Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/dbeb4e19-8874-3faf-807c-704874560370.roa
File:                     dbeb4e19-8874-3faf-807c-704874560370.roa (raw, json)
Hash identifier:          tc6OlgnfCvD8ZoDKQ5YworjYUB4DXFLY5azJCD/VQds=
Subject key identifier:   C7:E2:DA:68:B7:CD:87:4F:1F:23:DE:98:02:FE:F0:E0:7C:66:1A:90
Certificate issuer:       /CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Certificate serial:       010D0C9F4328584D5B4F8FA73C20D3B9B58F1D80
Authority key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/dbeb4e19-8874-3faf-807c-704874560370.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     16611
IP address blocks:        23.163.136.0/24 maxlen: 24
                          23.175.248.0/24 maxlen: 24
                          142.249.120.0/22 maxlen: 24
                          149.112.111.0/24 maxlen: 24
                          2602:fa07::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:8f:a7:3c:20:d3:b9:b5:8f:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=dfa5e7ac-09ff-4242-9a38-9cc71353d1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:e9:5f:81:2b:39:ec:bb:d0:17:7f:c2:e6:
                    86:1f:73:c1:61:21:43:a2:5e:a4:b0:78:bb:a3:ad:
                    da:56:7d:f2:11:59:d6:06:bd:d7:68:1f:56:38:23:
                    78:90:85:b3:8e:48:22:f5:ee:ad:85:91:1e:1f:b9:
                    fa:26:ee:68:9e:75:8f:60:78:da:bf:4a:84:25:ac:
                    32:fc:e8:19:61:a1:2d:5e:7e:f1:68:04:f1:0f:66:
                    4b:74:ae:33:cf:a5:9c:fd:8b:e2:54:65:7e:3f:7a:
                    2a:52:4d:31:15:4e:92:c4:07:1a:33:b9:57:b9:b8:
                    92:0d:bb:6a:58:18:af:24:f6:be:76:3f:de:85:72:
                    6d:ac:de:33:3a:a3:7d:16:2c:cf:65:61:ac:c7:d4:
                    9e:59:2b:7d:fd:89:e2:fe:75:07:ec:9d:26:a3:b2:
                    53:b1:9c:0b:74:4e:61:72:a6:91:ef:a4:eb:2b:7c:
                    a4:8a:81:47:54:3f:1c:36:2b:b4:18:c4:d9:a2:78:
                    52:6b:4d:c0:47:e8:5d:e4:3a:88:bc:0a:77:4e:9e:
                    c5:2d:f9:74:74:0b:85:55:54:3c:4e:07:b3:0a:4c:
                    4f:6c:0d:dd:51:cb:e2:50:b2:a7:ed:30:92:3a:51:
                    9d:82:2d:96:2b:48:1b:6f:fd:c7:7e:4f:d0:0c:aa:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E2:DA:68:B7:CD:87:4F:1F:23:DE:98:02:FE:F0:E0:7C:66:1A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/dbeb4e19-8874-3faf-807c-704874560370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl

            X509v3 Authority Key Identifier:
                keyid:D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.136.0/24
                  23.175.248.0/24
                  142.249.120.0/22
                  149.112.111.0/24
                IPv6:
                  2602:fa07::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:38:81:d3:90:a2:39:b3:b1:78:e9:c6:4c:81:f1:21:68:43:
         fa:ad:35:4c:4c:29:07:18:e4:57:ec:af:d4:e2:38:3e:69:b9:
         95:d5:93:90:4c:97:7d:e4:22:f1:86:23:b9:8d:24:6b:db:b0:
         89:0d:84:3a:7b:3b:95:2d:30:47:e8:3f:6b:82:de:ec:55:36:
         42:97:7d:d6:12:c8:83:b6:d2:b5:78:59:33:69:5e:b6:af:df:
         39:fa:4d:71:86:b3:e4:0d:1b:22:7b:37:26:65:ea:94:2a:0a:
         df:62:03:9f:d0:e9:36:69:d9:f8:ab:1f:d1:30:62:da:04:51:
         69:f3:27:c9:8b:78:f6:7c:73:21:bb:40:8d:ba:31:d2:90:0f:
         74:06:1b:2e:05:27:ee:22:4a:30:65:1d:43:87:13:42:a0:b9:
         11:d2:5c:7e:d5:62:66:01:f3:e7:24:08:68:10:39:81:3d:c2:
         88:3d:a0:d6:44:8a:a0:dd:89:5d:bc:9d:db:8c:a4:94:1a:71:
         cc:55:b7:d8:d5:1b:4f:fe:20:ba:a8:bc:ab:71:54:23:79:ff:
         a7:4d:0a:30:eb:87:21:9d:10:aa:9d:33:16:13:c2:e6:f5:f2:
         69:df:41:77:59:10:eb:39:d7:fc:b8:d0:ce:f2:85:53:bf:33:
         18:a9:5e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:40 2026 by rpki-client