Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa
File:                     30f2300f-beff-367a-a51c-b65be158cc40.roa (raw, json)
Hash identifier:          7gPxUHDVmJ+AGfRzc8y0HLvJOCHmqEHE6EHk5ulH988=
Subject key identifier:   C4:35:56:F8:E9:B7:89:99:86:F1:8B:3C:DA:4E:E6:81:2E:CF:40:C2
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F4328584EA79D5BBE7A5276B388103300
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53698
IP address blocks:        23.137.120.0/22 maxlen: 24
                          23.137.124.0/23 maxlen: 24
                          23.152.192.0/24 maxlen: 24
                          23.152.193.0/24 maxlen: 24
                          23.152.194.0/24 maxlen: 24
                          64.234.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:5b:be:7a:52:76:b3:88:10:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ac1b95f2-5fb9-4e3b-85fe-87b172dbb9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:04:c7:d0:71:a1:d0:05:f2:81:1d:a8:df:
                    64:a5:15:ae:49:e0:00:32:aa:4e:7a:56:61:99:63:
                    39:52:ea:2f:8c:9e:ca:3e:e8:59:b1:26:01:c4:f0:
                    e8:48:c6:0c:0a:f1:1e:1e:40:3c:d9:b3:80:94:63:
                    13:04:36:27:a9:2c:06:1f:90:45:ae:f1:0d:9c:fd:
                    c7:ab:18:d9:91:a9:52:99:99:e9:8e:5b:fe:15:b2:
                    57:52:f1:84:bb:eb:fb:9e:58:49:d4:88:04:8b:83:
                    80:a6:09:3a:74:67:fe:ee:60:d9:0f:72:85:9d:e4:
                    91:67:f1:95:87:0c:57:3a:6e:b3:86:c9:38:f4:31:
                    55:0b:e4:15:cf:79:41:a7:1b:14:c9:b9:c4:73:59:
                    36:a4:69:cf:db:a9:2d:cf:60:d2:df:38:e8:7a:a1:
                    74:8e:02:7f:9a:6c:fd:3e:9b:f2:f9:bf:22:90:3a:
                    c8:a5:17:e1:3e:f8:3b:01:0c:a3:61:08:85:89:5f:
                    60:97:3e:2c:37:43:88:65:4d:b9:35:38:3e:27:e4:
                    28:9a:45:8c:3a:5f:c7:bf:3e:42:28:59:18:f2:a8:
                    7a:17:b5:1e:6a:35:f9:5c:26:86:71:be:aa:9e:1d:
                    92:73:32:2a:0c:58:29:e6:64:0a:3c:39:4d:bf:a5:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:35:56:F8:E9:B7:89:99:86:F1:8B:3C:DA:4E:E6:81:2E:CF:40:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.120.0-23.137.125.255
                  23.152.192.0-23.152.194.255
                  64.234.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d1:c3:22:96:65:de:c5:a2:fe:bc:db:31:e0:c3:b1:64:60:
         fa:04:ce:92:bb:f1:53:a0:01:a1:81:b2:b9:4f:1e:2e:a4:d4:
         ec:65:d8:e4:42:3e:dc:0f:e0:ff:44:2e:b6:8f:0c:02:39:12:
         f8:53:01:a3:bb:e6:87:fc:27:bb:a7:b0:df:ae:48:92:a4:41:
         64:ca:ed:24:3e:ca:a3:5c:a9:d4:b5:e4:a1:fb:7f:99:79:2a:
         ad:c4:67:63:8d:43:3a:c5:9e:2e:0b:b3:5f:cd:00:b0:94:84:
         f3:37:16:b9:3b:57:05:43:d3:10:5d:8a:47:62:e5:7c:10:5c:
         54:4d:0a:1d:6a:8a:03:67:07:ae:35:2d:67:39:d6:c6:f9:dd:
         b4:64:84:b3:9d:7e:25:05:9a:8d:03:b2:a4:c0:2d:5d:08:14:
         92:51:74:5e:e0:e0:51:57:a8:7a:1b:f9:fe:07:79:c9:0a:76:
         b9:f7:71:ac:ee:c6:c4:b6:42:6a:80:b5:2e:c5:d1:ac:b3:a7:
         c4:5d:7c:fa:5f:d0:90:fd:e5:07:ee:8f:c2:c9:01:c6:c0:cc:
         6e:4d:ab:89:26:15:d8:fb:af:b3:fb:57:a8:a0:8d:41:06:dd:
         41:32:82:6b:db:66:60:c1:89:d0:a9:b4:dc:94:c4:fd:4d:3b:
         7f:35:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:29 2026 by rpki-client