Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/d6c06ab4-d2b1-3b01-9746-c2ce83400557.roa
File:                     d6c06ab4-d2b1-3b01-9746-c2ce83400557.roa (raw, json)
Hash identifier:          uuQgxsiafOGQPNEsog+NVnDWExJvkZmrbY9cBQ9f9bA=
Subject key identifier:   62:A0:F6:E8:53:13:E7:58:51:14:F5:D0:A9:4F:CF:C4:6B:5F:F9:E1
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584EA788D7C234B377CE923B1380
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/d6c06ab4-d2b1-3b01-9746-c2ce83400557.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40934
IP address blocks:        176.23.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d7:c2:34:b3:77:ce:92:3b:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b21a1488-9105-40f7-b228-dff6f6d9005f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:da:51:06:ce:34:80:1a:86:98:b4:22:9c:bf:
                    0f:db:31:6f:2f:e8:fd:19:75:d2:e0:20:b1:da:05:
                    a6:a9:81:8a:d8:c9:7e:77:3a:ca:b9:71:ea:c9:da:
                    d8:bb:0c:aa:76:cd:fa:6e:b4:bc:48:e2:81:59:1f:
                    94:99:93:f8:28:0a:73:b2:9f:22:56:5e:2a:90:68:
                    47:52:fb:f6:5c:29:e0:5f:d5:05:85:34:ab:09:ca:
                    2e:90:40:9f:ea:1c:7e:68:ad:93:56:d9:04:e2:21:
                    6d:3b:fa:03:f8:94:da:76:78:20:8b:27:ed:a9:28:
                    ba:f3:5b:6c:e3:ff:31:f1:39:66:2c:c3:a2:fd:1e:
                    70:34:88:6e:43:f0:97:51:95:ae:7c:65:87:e3:45:
                    ec:54:52:e5:95:4d:cb:86:7e:51:fd:dc:af:3d:ba:
                    4f:1c:c1:f1:4b:b6:9d:a2:f4:f3:da:d3:4f:de:f0:
                    0d:6f:bc:fa:6f:26:64:8b:c6:e4:40:dd:17:36:2a:
                    2f:ac:85:aa:58:65:9c:1b:7e:38:a1:ac:d5:2c:36:
                    cf:f9:e1:9b:14:f8:f6:18:33:88:bc:88:e5:89:e2:
                    0d:63:5b:e6:1b:54:30:54:da:a0:3a:c5:47:36:3d:
                    5d:e7:4e:2f:cf:18:14:55:ae:88:47:3c:71:81:ca:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:F6:E8:53:13:E7:58:51:14:F5:D0:A9:4F:CF:C4:6B:5F:F9:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/d6c06ab4-d2b1-3b01-9746-c2ce83400557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.23.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:86:c2:f9:42:dc:d9:75:d8:38:40:ba:75:9b:95:88:0d:8d:
         32:55:fb:37:c9:db:e0:ab:23:1f:64:b0:c2:c4:79:26:35:0a:
         0f:60:9c:22:fe:99:aa:aa:c3:f8:3b:5a:09:86:11:40:85:d0:
         6b:e0:02:5b:94:cf:c9:ba:6b:2e:3b:fe:8b:9a:cd:1f:81:cc:
         3c:54:b3:39:c0:08:6a:83:e9:8e:1d:f4:41:46:94:87:6f:c4:
         cb:ca:2e:c0:01:1d:ca:2a:ec:a1:df:d1:b3:fb:72:26:4e:6f:
         b7:f3:64:36:f0:28:11:ce:57:35:a7:94:14:a3:32:fd:81:5d:
         0a:5e:a3:11:88:13:75:a3:3a:21:aa:1f:15:a9:01:a4:39:69:
         73:8b:71:4f:e1:e8:d5:ea:bc:e4:2d:6b:cc:1b:7a:ac:45:d5:
         aa:3d:08:e2:e6:4d:b4:94:3c:44:1e:d0:ee:14:28:e4:d4:eb:
         71:ec:dc:60:20:3a:72:cc:0a:ce:e0:1a:63:16:a7:03:4d:30:
         96:50:82:d3:7d:e7:ce:c2:43:e5:b5:fa:56:ef:b5:44:d7:fb:
         32:1b:d2:b8:cc:42:03:a0:a7:ba:c7:28:ea:d2:96:94:34:2b:
         02:47:6c:79:f7:b8:fd:57:f8:17:68:c9:98:ad:8a:21:28:d2:
         a7:56:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:31 2026 by rpki-client