Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa
File:                     42311329-687f-3581-9dd8-4ecc3e9bc883.roa (raw, json)
Hash identifier:          320VtIZKEBXzNrw2eztQXt8mp9MkF6lajwTGBw+CUE8=
Subject key identifier:   BA:D4:CC:81:AD:0F:E9:A2:89:49:A0:D1:15:DE:F6:2F:6A:E8:98:31
Certificate issuer:       /CN=3d3016dd-bb93-47bb-b986-002f3d7984c5
Certificate serial:       010D0C9F4328584EA17A893C8AE119D499CA0520
Authority key identifier: DE:0B:DB:E1:3C:B2:D9:EC:20:71:4B:AE:12:5D:C0:2A:E4:5A:A1:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     21699
IP address blocks:        23.188.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:89:3c:8a:e1:19:d4:99:ca:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3016dd-bb93-47bb-b986-002f3d7984c5
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=893919e5-2661-4bc4-975a-0e2dd1e13f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:8e:62:47:00:a8:93:e2:7a:63:3e:41:13:
                    84:90:ea:53:c7:56:55:19:77:2c:a1:c9:cf:eb:54:
                    a0:f8:47:a2:a7:69:6a:e0:da:b8:5e:3c:01:c9:72:
                    aa:98:e9:0c:2d:ac:3b:f0:38:ff:aa:83:f9:8a:c3:
                    af:7e:4a:ec:1c:d5:b5:17:ac:8c:9c:b5:16:48:0e:
                    f3:e0:6f:1b:e3:db:95:17:a6:29:f1:43:de:4e:4b:
                    ee:b4:46:02:9d:5c:15:70:a7:96:00:ad:36:0f:03:
                    5e:46:25:e7:4a:30:b1:a5:75:6d:69:63:1c:a1:b0:
                    60:3b:f5:1c:f1:9e:b5:40:74:9d:53:b6:9c:ea:5a:
                    39:f9:52:50:23:21:5c:1f:ed:0b:34:75:f0:61:e5:
                    90:b5:28:64:a5:78:5b:12:bd:ce:7a:cb:33:83:15:
                    ab:ce:f1:a9:fb:f8:f8:ce:2e:dd:81:10:4a:67:34:
                    ab:32:e6:8c:3d:4a:94:57:0e:bc:e6:72:9e:9e:c8:
                    45:97:53:f8:16:87:a6:a8:d5:2a:7e:a6:25:89:cf:
                    31:06:e8:5e:d7:d9:9b:86:2b:01:5f:f9:87:79:92:
                    0b:64:e8:ef:74:3c:66:85:de:a9:07:83:af:87:43:
                    8a:79:12:8e:d2:7d:00:2e:33:5b:9a:7a:65:c9:ea:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:CC:81:AD:0F:E9:A2:89:49:A0:D1:15:DE:F6:2F:6A:E8:98:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.crl

            X509v3 Authority Key Identifier:
                keyid:DE:0B:DB:E1:3C:B2:D9:EC:20:71:4B:AE:12:5D:C0:2A:E4:5A:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ed:c1:b6:06:39:28:e5:43:fc:3d:ca:85:81:96:63:7d:32:
         eb:6f:91:1a:63:6e:7d:40:f6:4e:6f:03:83:0b:c4:52:ca:e0:
         6a:55:b2:73:dd:e4:d9:3e:56:94:4a:b2:a5:59:0e:b0:e1:5a:
         66:a0:c0:7f:cf:f2:5d:b2:49:74:f0:40:54:ac:cd:f1:7f:09:
         97:de:d1:65:34:db:cf:ee:e8:4a:74:2d:f5:d2:12:8b:cf:0c:
         46:b4:d3:ec:57:40:bf:9b:9e:fb:c9:25:89:8b:e4:b7:2f:c8:
         ad:e0:2c:6d:3e:49:b9:60:75:18:80:dc:2d:d0:2f:04:24:9c:
         64:f5:64:12:d8:96:0c:cb:1f:4b:44:f1:b9:e6:53:80:98:1d:
         3a:c9:40:f7:a5:ad:1b:43:fe:00:64:e8:58:cb:ee:fd:58:8a:
         3e:46:55:f8:c4:51:47:9e:7f:b0:34:6a:a9:b4:e7:eb:47:94:
         af:1b:66:d8:f1:35:44:c4:f1:33:7b:b7:d2:e8:80:a0:f0:b4:
         92:b0:c3:af:54:03:f6:3e:0c:2b:a0:f4:20:82:73:dd:17:81:
         33:fe:40:9f:b9:45:90:f7:27:f9:c3:cb:a4:e8:42:d5:db:55:
         25:92:94:8b:c3:a1:51:37:bc:cd:bd:e2:f7:7a:67:c8:a8:aa:
         23:88:22:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:05 2026 by rpki-client