Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1530734b-f3c8-3e86-ab10-539978b823b6.roa
File:                     1530734b-f3c8-3e86-ab10-539978b823b6.roa (raw, json)
Hash identifier:          ly0nsOKlX1GaMAsIb7nVDe7/NKen6m+Wwo8xS3rYAYk=
Subject key identifier:   8F:72:F9:F0:B2:A5:D7:C1:00:1C:67:AC:C9:DB:62:F0:B9:36:BE:02
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584EA791C28DFBE0B50C8F61E1C0
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1530734b-f3c8-3e86-ab10-539978b823b6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40934
IP address blocks:        23.249.58.0/24 maxlen: 24
                          23.249.60.0/24 maxlen: 24
                          23.249.61.0/24 maxlen: 24
                          66.35.31.0/24 maxlen: 24
                          69.48.236.0/24 maxlen: 24
                          69.48.237.0/24 maxlen: 24
                          69.48.239.0/24 maxlen: 24
                          96.45.38.0/24 maxlen: 24
                          96.45.42.0/24 maxlen: 24
                          96.45.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:c2:8d:fb:e0:b5:0c:8f:61:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=87cc149d-26e8-4b53-a96b-486cc026b40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:26:6e:2c:c3:b7:e7:6f:cb:65:8f:50:7f:7e:
                    6c:0d:2a:b4:c3:98:ee:56:74:84:cd:d4:35:20:8a:
                    16:1f:00:cb:05:14:9a:ea:d1:d4:58:5e:60:5f:13:
                    8b:ba:82:3b:64:ff:fd:4c:1b:a8:59:77:a8:51:33:
                    b6:9e:7e:e6:39:25:e7:c8:1d:b1:42:cd:e2:79:25:
                    22:9b:c5:ab:47:00:85:0c:24:4d:30:67:02:5c:ed:
                    d2:0f:f9:ce:09:95:ff:8a:dd:9f:ed:6f:a0:1d:91:
                    72:12:0e:dc:d4:46:8f:d6:6a:f7:d0:72:bc:5f:af:
                    7e:58:7b:05:55:2f:ca:c2:92:89:be:dd:ae:51:a9:
                    8d:cb:65:a6:cc:68:22:b4:71:a9:c0:c4:82:2c:0c:
                    b5:d0:89:34:9c:44:0e:9a:57:0b:9a:5f:55:17:d2:
                    79:04:6c:b9:73:58:fa:25:da:3e:ae:e1:81:2c:d6:
                    29:be:1e:8c:76:a2:8f:a1:06:f1:87:5b:58:2f:75:
                    1d:f5:d5:5a:ea:e1:88:e5:6a:f1:18:a9:35:0a:66:
                    d3:0e:d8:52:7a:45:6d:39:a5:58:59:d0:14:30:66:
                    f0:ec:e9:79:88:73:a2:56:be:d1:4b:14:d5:78:d4:
                    6e:56:77:fc:0a:10:9a:f7:20:dc:4c:7f:61:8f:e8:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:72:F9:F0:B2:A5:D7:C1:00:1C:67:AC:C9:DB:62:F0:B9:36:BE:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1530734b-f3c8-3e86-ab10-539978b823b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.58.0/24
                  23.249.60.0/23
                  66.35.31.0/24
                  69.48.236.0/23
                  69.48.239.0/24
                  96.45.38.0/24
                  96.45.42.0/24
                  96.45.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:68:14:1a:8e:6a:02:10:2b:ae:8e:be:b3:3f:5a:2c:36:93:
         02:9f:11:e9:8c:42:57:b5:cc:6a:8e:d6:f0:98:6c:39:d0:74:
         46:17:14:6a:9a:5b:ca:06:f2:cf:11:a7:19:61:c0:8d:45:11:
         29:8c:d9:85:48:ae:cc:7c:72:21:42:92:78:aa:c7:da:a8:a2:
         fe:be:a0:37:c0:17:69:52:34:ea:00:1d:45:b2:0c:6e:ce:b2:
         7a:c1:cd:64:93:a2:2a:f0:c4:b4:a7:46:b8:1d:0e:83:b9:63:
         10:74:09:dc:5f:05:bd:0c:19:85:44:c0:d9:fc:9b:e1:90:4f:
         aa:60:ba:00:9a:b6:ba:a6:f2:54:45:c6:05:05:f2:0e:f0:7b:
         7f:c4:42:b1:d0:0a:94:7f:21:42:3d:2f:1c:ba:66:87:ae:90:
         b8:19:7b:63:28:46:02:e9:4b:39:c1:44:0d:3f:6d:3d:80:a8:
         61:1a:e6:b7:7a:c4:e3:3b:54:bf:ea:9f:93:e3:e2:5a:d2:e3:
         59:03:1e:ce:b7:d8:59:4d:c6:ad:21:21:84:4c:c2:e5:ea:88:
         05:40:26:98:d3:26:ac:31:d2:90:33:ec:81:ab:c4:c0:84:83:
         ec:42:ab:f4:2c:06:30:b6:fc:09:86:30:a1:bb:26:49:a8:58:
         75:37:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:31 2026 by rpki-client