Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d30ae045-a6f9-3458-927d-893c9b56e546.roa
File:                     d30ae045-a6f9-3458-927d-893c9b56e546.roa (raw, json)
Hash identifier:          74RXIeUFEOawpZ7FRZvhmTLVLHHm8jesJgkIHMreoRk=
Subject key identifier:   13:DF:FA:4D:55:BE:5C:19:9D:EF:EF:76:DB:9C:3C:AC:22:39:FA:40
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E9BE53AD3F932045E95E2C900
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d30ae045-a6f9-3458-927d-893c9b56e546.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     4766
IP address blocks:        23.231.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:3a:d3:f9:32:04:5e:95:e2:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=ad50c3ee-cfe4-4ee8-b3a5-6af4059da37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:af:88:4b:b0:19:d9:c2:b2:ef:29:24:dc:
                    ce:f2:48:30:6a:c7:78:bf:d4:41:5e:f2:0c:e5:30:
                    6e:0d:b1:b4:59:1c:28:c8:09:9b:b0:19:3b:1d:b0:
                    36:53:0a:11:93:fe:3f:95:d8:93:19:b0:22:2b:90:
                    52:4d:7d:9e:a3:4d:fd:2a:21:6b:41:71:c1:1b:92:
                    bc:9e:1d:79:b0:51:b4:74:fb:7d:78:07:84:34:3e:
                    9a:d0:78:9b:b1:e6:5a:67:00:c4:63:df:62:8b:79:
                    d0:18:71:52:a0:e1:d5:d1:4a:db:cb:70:c7:9d:44:
                    f8:89:90:16:29:5e:58:46:8c:13:ea:8f:43:ab:b8:
                    08:ed:95:a3:71:44:de:6b:f2:a7:a6:73:55:7a:43:
                    72:a8:e6:c4:34:cb:18:67:58:0f:bb:fb:4f:11:bf:
                    3a:09:9d:a8:d0:eb:c3:ed:f0:65:76:14:5d:4f:e8:
                    bd:3b:a4:c8:97:ef:ee:f1:49:f7:40:f7:e1:94:63:
                    81:fc:fd:56:05:06:59:3f:ad:d9:2f:4b:2f:7f:8b:
                    7b:6e:ec:43:4e:0f:e3:e6:11:f1:c8:83:c9:44:ab:
                    ff:7c:7e:43:78:fb:0a:41:2a:af:99:bc:3f:2b:f8:
                    80:71:7e:28:1a:cc:ec:53:42:a8:de:ff:8b:0e:da:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DF:FA:4D:55:BE:5C:19:9D:EF:EF:76:DB:9C:3C:AC:22:39:FA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d30ae045-a6f9-3458-927d-893c9b56e546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a0:80:dc:11:47:eb:09:96:80:4c:e7:7a:a2:50:8a:d4:37:
         be:80:ba:8a:08:be:c0:6f:f4:70:fe:8c:c5:d2:33:93:61:d3:
         af:8b:bc:68:dd:22:e8:1a:54:f2:b7:c8:a7:0e:fc:6a:bb:05:
         c2:8c:8d:fe:30:2e:17:7e:a7:77:28:2c:e8:71:5d:32:b7:7c:
         e0:08:cf:d5:ae:0e:47:1a:79:2d:e0:2e:a6:b7:8c:b4:7f:61:
         2d:ef:31:ce:ac:b8:99:93:ce:50:16:6a:a5:c6:dd:39:c1:8f:
         5a:40:9a:fd:5a:f7:ac:97:de:50:6c:83:6a:e7:93:4d:40:cd:
         63:ce:90:cf:df:1d:74:d9:32:67:85:95:fa:bb:53:5a:c8:dc:
         4b:18:c4:0f:21:56:df:06:74:de:01:ac:e0:af:7f:86:fe:fb:
         8e:48:2e:97:ea:2b:da:03:43:e7:a3:59:fd:78:fa:5f:db:bd:
         2c:2f:ad:65:26:f8:62:bd:af:b9:8c:d0:7d:77:dd:89:de:14:
         75:85:53:8d:d8:0c:4c:21:53:79:34:04:9e:e3:ad:b1:13:ea:
         c1:06:fd:a9:0b:11:f1:b1:46:cb:a4:ab:fd:94:36:59:6b:21:
         c8:bf:ad:b0:d4:cf:b5:49:eb:61:49:bd:c8:d9:59:e8:f7:6b:
         72:25:ce:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:27 2026 by rpki-client