Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa
File:                     a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa (raw, json)
Hash identifier:          CCqoWZbDTTfnxXdTWJd3eQjWw2vU3GFdBxE5J7y6hQA=
Subject key identifier:   93:0E:FB:A8:72:48:D2:13:EA:CE:6E:43:89:27:41:E6:31:65:50:06
Certificate issuer:       /CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4
Certificate serial:       010D0C9F4328584EC7A1BF2AC81F8EB845886180
Authority key identifier: DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     8796
IP address blocks:        23.138.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:bf:2a:c8:1f:8e:b8:45:88:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=e7de3475-1fe6-46d9-801b-661eb64bc94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:d6:ee:c7:79:f9:b6:49:c8:c8:5c:54:39:
                    62:0a:59:96:a4:78:a8:14:eb:9e:66:52:8c:0c:ae:
                    0d:d2:04:ed:58:a6:c0:15:bd:81:ca:70:51:f3:61:
                    f0:2f:f5:c7:ac:b7:a4:e0:a4:42:0f:45:44:79:7b:
                    2d:74:3f:77:18:ee:28:e7:d6:16:2f:ae:b9:94:14:
                    39:40:6c:a6:42:5e:42:9d:eb:90:e6:62:b5:8e:da:
                    d0:54:fe:fa:cc:cc:7e:b3:4d:c5:7f:4f:50:8b:85:
                    0d:e5:d5:8b:37:c8:06:40:d0:ae:e0:7d:1a:34:64:
                    95:a3:93:ae:46:d1:fc:e5:ff:23:42:2c:9b:4b:f4:
                    01:66:11:21:f0:95:10:71:a1:54:b2:bf:de:44:53:
                    3b:31:55:02:09:24:63:7b:23:7c:cb:a8:38:e4:11:
                    e5:97:fa:c8:19:b2:01:33:17:60:a3:7e:39:19:cd:
                    c5:8d:54:3a:47:bd:7e:d1:d1:ce:b4:ea:a8:29:4f:
                    6d:4f:68:33:2d:71:ac:38:f9:04:39:e8:c9:37:58:
                    69:40:d4:73:5e:24:a5:36:fe:ca:0a:a9:5e:59:99:
                    09:64:55:12:09:b1:d4:36:cf:63:2b:20:80:96:ff:
                    43:10:0c:27:9b:2b:3d:47:a9:f6:c1:02:0f:c5:41:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0E:FB:A8:72:48:D2:13:EA:CE:6E:43:89:27:41:E6:31:65:50:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.crl

            X509v3 Authority Key Identifier:
                keyid:DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:f4:7b:ed:d8:76:02:32:88:54:1c:29:d1:e4:1b:5e:67:
         00:65:c8:aa:c1:39:98:16:4b:b4:bf:38:43:1c:e0:1e:96:05:
         cb:0f:45:df:d5:e6:b9:c1:5e:4f:df:07:6c:29:6b:81:56:63:
         3b:e6:d1:b7:9e:52:91:97:b6:68:cd:b1:8b:e9:03:40:7f:a3:
         40:a4:bd:4f:c9:fb:6d:35:c1:df:80:88:6f:f4:bd:3f:2d:45:
         97:86:bc:b2:32:2a:71:93:34:54:c2:d8:fe:b1:e2:2c:a2:71:
         47:1e:59:f6:97:67:05:20:69:02:ce:ad:1f:99:49:d1:2d:c7:
         bd:6a:68:22:f7:0c:1d:80:bb:05:1c:56:fb:a0:3a:db:46:ad:
         d8:1e:5a:ce:b2:86:68:92:a7:f4:b2:2e:73:41:1c:b8:14:b0:
         6b:55:59:44:c7:08:58:71:ac:e4:3c:5f:4a:d4:0b:78:e1:86:
         42:46:49:80:2d:f0:88:32:76:29:50:0f:5d:c7:dc:ab:fc:cc:
         eb:77:68:71:8a:83:38:a7:a3:b4:3e:0c:be:8e:77:fa:ec:b6:
         f7:04:91:ee:dd:cf:20:de:45:e4:e3:ab:de:38:89:7c:89:a1:
         92:b5:da:c7:99:6c:1f:12:39:4e:ff:40:2f:7e:a8:e0:0d:84:
         32:36:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:00:27 2026 by rpki-client