Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa
File:                     0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa (raw, json)
Hash identifier:          Q+YT1xQYRzttG2ZV7V01epGBiHOG3hD8BX92rSumCXE=
Subject key identifier:   67:36:58:0E:F7:42:AC:4D:7F:9D:E0:89:4F:08:39:E1:57:A9:93:E6
Certificate issuer:       /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
Certificate serial:       010D0C9F4328584D6AAA7C01CB069395E5379C80
Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     29757
IP address blocks:        23.168.193.0/24 maxlen: 24
                          104.153.44.0/24 maxlen: 24
                          104.153.45.0/24 maxlen: 24
                          104.153.46.0/24 maxlen: 24
                          104.153.47.0/24 maxlen: 24
                          162.217.144.0/24 maxlen: 24
                          162.217.145.0/24 maxlen: 24
                          162.217.146.0/24 maxlen: 24
                          162.217.147.0/24 maxlen: 24
                          192.231.255.0/24 maxlen: 24
                          199.231.92.0/24 maxlen: 24
                          199.231.93.0/24 maxlen: 24
                          199.231.94.0/24 maxlen: 24
                          199.231.95.0/24 maxlen: 24
                          208.72.20.0/22 maxlen: 22
                          208.93.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7c:01:cb:06:93:95:e5:37:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=fee72a1d-b460-41c5-8e4b-3014280383d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:3f:8c:ba:ef:e3:3c:a3:31:51:a2:51:90:
                    29:8f:48:72:8c:d2:df:74:3e:97:63:52:a8:b5:9e:
                    4d:c3:51:f6:6a:56:c2:f7:98:b3:13:7f:06:f2:ad:
                    27:bc:d3:90:38:fa:f8:f1:a6:e4:c2:08:dc:56:dc:
                    59:a8:6c:e0:0a:99:64:ee:04:38:53:a8:e4:2a:54:
                    b4:67:ae:64:af:7b:a2:59:e3:55:f5:9a:46:5c:95:
                    1e:d1:66:13:6a:8c:ae:d0:aa:fb:a0:07:f3:3b:cc:
                    0d:b1:f4:30:37:2d:e9:c3:fe:70:43:39:17:13:7e:
                    ea:ac:80:11:76:95:e9:9b:9f:69:4a:49:35:dc:f8:
                    08:6d:6a:3e:de:d4:e7:27:a0:29:bc:25:dc:1b:05:
                    b8:af:35:3d:60:3a:e7:b8:74:bd:6f:62:87:37:4c:
                    9e:2d:91:db:54:4e:55:c9:77:f0:da:08:55:db:37:
                    6a:3f:db:f7:3a:db:06:5a:c0:fe:ea:37:ce:20:ce:
                    da:6f:67:b1:24:38:e1:50:73:b3:44:10:22:f0:8c:
                    fc:d0:ba:30:af:6e:1f:05:7d:e9:87:b2:d9:ec:4a:
                    cb:1c:f0:63:d3:7e:61:3d:8e:a0:cb:f5:cc:33:5e:
                    a4:13:09:5f:70:f2:7e:b7:f1:c1:0b:d3:d6:59:65:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:36:58:0E:F7:42:AC:4D:7F:9D:E0:89:4F:08:39:E1:57:A9:93:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl

            X509v3 Authority Key Identifier:
                keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.193.0/24
                  104.153.44.0/22
                  162.217.144.0/22
                  192.231.255.0/24
                  199.231.92.0/22
                  208.72.20.0/22
                  208.93.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:f4:4c:99:5b:a2:41:a8:be:e7:33:38:be:e4:71:76:6e:
         c2:10:be:bb:77:ee:d6:7e:8f:6f:36:e9:eb:e5:54:8c:3c:54:
         2d:6a:37:d6:e5:3e:6b:c4:8b:88:bb:e2:3a:10:25:90:0b:69:
         3f:0f:24:e2:65:cc:f7:9d:3c:40:85:ee:03:f4:8a:8d:6a:92:
         13:8a:f3:17:14:c3:06:c1:3c:0a:a1:e3:7c:1d:f4:d7:ce:70:
         90:97:db:44:6a:84:17:89:20:4a:9c:32:ec:fd:23:2c:c3:ea:
         79:5f:01:65:25:9f:6f:1d:bf:98:47:b6:1b:60:3f:31:aa:e9:
         42:d1:9e:f2:a5:08:31:0e:45:b9:39:50:40:38:37:dc:37:3d:
         36:cf:aa:bd:90:83:72:7c:87:44:1d:7c:11:9c:b6:c9:a2:8b:
         a0:99:fd:3b:0b:1c:b6:9a:1f:f2:05:6d:90:24:80:22:c0:b3:
         98:7a:72:09:e0:b7:c9:0b:68:2e:a2:0a:9f:e7:67:df:9d:ad:
         4d:59:02:2e:1c:01:ee:d1:5f:e4:a9:8c:0c:e9:d0:95:fb:74:
         74:4d:e2:a5:36:31:a7:7b:2f:33:ad:ad:f4:f5:3d:07:e4:a6:
         9e:89:e1:63:5a:87:8f:27:03:c9:8e:f8:21:ef:6b:b1:3c:06:
         c3:df:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:23 2026 by rpki-client