Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/522ed241-5cbb-31f3-8769-5c3715560bd7.roa
File:                     522ed241-5cbb-31f3-8769-5c3715560bd7.roa (raw, json)
Hash identifier:          +9EPCWCSCzltgGGfmfyjSwD/Cjpbqz8Xm7qt1T1wxJk=
Subject key identifier:   6E:FE:11:5A:DC:A7:25:88:55:5A:2B:FC:6D:B8:43:B9:3D:29:97:C1
Certificate issuer:       /CN=743065a1-7855-4be2-941a-23bce4898410
Certificate serial:       010D0C9F4328584EA793AEAD2E63E5C569DC4440
Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/522ed241-5cbb-31f3-8769-5c3715560bd7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     135074
IP address blocks:        23.145.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:ae:ad:2e:63:e5:c5:69:dc:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743065a1-7855-4be2-941a-23bce4898410
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5435b617-2a7d-46e6-92d5-7f529c1bd45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:ee:20:59:8c:15:44:a1:28:12:a4:a7:57:
                    23:79:d0:39:2a:bc:5f:f1:31:cd:78:0a:99:45:17:
                    7f:b5:a1:49:41:37:29:c3:7d:04:7a:11:14:0a:9a:
                    8e:c8:a1:4e:22:b9:5b:2f:22:48:74:ca:a7:55:05:
                    4d:87:86:0f:89:48:c2:3a:42:82:cc:36:9f:e4:61:
                    05:cb:01:9c:2a:42:d3:3b:6b:f3:56:84:1f:b1:99:
                    59:c6:51:7b:b2:91:a1:ed:d3:b4:12:42:40:af:d7:
                    59:c9:8c:8c:b1:d4:05:e5:27:54:31:6a:8f:0e:8f:
                    70:51:9b:0e:15:72:d3:31:fc:c9:c1:6c:14:c2:2f:
                    57:06:8f:60:2d:53:07:51:b3:3f:47:aa:c7:ca:3c:
                    13:30:4a:a9:4a:56:55:20:fa:31:a6:6e:8a:78:cc:
                    f5:bc:13:b8:16:bd:82:aa:e1:ce:79:84:ce:76:fa:
                    88:6b:2e:8c:23:81:17:c5:9e:43:26:29:6d:93:91:
                    cd:0e:f3:63:58:ab:c6:16:45:c0:ee:99:84:dc:f5:
                    d2:ee:5e:12:20:0c:bd:83:de:15:23:ab:22:16:5b:
                    03:69:9c:7d:69:1d:66:c9:08:55:15:17:17:cb:2e:
                    f6:d3:59:39:24:19:0b:1f:ca:b3:4e:44:a8:e0:ca:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FE:11:5A:DC:A7:25:88:55:5A:2B:FC:6D:B8:43:B9:3D:29:97:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/522ed241-5cbb-31f3-8769-5c3715560bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:40:9e:c4:67:ec:89:f0:97:52:e0:bd:32:75:c8:0c:3c:
         df:a7:1d:bd:bb:b7:43:b1:32:36:2e:3b:f2:db:74:b0:74:83:
         9c:44:c9:a6:53:fd:a2:ef:bf:73:98:3a:2d:8c:7a:15:cb:4a:
         ac:76:f3:6c:f4:22:8f:8b:f6:0b:22:11:a0:dd:42:41:e5:04:
         a2:22:54:5a:10:92:b2:cb:32:d8:10:24:5f:b2:6c:e4:4c:c2:
         49:85:e2:ab:e3:8e:19:f2:22:4c:1f:f0:3d:ab:ec:01:d5:56:
         90:3f:83:54:ac:b0:98:8c:3d:b2:61:42:a4:e9:6a:35:7d:1b:
         e4:6d:4f:cc:b3:76:34:e5:d4:52:3f:8b:70:42:2a:f2:de:4c:
         6e:17:6f:05:93:7c:dc:43:4a:4c:45:5f:da:77:57:e2:f1:db:
         d9:aa:c2:3a:11:df:af:e4:8e:0a:29:a2:dd:eb:c0:28:a9:bb:
         24:92:21:8a:db:dc:05:dc:47:4f:4e:1d:a4:9c:1e:56:71:98:
         a8:aa:69:8c:e6:9c:de:26:66:9b:2c:63:7f:3c:ce:64:db:5a:
         0b:3e:e9:fb:7c:b4:b5:fe:25:6e:0b:e8:c6:e1:a2:04:bd:8b:
         47:16:a9:5a:bb:f9:46:6e:13:25:b8:94:9d:cd:7e:af:26:98:
         8c:a3:55:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:17 2026 by rpki-client