Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/23b91df6-1f10-37cb-8ace-4439601f412e.roa
File:                     23b91df6-1f10-37cb-8ace-4439601f412e.roa (raw, json)
Hash identifier:          V9o5CfXv5HeuzkXNsCDrWbnPtHGOFNQr51iGiMie220=
Subject key identifier:   8C:B3:21:7E:12:4F:9B:25:4E:DC:16:FD:98:5E:D6:38:3C:2B:E0:AA
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584EA2DFD20EFA1399AFDE7ED830
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/23b91df6-1f10-37cb-8ace-4439601f412e.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     4609
IP address blocks:        139.95.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:d2:0e:fa:13:99:af:de:7e:d8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=aee0b83c-cd52-4951-b832-6209f6e0e55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:19:f0:9c:fd:ad:6d:d2:ed:80:3c:fb:f4:
                    fd:98:ed:32:40:1d:71:4a:12:ba:79:23:ee:ee:5d:
                    19:25:d5:f2:bc:16:b9:9a:65:d7:f8:c0:22:ad:15:
                    6b:fd:38:ce:98:ec:36:0c:26:dd:b2:bb:d0:14:eb:
                    fb:8c:e4:1d:9d:b7:6c:ac:d9:8f:20:09:49:65:b5:
                    33:1a:ab:a9:31:19:38:13:b0:2d:f0:db:df:28:50:
                    31:b0:39:79:46:57:f8:e2:17:d1:c9:2e:68:b9:3e:
                    20:07:f2:c4:1c:93:87:36:e0:13:dd:56:f0:55:d1:
                    e9:cd:83:fc:da:93:be:81:16:b8:aa:de:85:d7:14:
                    d3:c8:6b:f9:ad:55:bb:0c:af:d5:02:c4:d0:67:d0:
                    74:2e:f7:f2:9e:65:5c:89:6b:f1:ea:c3:e7:cd:6d:
                    7d:1e:96:56:ee:77:ac:a5:11:b2:87:02:80:f9:a5:
                    7f:83:29:18:bc:16:0c:ba:fa:9c:aa:33:da:e8:cd:
                    9d:7a:e0:ba:10:8b:be:b5:a7:9a:44:e0:bf:08:fe:
                    f0:35:cc:55:83:e1:44:b1:dd:dd:a2:ce:c1:9d:17:
                    cf:92:8e:e3:9c:d8:80:ef:37:7a:63:95:44:c8:e1:
                    21:ba:05:81:04:27:06:3d:e9:ca:dd:cd:39:6c:57:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B3:21:7E:12:4F:9B:25:4E:DC:16:FD:98:5E:D6:38:3C:2B:E0:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/23b91df6-1f10-37cb-8ace-4439601f412e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.95.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1f:bc:1e:42:9f:47:f1:1a:25:49:e2:e1:b8:7f:64:ba:f7:
         c7:3d:54:28:b5:e6:e0:d4:4c:fb:09:0a:a5:b6:ff:c5:2e:fb:
         87:00:3b:f9:f5:c7:7b:80:9e:dc:9b:ea:0a:c6:ed:0d:22:f3:
         31:34:87:ac:0d:d6:0f:a2:e5:fa:b9:23:85:e5:05:d0:fd:46:
         65:88:e6:82:53:31:0b:76:71:17:f0:2a:82:6a:a5:5a:b9:b6:
         83:fb:71:75:73:21:10:6b:83:5b:1b:c7:6a:b3:51:61:ce:df:
         99:4a:fc:4a:0f:50:7d:ce:1e:90:50:49:0a:71:15:9f:cb:94:
         b8:0a:1e:0c:56:a9:be:af:0a:71:27:67:c0:f8:43:9b:3f:0c:
         7b:22:f2:c4:a6:c7:f2:e4:06:6c:af:50:ee:84:5a:10:37:3a:
         82:07:26:b2:bb:ed:b0:17:c2:b7:ea:ef:31:56:d0:28:86:be:
         f1:52:53:bc:9f:60:e9:ea:d4:7b:d0:a6:18:0c:f4:c0:fe:9e:
         8f:bd:92:5e:f9:cd:f4:30:b3:de:f5:1e:69:46:82:08:a3:4a:
         11:42:eb:cc:1a:c8:31:99:78:34:fe:60:3c:b6:1d:12:a2:c3:
         c8:15:d7:35:d8:1b:3a:48:11:c4:80:99:91:83:ed:83:94:ba:
         a2:15:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:20:52 2026 by rpki-client