Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/713c7e65-670a-35fc-b84e-9ea011c805ed.roa
File:                     713c7e65-670a-35fc-b84e-9ea011c805ed.roa (raw, json)
Hash identifier:          peQCDxV1hPLC/NnNenOQDfhPQcwZ1XuoLmv5DhTfqJM=
Subject key identifier:   93:F5:0E:7A:37:CB:D2:72:0D:92:4E:1E:F8:53:1E:39:70:1B:F1:87
Certificate issuer:       /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial:       010D0C9F4328584F06722D6CE9048F2E23AFD680
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/713c7e65-670a-35fc-b84e-9ea011c805ed.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     41378
IP address blocks:        23.247.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2d:6c:e9:04:8f:2e:23:af:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=bdf5ffdd-b778-4dd8-8218-c30b4ed7f253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:4c:c1:74:c0:80:2f:a1:ae:86:bf:99:1c:
                    46:4c:e4:5c:8b:42:f6:fa:7a:68:48:1c:69:f4:ce:
                    98:97:77:91:f0:f5:8c:60:a0:7c:61:2a:3e:4b:71:
                    76:af:71:e6:b6:a5:42:7b:12:07:9c:b7:20:62:1b:
                    b1:f4:cc:0f:cc:b2:89:fd:a1:32:0a:1e:cc:47:7b:
                    05:55:85:e5:89:1a:ec:2f:7d:a2:29:88:e4:fa:6c:
                    36:19:7e:ab:47:8a:2a:d2:1c:95:5d:0c:eb:13:e8:
                    1c:31:b0:07:a4:9c:19:92:16:b4:55:13:24:6e:e9:
                    9f:1d:2d:85:3d:38:e8:d1:7f:3c:e1:08:bf:dd:58:
                    16:18:0f:5a:78:7f:92:de:06:37:e6:b4:b3:39:ab:
                    90:ee:6f:b2:03:fb:e3:ea:53:fb:64:e1:66:29:c4:
                    9c:39:4a:de:6c:a2:2f:ba:14:29:06:12:5f:ec:02:
                    e7:50:c9:f8:18:79:0d:a9:71:1c:80:07:ca:2f:91:
                    47:f4:24:cb:cb:f7:48:0c:ff:93:b9:8c:89:a1:58:
                    c8:22:24:16:bd:58:68:6c:f9:45:ff:2a:cd:a6:ee:
                    9e:85:c3:af:14:fe:2f:b1:b4:2c:06:ff:1f:4e:1c:
                    19:56:8a:20:a0:20:48:67:75:38:1a:e1:54:67:f0:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F5:0E:7A:37:CB:D2:72:0D:92:4E:1E:F8:53:1E:39:70:1B:F1:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/713c7e65-670a-35fc-b84e-9ea011c805ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:5a:e3:1f:d1:f9:a6:c1:1a:19:fc:8a:cb:85:39:9b:0a:
         90:3d:2c:d4:cc:32:d3:7d:2e:ac:90:e6:65:a0:c1:88:24:8c:
         eb:e6:32:14:7e:9a:59:0b:86:ec:8e:2f:e0:a2:00:c3:a7:7a:
         fe:41:10:f6:b4:ab:83:17:ca:9c:77:21:12:2e:5a:3e:98:63:
         31:52:c3:5e:f4:7e:0a:65:f9:fe:10:e1:9c:1f:79:21:a0:f7:
         c0:a8:f0:12:c2:c5:6b:d1:83:0b:6f:98:05:91:2d:70:0e:d0:
         ef:a2:a1:05:6b:93:5e:b3:76:2f:03:36:a1:3b:5f:00:64:48:
         95:8e:e4:f7:1b:cc:25:68:39:ff:d3:91:2d:28:d9:2c:f5:4e:
         e3:6d:97:fe:f7:96:20:9c:34:97:05:e9:1f:a4:f6:ef:9e:89:
         84:8a:50:43:68:da:22:78:41:71:19:82:3c:e8:1b:3e:35:8c:
         9b:a6:85:62:a2:91:8d:1a:be:06:1d:91:ac:e4:35:b7:a8:4e:
         d6:67:9d:7c:37:24:ab:f4:ee:3e:65:32:e5:ba:88:21:47:84:
         3f:77:85:d1:c2:97:74:8c:fa:a6:2c:f0:e3:1f:5e:cb:60:68:
         23:78:7c:b7:fe:1a:35:14:f7:2c:81:56:ee:ee:a8:39:47:6f:
         5a:0d:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:40 2026 by rpki-client