Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/853c15e6-9209-3e25-be2e-0ea051055b4c.roa
File:                     853c15e6-9209-3e25-be2e-0ea051055b4c.roa (raw, json)
Hash identifier:          ueyAU/nH9iACms9OwDiEbD4nqDvAuy+ex4DHpEiIwiQ=
Subject key identifier:   CF:F4:49:64:4D:89:E3:C8:6E:64:2A:76:58:D0:06:7A:A5:2F:6D:96
Certificate issuer:       /CN=9d5e8807-643a-46c3-a245-693c793610e4
Certificate serial:       010D0C9F4328584E131988F6944D8432BEDC8F40
Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/853c15e6-9209-3e25-be2e-0ea051055b4c.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     7346
IP address blocks:        23.129.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:88:f6:94:4d:84:32:be:dc:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=617163bd-5c26-4a6e-882c-70099286cd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:67:36:3c:a1:af:a1:4c:80:65:1b:1e:38:
                    b0:d5:df:9a:8b:bd:39:04:77:42:7d:0e:df:14:19:
                    94:d5:47:0d:1f:b1:d0:f4:e8:0b:d6:dc:f7:ce:2a:
                    6e:34:46:31:92:27:29:03:89:ff:ed:52:13:11:a2:
                    13:99:1b:68:ae:18:63:cd:47:bc:ef:4c:de:bf:6e:
                    62:de:9c:87:57:fe:a6:d4:7d:99:2a:06:1a:a7:b0:
                    5c:72:b2:d2:d5:ba:46:04:e2:b7:2a:9c:c9:c3:64:
                    86:73:5f:b8:47:a5:c7:60:e2:8c:44:df:7a:66:7a:
                    81:5d:e8:3e:49:ec:10:e0:a6:3a:00:e8:03:e8:b8:
                    74:73:19:53:fb:82:36:a8:af:13:66:00:a4:4b:55:
                    70:75:b7:ec:90:83:62:9c:be:99:a5:c6:c8:df:4e:
                    a5:e7:09:ed:c9:1a:8d:e4:63:8d:cb:be:ef:f0:1a:
                    a1:a8:19:aa:4d:fd:ec:c4:ec:9c:50:e4:0c:d0:ff:
                    77:a5:8e:3a:d9:a4:5b:86:e7:e6:d1:97:a4:a6:d9:
                    ec:a5:a8:6e:2a:52:4c:9c:e6:0f:cc:be:a1:af:e3:
                    d7:83:3f:4e:55:1a:e4:45:54:5a:be:a6:7b:c5:9b:
                    aa:96:b4:89:31:d0:31:32:18:a9:78:ea:6d:d2:49:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F4:49:64:4D:89:E3:C8:6E:64:2A:76:58:D0:06:7A:A5:2F:6D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/853c15e6-9209-3e25-be2e-0ea051055b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl

            X509v3 Authority Key Identifier:
                keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:71:70:84:65:0d:23:1e:64:5e:2e:1d:bf:fe:b5:ac:08:
         1b:c0:52:78:ce:95:f6:ea:6a:5c:a1:1e:5c:f5:fb:d1:48:87:
         f9:21:92:a9:8f:f5:1c:2c:38:b4:76:40:71:7e:aa:9b:a5:08:
         83:cb:5a:70:a9:21:c6:ad:1b:d8:17:16:56:e3:cc:6f:d3:af:
         6f:ce:22:1e:96:26:6f:f4:7f:3b:ea:62:e4:b1:da:de:c5:7e:
         37:2d:7a:ab:ce:bb:f5:df:50:c8:53:a0:51:3e:8f:31:66:35:
         a6:b3:b6:de:56:3a:74:d2:17:83:3a:26:af:7f:7b:49:a2:0c:
         8f:5a:d9:04:7d:a8:cf:d0:8d:e4:3a:c5:6e:4a:b5:f0:11:e9:
         98:a8:cb:ec:dc:e6:9a:88:75:6b:0a:14:c5:31:14:ef:fb:72:
         97:83:6e:d4:b8:62:f3:8c:3d:36:2c:ce:4b:0d:97:84:90:76:
         06:e8:2b:1f:3f:ee:17:96:3a:cf:e2:fd:0d:cb:76:1c:6f:a8:
         a4:2c:c9:10:5b:61:a9:04:79:a5:46:7c:0a:71:bd:d0:65:df:
         bf:f4:c0:0c:a3:ad:6d:6a:a4:98:45:80:06:c4:62:9e:98:d5:
         aa:ef:d2:c3:08:d7:53:08:e3:54:70:f0:fa:d7:53:d7:31:19:
         50:60:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:04 2026 by rpki-client