Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa
File:                     41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa (raw, json)
Hash identifier:          QYTjMrjGzN3y/D7Gqws6U2jAgiF1A+CsRcl4yfGReDM=
Subject key identifier:   4A:4A:A3:3B:93:9A:B6:9F:89:0D:EB:66:12:3F:CD:79:86:D4:2B:41
Certificate issuer:       /CN=743065a1-7855-4be2-941a-23bce4898410
Certificate serial:       010D0C9F4328584EA787753E55A39C1C6B728400
Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209242
IP address blocks:        23.145.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:75:3e:55:a3:9c:1c:6b:72:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743065a1-7855-4be2-941a-23bce4898410
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c490f92b-ed52-4ee3-bef0-d7b5a7c3e163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:16:63:2d:b8:e9:57:29:f5:b2:fb:59:06:35:
                    f5:aa:a6:e1:9e:ce:f9:c1:20:28:5c:b9:c0:3c:9a:
                    91:da:ca:13:13:e7:80:77:63:fb:59:f5:68:d2:90:
                    0c:d2:b8:30:85:3c:da:5c:1d:da:17:6a:e8:a4:dc:
                    c5:43:40:94:8c:80:1e:af:e6:ce:0a:e3:c0:ca:c1:
                    e8:0e:5f:bc:1a:1b:f2:fc:07:d1:20:de:10:28:b8:
                    77:2b:a5:ac:83:43:3d:4e:c2:e0:fa:d6:51:dd:32:
                    1a:14:13:62:52:7e:16:f1:d3:eb:cf:a9:fe:c1:0d:
                    a4:5b:27:ef:bc:47:6b:bf:8e:19:63:86:31:3c:0d:
                    1c:23:b1:3f:ea:09:75:a7:9c:3e:a4:73:d9:1a:ce:
                    aa:20:14:6c:7e:74:66:56:1b:06:f9:40:19:d9:87:
                    cf:ff:a7:23:ee:66:a2:06:2a:44:bf:29:7a:ff:e7:
                    22:1f:4f:2f:8e:6a:84:9a:ca:6e:a4:e4:70:6d:c1:
                    37:98:48:93:0b:e4:ec:13:b5:c5:9f:82:f0:64:3e:
                    92:e4:cb:98:f4:e0:ae:d7:47:c0:ef:55:0b:a4:bc:
                    e6:84:91:55:61:be:8e:0f:10:9d:54:34:7a:bf:de:
                    ed:2d:b4:ab:5e:60:43:7b:e6:d8:b3:fd:19:db:f6:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4A:A3:3B:93:9A:B6:9F:89:0D:EB:66:12:3F:CD:79:86:D4:2B:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:da:16:22:de:f0:91:04:53:64:6f:3c:2a:b6:8e:66:9b:4a:
         66:66:ec:5d:93:9f:f8:51:47:f3:5e:a0:3a:2a:20:67:3b:d4:
         d2:ce:d9:52:c9:da:86:4b:f3:4e:92:8f:6c:b5:c6:09:3b:23:
         e8:7a:6b:2b:90:2d:95:9c:8a:e5:4c:d4:3e:88:9f:bf:e2:35:
         b5:ec:3a:a4:de:3f:2b:57:78:90:cd:8e:7d:58:bc:52:d1:8a:
         b8:8b:f7:d7:57:40:ad:55:ba:b0:f4:96:66:e8:34:9c:05:1f:
         ff:60:c6:92:05:5d:af:6e:5c:84:4b:3e:19:82:a5:d8:4e:0d:
         b1:38:3e:41:b5:62:ab:12:66:b9:94:30:3e:2c:1d:da:e7:04:
         77:f5:cb:37:6e:dd:ad:09:5e:87:4f:a4:26:aa:08:a0:97:b7:
         d3:7f:3a:ca:fb:6b:fa:1d:d8:2d:63:96:d3:6c:7d:aa:e7:4a:
         0a:ca:2c:72:33:9c:e8:b5:1a:45:ec:3e:d0:a2:c7:bc:31:9d:
         0e:b2:1c:2a:4f:fd:9e:90:3f:1a:30:3c:7c:02:b9:2e:b1:08:
         80:0a:5c:78:6c:70:ae:52:6f:e5:60:b2:ce:35:c1:a4:d6:51:
         4c:84:5f:7f:1c:1d:01:33:14:62:55:6c:92:fa:3e:dd:b2:0e:
         a2:fc:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:32 2026 by rpki-client