Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/a7b7d744-610d-3925-8b29-086102f88c05.roa
File:                     a7b7d744-610d-3925-8b29-086102f88c05.roa (raw, json)
Hash identifier:          zErpIUTJTIrJUlS2bdOaIVY20k4Dnh54pORy7p3Oeqk=
Subject key identifier:   F7:60:0D:F2:59:AF:BE:40:76:68:2D:7C:E7:6E:82:12:B6:71:DB:76
Certificate issuer:       /CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
Certificate serial:       010D0C9F4328584EA788CCD9CF3C6E540721FCA0
Authority key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/a7b7d744-610d-3925-8b29-086102f88c05.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398338
IP address blocks:        23.140.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:cc:d9:cf:3c:6e:54:07:21:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6aea1c22-e7bf-4154-a333-c73e8cfdf3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:89:af:08:ec:8a:70:75:fb:1e:e0:a6:54:ff:
                    f4:dc:d3:e2:a0:08:f6:c2:8b:24:96:53:22:b5:9f:
                    da:6a:fb:b5:4a:5f:99:58:1f:1a:27:68:99:75:90:
                    78:7d:8b:88:58:ea:a4:50:9f:48:1d:33:0b:29:ec:
                    8d:82:f5:88:92:f0:fa:6b:6e:f3:24:7c:39:4f:23:
                    af:68:19:e0:ed:b1:1f:89:20:76:9f:d4:e8:d1:14:
                    58:47:d0:02:42:86:0c:77:49:f9:c3:26:b9:a5:64:
                    d2:f0:6d:3e:7f:a6:19:0e:f1:39:3a:c0:a9:29:9e:
                    f2:b2:b6:5c:18:56:c9:f6:26:da:fb:bd:42:b7:6a:
                    17:30:bb:53:cc:9a:d1:55:05:30:e1:6a:68:ab:27:
                    2a:0e:89:d1:11:7e:d1:a2:b8:87:62:c4:c2:0c:b5:
                    4b:c5:90:95:2f:49:4f:c1:74:0a:24:3d:b3:ca:11:
                    a6:ad:41:17:6f:bb:d4:94:0c:ed:8b:4f:a2:06:2b:
                    af:25:28:0b:3b:c3:21:61:d1:09:60:b8:33:4b:84:
                    3b:e9:18:09:b6:03:51:5e:c2:3a:6b:01:d8:95:5d:
                    f5:c2:c7:2c:31:52:03:1e:e8:07:52:1e:ab:2f:9b:
                    13:d6:b9:85:71:54:5d:e4:53:9f:50:28:eb:cb:1a:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:60:0D:F2:59:AF:BE:40:76:68:2D:7C:E7:6E:82:12:B6:71:DB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/a7b7d744-610d-3925-8b29-086102f88c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:8a:c4:77:a0:0f:c8:3d:9d:a1:c1:98:b0:02:dd:be:70:
         88:f4:6b:de:ab:4a:13:c2:ca:06:4e:b1:b4:07:9c:47:0f:26:
         1f:31:86:aa:a8:b9:c3:41:b1:11:4d:e0:c2:3d:0d:42:2b:f9:
         87:14:44:8f:75:f7:72:7b:52:de:8d:2c:0c:86:ca:fe:c6:8e:
         02:2a:c4:5d:3c:0f:a7:d5:61:fd:b6:cb:f2:65:dd:1c:97:60:
         97:7d:47:11:f9:90:cb:af:7b:dc:9a:1b:27:c5:71:31:a7:97:
         fc:25:ab:00:93:be:19:e4:3f:38:11:0e:12:cf:90:d4:fb:4c:
         d5:68:89:f2:4c:e3:4f:28:85:1b:73:35:10:00:bb:04:78:af:
         d7:70:94:95:92:bc:56:2d:55:61:e3:24:95:c3:94:fc:a7:05:
         38:67:10:c4:03:cd:84:be:b7:a8:99:c6:06:ad:17:9e:5a:99:
         ab:ab:9a:5d:3e:38:b8:c1:16:f5:18:17:2c:4d:13:b5:93:e5:
         33:8f:f4:cc:20:61:f9:8e:38:d4:d4:51:e0:b6:f6:f2:a5:96:
         40:18:fc:c3:2f:90:0d:16:2a:cb:f4:da:20:63:34:6e:22:97:
         dc:f5:dc:47:b4:0a:c3:f7:7d:c7:23:48:b8:2d:85:c8:99:ca:
         b9:d1:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:24 2026 by rpki-client