Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/7c0ca735-2ec6-3920-88aa-87ed5b0766a9.roa
File:                     7c0ca735-2ec6-3920-88aa-87ed5b0766a9.roa (raw, json)
Hash identifier:          IS/qo4ZX0Q8+oZ/AOGfZ8asdDgtb1MZUmIbJEvuyrr4=
Subject key identifier:   F2:76:73:FC:09:F3:F0:5E:C5:AD:DC:06:A9:13:36:F0:46:22:2F:73
Certificate issuer:       /CN=4965f432-2d7f-4618-aa63-bb50ab54c527
Certificate serial:       010D0C9F4328584F3052778F026DD60425E2C100
Authority key identifier: 83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/7c0ca735-2ec6-3920-88aa-87ed5b0766a9.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     53820
IP address blocks:        23.134.32.0/24 maxlen: 24
                          2604:d040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:77:8f:02:6d:d6:04:25:e2:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4965f432-2d7f-4618-aa63-bb50ab54c527
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=2f579bca-c540-445d-ab89-ee21a35d4abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:5c:ab:20:c0:c1:84:2a:7b:2b:66:57:90:
                    7d:81:a7:62:43:e5:31:08:77:63:63:fb:11:5a:b9:
                    56:62:85:ff:4f:d4:ee:1d:1c:60:57:c7:24:e8:18:
                    7a:3b:ef:28:f9:a2:43:eb:89:9f:a3:ff:b9:77:87:
                    a9:92:7d:96:b9:87:7a:18:67:e4:3e:fc:f5:f6:62:
                    fc:8f:92:ac:8c:e1:03:87:ba:43:48:2c:1a:4f:a6:
                    c1:2f:08:25:52:b3:1a:a1:5b:9b:33:9e:64:8b:d6:
                    26:52:cf:b6:27:3c:6a:a3:73:de:d8:16:bc:5e:bf:
                    ba:01:5b:47:b3:fa:3b:2a:ea:11:50:3e:3a:20:0c:
                    16:d9:3a:91:dd:35:88:01:eb:7d:d6:f3:72:2c:af:
                    89:bd:5f:a1:68:ff:9d:f1:30:db:00:b1:96:c1:a2:
                    53:3a:ab:ea:4b:e0:13:00:cf:08:c7:2d:77:f7:49:
                    07:e7:24:ac:d0:a5:54:56:14:97:e6:46:8f:2e:7f:
                    9b:e4:04:fa:51:ce:95:15:fd:95:bb:bd:73:33:61:
                    30:67:54:0d:50:1d:76:06:4b:8e:84:e4:f5:1d:45:
                    73:c3:44:3a:ff:e6:c9:52:68:1e:06:2f:e5:e2:b0:
                    9d:86:80:c5:3c:68:40:eb:96:f4:17:41:24:9e:10:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:76:73:FC:09:F3:F0:5E:C5:AD:DC:06:A9:13:36:F0:46:22:2F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/7c0ca735-2ec6-3920-88aa-87ed5b0766a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.crl

            X509v3 Authority Key Identifier:
                keyid:83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.32.0/24
                IPv6:
                  2604:d040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:dd:b2:a0:fa:aa:3c:44:e9:be:78:63:af:13:70:6d:3a:01:
         9c:ce:52:b3:ad:45:15:e4:6d:a4:c5:15:7d:4f:8e:5b:bf:f2:
         24:71:4a:4d:af:24:4f:d6:35:4f:89:42:24:cc:75:4f:79:3e:
         ed:70:84:42:11:ea:9d:64:e5:97:e6:d8:9c:f5:09:78:0f:14:
         13:e8:c4:30:21:42:06:34:f9:43:eb:05:a0:9b:20:17:e2:fa:
         35:e0:33:f3:2c:7b:5d:ed:8e:1a:8a:c2:f0:14:e8:f6:7e:c5:
         e7:14:47:b9:70:cf:2e:56:b6:43:11:f5:ca:a0:7f:58:2b:0f:
         d4:31:ad:4c:64:9b:9f:11:4e:77:ba:40:fc:56:8c:4e:ed:2f:
         e7:d3:25:3e:d2:18:c7:01:65:53:d9:1f:5c:3a:e4:a2:ad:fa:
         e7:0f:59:9e:06:68:f6:67:ff:57:7c:a5:f2:dc:aa:d4:d3:52:
         95:4a:43:11:7d:ef:69:e6:9b:be:37:4a:1c:cd:83:09:4d:df:
         ef:95:73:11:ca:82:7a:20:26:67:af:9c:02:2e:26:35:31:d6:
         16:ba:77:14:e7:98:51:31:a1:3a:e6:7e:ba:84:c5:b9:6c:42:
         54:ef:6e:cf:60:05:39:82:c3:55:dc:36:8b:7e:52:c6:e6:65:
         00:dc:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:40:47 2026 by rpki-client