Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
File:                     431ff5e4-1113-3827-ae60-a56d271454c4.roa (raw, json)
Hash identifier:          73KARWJV2V6zJU/qMsHgaxiqgxfjt0sgQ20TNPQ0zsY=
Subject key identifier:   B5:2F:23:B0:70:7B:FB:DE:AC:7F:90:81:AE:B8:EF:3A:12:41:A1:7D
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584EA7884E62FD873EBA0F704940
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36530
IP address blocks:        23.185.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4e:62:fd:87:3e:ba:0f:70:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5b12478e-07de-44d3-8e7f-cb4d6ce5bf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:5f:c6:6a:fb:6e:8c:37:24:e4:a1:67:33:
                    ab:d9:96:f7:b0:f8:3d:e8:c7:19:83:01:be:95:2e:
                    a9:c0:0f:25:8f:6f:f3:31:77:ce:42:26:ed:d1:ed:
                    f6:5b:29:4b:96:df:a0:0e:26:5a:fd:9b:e2:2d:e8:
                    6a:5d:fd:db:ca:e0:32:4d:ae:ba:26:2d:69:c7:0c:
                    93:12:94:83:8c:4a:f7:7c:54:0b:25:63:33:22:1b:
                    b7:d6:86:24:05:15:f1:a3:84:4a:9b:dd:51:ea:63:
                    f9:ab:80:87:57:6c:2a:50:6e:2a:9e:ed:35:11:d1:
                    89:47:ad:4b:fe:30:01:76:df:00:18:14:16:b5:74:
                    21:f7:a5:ad:fc:05:7e:8b:39:41:f4:ae:bf:67:7c:
                    de:26:09:cf:68:0d:18:1c:71:2e:3f:93:81:a0:f6:
                    c1:d6:5d:b8:e4:66:c2:bb:7f:45:ff:96:b1:c2:6e:
                    c2:f3:17:7b:94:7a:d3:ca:e7:dc:56:51:4d:04:88:
                    b2:21:2e:df:60:bf:c6:82:d2:a5:af:ae:f6:5f:3f:
                    df:86:50:74:34:75:8e:c7:e7:96:d9:02:b4:fa:d2:
                    2c:4b:bf:10:ff:c7:68:b5:4f:14:5e:67:27:ba:a4:
                    dd:c6:66:fa:d3:79:7c:ec:45:80:a9:c0:af:30:7f:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2F:23:B0:70:7B:FB:DE:AC:7F:90:81:AE:B8:EF:3A:12:41:A1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:26:98:0c:7e:e1:29:bb:5a:3c:13:25:8e:3e:c8:70:c9:
         5e:c9:40:ca:4a:32:67:fc:76:1d:17:6a:04:d2:5e:8a:6e:7c:
         1b:47:42:32:15:68:ea:9a:ff:e2:df:dd:9f:27:87:40:51:a4:
         6c:25:b8:6a:60:ff:11:f5:c7:de:aa:c0:6f:6d:7c:c9:39:6c:
         a7:d5:ec:31:d9:bd:26:a8:66:fd:c5:67:e1:96:6a:a8:bd:5f:
         ef:d0:07:f1:ef:25:87:1c:ee:6e:00:4f:c8:9c:3e:15:27:9b:
         5a:6f:8b:13:e9:7b:70:40:8f:96:39:e2:69:7f:72:98:00:cc:
         f1:64:17:75:d0:4d:7f:08:e0:c2:7d:ab:49:96:36:87:d3:0d:
         92:c0:8f:7f:7b:7e:09:24:fe:94:dc:cf:13:72:5b:ab:98:a6:
         f4:b2:c4:8e:d3:4e:41:3a:49:1e:2a:a2:ba:fe:56:63:d4:d5:
         72:92:b9:e1:e3:81:c2:ad:79:05:12:de:3b:f0:f8:64:13:60:
         e2:ca:1f:2a:f4:36:6b:9f:eb:27:b7:a1:97:49:c5:7b:42:7c:
         3a:a2:51:f2:93:16:44:d1:2e:2e:6c:b4:ae:29:55:c8:c5:39:
         b5:97:4d:57:cb:73:8f:d9:02:e2:f6:a2:b5:ba:1f:77:70:4d:
         2b:72:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:17:55 2026 by rpki-client