Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa
File:                     db7be19b-e29a-3fed-8de7-c83ce5094676.roa (raw, json)
Hash identifier:          dZLlbNgeqTTeoB0W5UamCd1H7v1/HxYUBHbMDmXfxAs=
Subject key identifier:   9C:8D:71:51:90:13:BB:23:68:20:16:8E:CA:3B:D1:77:06:99:BA:BF
Certificate issuer:       /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Certificate serial:       010D0C9F4328584DE41B22EA338D25EDAC152D00
Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     54098
IP address blocks:        23.92.32.0/20 maxlen: 20
                          23.92.32.0/24 maxlen: 24
                          23.92.33.0/24 maxlen: 24
                          23.92.34.0/24 maxlen: 24
                          23.92.35.0/24 maxlen: 24
                          23.92.36.0/24 maxlen: 24
                          23.92.37.0/24 maxlen: 24
                          23.92.38.0/24 maxlen: 24
                          23.92.39.0/24 maxlen: 24
                          23.92.40.0/24 maxlen: 24
                          23.92.41.0/24 maxlen: 24
                          23.92.42.0/24 maxlen: 24
                          23.92.43.0/24 maxlen: 24
                          23.92.44.0/24 maxlen: 24
                          23.92.45.0/24 maxlen: 24
                          23.92.46.0/24 maxlen: 24
                          23.92.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:22:ea:33:8d:25:ed:ac:15:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=a653f1fe-c812-407a-bf2c-3015f5b25ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:42:09:32:d3:3c:05:0d:76:a8:81:f8:fd:
                    51:3d:b1:88:de:75:2f:c6:93:91:1c:56:a1:05:2c:
                    6b:b8:0d:49:e6:b0:b5:0f:34:4f:db:38:66:b7:74:
                    73:90:05:5e:55:b7:be:94:19:3b:9e:cc:c1:d4:9c:
                    eb:e7:2a:a5:de:95:bb:43:7d:e7:2f:dd:87:80:39:
                    2f:1e:df:03:3a:b7:52:9c:50:7a:86:9c:ae:05:f3:
                    d5:3f:84:5a:84:98:f0:67:8e:25:a7:c7:f0:ea:06:
                    c8:e5:05:ed:13:af:9e:19:4e:82:ff:86:1e:eb:c8:
                    06:08:f2:07:9a:e1:e8:58:29:07:53:63:ef:6f:24:
                    d8:00:4a:4a:0b:fb:af:b2:46:c1:05:8c:66:9d:fb:
                    f0:25:e0:62:fa:60:c5:2a:84:85:d6:be:ea:57:16:
                    a4:43:1e:98:d5:3f:da:d8:40:cb:66:89:b3:e7:85:
                    cd:1d:31:88:40:0f:94:b8:6e:47:ec:7c:cb:b4:75:
                    2b:ee:46:d6:fb:94:76:2d:a7:8d:b5:df:f6:f9:ad:
                    a5:61:df:0a:c2:c8:ab:8b:41:d5:d3:68:c0:17:2f:
                    82:e7:6b:7b:81:4f:e1:cd:47:94:82:ef:c0:e3:4a:
                    67:a4:50:7c:97:98:b8:63:e0:cd:9d:6b:4d:0e:63:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:71:51:90:13:BB:23:68:20:16:8E:CA:3B:D1:77:06:99:BA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl

            X509v3 Authority Key Identifier:
                keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:fc:da:69:7f:62:77:90:b1:e4:7d:76:2b:b1:72:8b:e1:bd:
         0c:11:55:15:09:99:04:2b:bf:53:12:06:06:30:55:19:a7:d9:
         60:9f:e2:7b:41:25:41:4a:19:70:36:47:6e:cd:29:55:c2:fd:
         e2:7b:d1:df:55:ea:09:0a:68:78:ab:55:87:0b:42:89:94:2d:
         b6:88:5b:33:eb:f9:cb:b0:ca:c0:22:64:c4:cb:01:a6:2a:21:
         97:b8:55:7d:80:81:2d:c8:f9:88:04:db:71:fa:67:53:50:8b:
         5e:f9:a7:09:14:d5:fd:19:70:fe:e9:7e:1d:32:ff:6f:55:67:
         e2:cc:83:58:73:f4:94:24:c0:ce:c6:fe:76:eb:a5:d9:cb:e1:
         e4:a1:bc:1e:48:0a:42:6f:f3:dd:40:4c:bf:ab:0e:54:8a:a2:
         ad:bf:05:69:f8:3e:07:c2:79:b2:77:04:c1:9f:bc:d2:18:c9:
         93:da:ac:72:02:24:3c:da:a9:19:de:13:25:6b:80:b5:70:82:
         76:e0:38:39:79:56:d3:02:36:c9:02:fd:18:87:cc:70:ce:8a:
         59:97:e2:81:5f:e4:a8:3b:39:ec:5e:bc:ea:04:8f:66:7d:f5:
         99:be:78:ef:0a:f0:75:e2:a6:cd:a2:67:57:00:cf:df:35:cb:
         17:88:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:24 2026 by rpki-client