Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa
File:                     00dde76e-d01e-31a4-a3b3-7b4024f40125.roa (raw, json)
Hash identifier:          cDPhgs4k7S3CC3eq3Gx2H1EL4tlVQHws+emCasVE8HU=
Subject key identifier:   6E:8D:81:77:AC:F9:C2:88:13:3A:0D:EB:2B:AC:2B:FD:B9:31:DA:52
Certificate issuer:       /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
Certificate serial:       010D0C9F4328584EA78835A267C2C16789D9BE80
Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401595
IP address blocks:        23.132.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:35:a2:67:c2:c1:67:89:d9:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4ede369c-7c1c-4bc9-b4bc-bf35a2b14fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2e:eb:a1:f6:08:e9:15:7a:81:65:09:6d:b1:
                    52:3b:ad:85:18:8a:44:e8:01:56:e7:0f:60:d9:d9:
                    27:da:02:64:4f:1b:99:24:d3:b4:91:4e:6c:bb:d8:
                    d8:c9:a1:e1:8a:5c:17:be:a0:85:e7:66:c2:85:bf:
                    75:86:cb:96:e0:0f:1f:0e:6e:e6:13:45:18:98:16:
                    de:34:dd:71:88:7e:05:ce:61:bb:6c:6c:6d:31:40:
                    37:fd:eb:80:54:5c:2b:a3:4b:95:1b:a7:9b:fa:c7:
                    47:7f:cd:13:37:68:38:c3:ee:ba:7f:e5:fd:79:98:
                    e4:1c:34:ac:2f:55:be:15:cd:41:86:7c:9c:6b:96:
                    67:6d:3d:63:87:0f:56:ba:6d:27:48:a6:2a:16:b1:
                    a6:39:d5:b2:ef:bd:44:6e:ed:ff:40:64:d1:39:68:
                    81:58:c0:c6:51:d6:c5:4e:d4:70:f8:dd:cf:b3:03:
                    35:b0:74:41:c5:77:79:e0:9f:3d:70:9b:a0:aa:6f:
                    3a:4c:96:8c:a3:1f:d8:5d:b2:25:82:67:8a:b9:21:
                    7e:46:99:68:f0:7b:46:f0:69:bd:57:52:2b:8d:81:
                    dc:08:8e:7b:76:84:b7:c3:97:4e:55:08:33:fe:c6:
                    68:13:e5:8e:1d:72:58:21:e7:f6:bc:bd:5c:af:c3:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:81:77:AC:F9:C2:88:13:3A:0D:EB:2B:AC:2B:FD:B9:31:DA:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7b:82:11:2d:c1:eb:15:61:d5:72:be:25:0d:fb:e5:71:69:
         bb:6f:ab:60:1c:12:4d:b7:37:7c:61:3b:6c:f7:97:26:af:f1:
         49:bc:97:76:2d:49:0c:be:66:75:3b:29:7c:e1:c0:7b:39:5c:
         c2:c7:66:bc:9a:60:ee:48:83:0a:5c:7e:80:b6:61:be:a3:64:
         b7:81:c7:b4:69:be:b3:cc:e9:b4:a1:bf:f1:0c:ef:43:f6:73:
         66:a7:10:14:1a:21:cc:d9:26:bc:ed:00:32:22:a0:7c:5b:81:
         47:f3:de:bd:83:c5:4d:e9:cb:a6:43:54:ff:19:b1:6c:13:65:
         9a:51:80:07:a6:e5:b5:cf:98:6f:fe:d7:45:6e:1c:ed:27:f2:
         07:76:86:91:6f:3b:56:73:68:8a:8f:89:1a:29:c4:3b:70:e1:
         8b:d7:40:6a:9e:29:36:7c:bc:d3:3c:36:67:0f:db:df:d4:85:
         7c:7f:0b:12:e0:ed:72:73:28:b3:c6:e8:9a:3a:15:90:14:fb:
         7f:b1:b0:3e:69:30:2a:05:9d:1d:cf:b0:ad:ab:fe:d9:4a:52:
         a8:12:af:e5:37:33:55:50:bd:c3:60:61:23:1f:bf:98:96:9e:
         5a:f3:1c:53:ee:6c:d7:77:d5:c7:3b:26:54:43:63:a6:ca:ad:
         93:0e:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:44 2026 by rpki-client