Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa
File:                     a096cadc-4c71-333b-93b8-3623bde2c855.roa (raw, json)
Hash identifier:          t14pHh/da1m1Va6SF6inhhQuc+6Yv4mJOeyHBGa60yM=
Subject key identifier:   F1:4B:84:3B:36:F9:7B:DB:5C:1D:77:2E:26:9E:E0:67:09:F2:4B:E2
Certificate issuer:       /CN=8e951a87-195b-48e6-8452-38c35bb02255
Certificate serial:       010D0C9F4328584EA787CA3C177C5A396486AE00
Authority key identifier: F1:EE:61:19:10:74:3C:B4:64:93:38:29:7A:2F:5E:C9:67:EA:B9:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     17080
IP address blocks:        23.167.176.0/24 maxlen: 24
                          2602:fcf3::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ca:3c:17:7c:5a:39:64:86:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e951a87-195b-48e6-8452-38c35bb02255
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7162e3ef-0f04-4811-96f7-7e5c4673724f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:24:8b:13:65:90:e2:8c:b3:8e:0f:55:a0:
                    ed:49:a9:4e:7f:53:9d:7f:91:d2:05:0c:4f:27:1b:
                    99:fc:96:96:f5:f7:b7:a0:a9:c8:19:99:5f:cd:ef:
                    b2:e0:aa:49:23:df:a2:b5:b8:24:85:94:00:5a:14:
                    87:45:a4:05:da:dd:b8:ac:e9:f7:ba:d0:8c:5e:1d:
                    39:d7:d3:c2:80:71:b4:6e:40:bf:e6:25:02:a2:1d:
                    a3:e6:b2:48:e2:f1:aa:51:6a:81:6d:03:45:f0:a4:
                    14:44:be:40:dd:93:e4:4f:ef:0f:ec:b3:0d:50:ec:
                    46:ef:1d:fc:c2:0f:e2:2f:62:63:4d:bb:e3:de:6f:
                    f3:6a:34:f2:c5:f4:88:ad:09:06:25:2c:6d:89:ca:
                    07:e9:06:db:65:c6:ed:9c:0a:17:2a:7c:5f:3b:5a:
                    68:c0:4a:50:0d:15:f9:32:8a:f3:84:d9:ae:95:19:
                    36:f2:14:c9:0e:88:2c:c5:d8:24:a6:f4:7c:5f:c8:
                    49:63:ae:9c:5c:6c:88:c1:ad:f6:40:7d:8e:44:29:
                    83:19:50:aa:a0:4a:20:46:a1:35:5f:13:41:9b:81:
                    2b:66:67:56:8e:1d:13:8c:cf:15:a9:71:05:fe:db:
                    c9:5b:6d:b6:eb:47:d8:8f:47:6f:3b:3f:9d:04:ec:
                    43:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:84:3B:36:F9:7B:DB:5C:1D:77:2E:26:9E:E0:67:09:F2:4B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.crl

            X509v3 Authority Key Identifier:
                keyid:F1:EE:61:19:10:74:3C:B4:64:93:38:29:7A:2F:5E:C9:67:EA:B9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.176.0/24
                IPv6:
                  2602:fcf3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:92:75:f7:36:b3:48:33:80:6a:96:c7:3a:11:c2:b0:4e:
         2b:f9:b5:b7:ee:76:f7:cc:36:d9:53:45:8d:88:70:b0:ef:f8:
         2b:96:ad:79:79:82:bf:e3:0c:1f:35:7b:9a:1d:2b:c0:0e:a3:
         c0:4e:fa:c2:cc:b0:b2:8a:84:58:2b:ca:91:55:28:37:80:e4:
         79:6b:fb:d9:d2:cb:20:0c:79:6a:bd:3e:c8:dc:01:9e:15:bb:
         ee:73:3b:81:0c:f9:60:b2:16:66:8b:db:0c:64:6a:bd:eb:a3:
         0e:d2:0c:21:c7:04:ee:0a:e6:94:04:06:78:af:1e:6b:ed:51:
         75:ac:8f:0b:10:f5:9e:59:c7:80:d5:7f:d0:67:81:a3:8f:f1:
         ea:cd:16:b1:c0:eb:b1:47:0f:d9:91:c4:25:3e:20:af:fe:ff:
         99:61:87:34:e5:5c:21:87:42:c2:d2:7b:ce:97:57:6c:15:8d:
         39:f0:2d:8c:89:27:e1:f8:c9:ef:e8:66:8a:fa:c7:8f:c4:e2:
         fa:e5:45:8e:65:44:3a:50:da:0a:16:22:87:ec:3e:85:fb:bb:
         dc:78:e2:7c:fb:43:cd:a8:74:93:50:69:66:1f:20:d4:5c:0a:
         ef:ab:c3:8c:31:a5:24:2e:c2:31:14:cb:3c:bc:91:f6:dc:b8:
         eb:30:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:35:02 2026 by rpki-client