Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa
File:                     5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa (raw, json)
Hash identifier:          MJXA/AkLUe3ulWPtMk7eizOQMwLr1j+9Amyt7lkQBXg=
Subject key identifier:   1B:80:7E:98:B9:D3:7C:12:64:60:8C:86:57:AF:A3:A0:96:47:04:05
Certificate issuer:       /CN=3e3dd181-6bf9-437c-8807-1849db23c718
Certificate serial:       010D0C9F4328584EA78766CFF03CF85530818280
Authority key identifier: 13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395047
IP address blocks:        23.134.20.0/24 maxlen: 24
                          2602:f6f8::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:66:cf:f0:3c:f8:55:30:81:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3dd181-6bf9-437c-8807-1849db23c718
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3a30ced0-d6d7-438a-a4fa-0f7400481f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:8b:e8:06:85:74:d8:1d:7b:9b:b1:7d:73:
                    f1:70:1f:75:fa:25:2d:74:fb:09:c9:ad:d0:ec:3c:
                    d0:3e:a7:d9:51:0e:7b:e4:fd:02:b5:bd:8d:fd:ea:
                    f4:e1:79:56:09:00:b7:c5:74:60:79:50:63:95:97:
                    b3:ee:f9:54:78:69:2e:a5:1e:90:c1:68:d6:d0:79:
                    c6:6c:ee:43:45:a2:22:d9:4a:2a:3a:ce:18:a4:39:
                    51:1c:0a:7a:5d:eb:58:bd:7b:0b:ff:59:a3:74:11:
                    d9:b4:31:fe:a2:6f:88:29:e6:b6:ed:81:d9:1f:a0:
                    19:dc:52:56:83:f7:63:d6:f6:6c:6b:fc:80:87:d0:
                    02:60:1b:94:af:d0:22:73:f0:3d:60:97:72:e5:4c:
                    dd:48:81:d5:78:08:4f:79:68:9d:e8:93:1a:60:34:
                    e1:78:5b:58:df:17:87:68:73:9c:72:13:0c:03:bf:
                    57:9b:0a:de:c0:7f:93:b2:bf:06:08:0a:f3:0c:ff:
                    1c:2d:94:44:23:70:f2:fc:1e:93:7a:88:1f:be:8a:
                    ef:7a:9c:1e:ca:97:30:f8:07:e2:e9:5d:bb:d5:b2:
                    2a:ff:d8:f0:b0:6d:3c:cc:b6:b1:7c:76:f9:9d:24:
                    90:60:12:24:81:59:23:8e:db:54:1f:c6:c6:70:96:
                    91:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:80:7E:98:B9:D3:7C:12:64:60:8C:86:57:AF:A3:A0:96:47:04:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.crl

            X509v3 Authority Key Identifier:
                keyid:13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.20.0/24
                IPv6:
                  2602:f6f8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:15:57:98:84:df:06:18:a4:1c:c6:82:db:a6:fc:54:a5:57:
         bc:06:4b:df:2f:01:72:0a:5a:6e:1d:1c:0a:28:ee:ff:c4:46:
         42:02:0b:19:ae:58:7b:52:71:c5:c0:d7:2e:02:5e:9a:10:22:
         55:ae:13:19:fb:d8:94:0d:96:25:84:59:bb:6e:42:5d:bd:79:
         47:6e:f0:b6:00:4e:38:8c:86:eb:50:6d:6f:7c:b2:9d:90:d9:
         68:e5:a5:e6:75:b5:99:e1:e0:d0:89:9e:e9:e2:21:da:f5:53:
         d3:83:40:d0:72:f9:21:14:de:14:d1:a6:37:ec:c6:b2:53:fe:
         50:44:e5:25:0b:ab:17:e7:ae:af:e8:05:a5:11:17:8d:7d:40:
         0c:e1:4d:b4:81:20:0c:92:31:08:d0:60:0c:10:26:65:71:5c:
         5e:ee:5c:3b:b9:fd:12:3d:74:8e:98:f3:9f:d6:78:bd:8a:20:
         90:65:38:39:19:41:22:4f:21:1b:37:44:e3:01:00:2a:10:63:
         5b:c9:7f:31:6d:64:5a:dd:88:fa:55:fc:53:6b:83:40:62:ef:
         cf:be:ad:75:fd:b3:c2:02:ee:7c:41:e5:02:71:d1:33:ce:88:
         bb:c9:fb:52:6f:b8:5b:c3:ce:6a:b6:7b:f1:67:16:8d:14:a1:
         11:c8:9a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:18:51 2026 by rpki-client