:21:f2:bf:25:4b:a9:73:ac:
         c6:49:ec:21:45:3f:66:bf:c7:18:23:00:d2:9f:0e:83:e1:45:
         15:62:b3:67:a0:57:0e:03:c8:8e:3e:08:ac:59:ae:07:68:e7:
         93:aa:e0:ae:da:13:09:66:6d:85:60:1d:9a:c0:5b:1f:6d:0f:
         e7:9e:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:35 2026 by rpki-client