Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/bebd4cbe-350f-3e9d-b722-9862a79815d1.roa
File:                     bebd4cbe-350f-3e9d-b722-9862a79815d1.roa (raw, json)
Hash identifier:          0Pi3pFP6vF/WtMf+WZHnMaHlwr9+whqgdfgdfyuuSVw=
Subject key identifier:   C3:4E:60:F3:58:6A:34:89:FC:A9:7F:5C:5E:E9:CA:91:01:AA:45:A8
Certificate issuer:       /CN=3e3dd181-6bf9-437c-8807-1849db23c718
Certificate serial:       010D0C9F4328584EA78772C526CC837979D02480
Authority key identifier: 13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/bebd4cbe-350f-3e9d-b722-9862a79815d1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     211686
IP address blocks:        23.134.20.0/24 maxlen: 24
                          2602:f6f8::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:72:c5:26:cc:83:79:79:d0:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3dd181-6bf9-437c-8807-1849db23c718
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c7fd7900-66c0-4f47-b0b0-f93914019945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:cf:26:08:a8:db:4f:a8:73:ef:9d:98:06:
                    14:b0:9c:10:90:b9:0d:07:f5:91:a4:49:c3:fb:f2:
                    49:fd:f5:dd:77:b9:ca:6d:11:9e:29:ff:cc:52:32:
                    db:af:e0:72:11:c9:88:a2:c1:c0:61:6d:46:bd:da:
                    78:df:90:36:4e:51:91:e6:38:dc:59:0e:6f:d3:c3:
                    8b:62:43:b4:8a:4f:a5:fd:e9:ea:d8:89:fc:0a:65:
                    6f:31:58:89:35:83:f5:5f:45:5f:2c:5c:a4:5a:9a:
                    1d:7f:62:96:79:22:79:c0:ad:70:78:fe:bb:c9:b2:
                    cf:b2:0f:13:c2:20:3c:13:43:02:a8:a8:fc:e2:2a:
                    04:4e:5d:89:a1:22:d2:1a:76:ae:3f:80:ec:fd:66:
                    96:5b:74:28:bb:91:46:9f:ae:d7:1c:91:29:f4:35:
                    b7:cd:ee:5a:18:97:52:f0:1c:e0:07:b9:4c:ed:ba:
                    93:d9:9c:13:fc:e0:a8:fd:e0:88:89:62:00:f9:76:
                    da:15:a2:79:15:c6:d1:8d:7a:df:af:c3:8a:dd:ff:
                    cd:f2:64:74:54:7d:c7:7b:6d:f9:f7:be:39:3c:47:
                    e1:c5:8f:48:6c:a7:1e:b8:38:b5:e2:a8:13:2a:3e:
                    36:1d:17:5c:77:e9:93:97:ed:e5:38:36:fe:cf:5e:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4E:60:F3:58:6A:34:89:FC:A9:7F:5C:5E:E9:CA:91:01:AA:45:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/bebd4cbe-350f-3e9d-b722-9862a79815d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.crl

            X509v3 Authority Key Identifier:
                keyid:13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.20.0/24
                IPv6:
                  2602:f6f8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:22:28:ac:96:b9:47:db:d3:54:d2:6a:9b:2f:d3:5b:d9:
         8b:ec:e5:b3:0c:f4:82:e7:dc:d9:41:5e:c1:dc:bd:cb:04:ff:
         f2:3a:01:df:27:85:94:bd:1f:03:22:aa:a5:a6:b6:d8:82:0c:
         27:45:5f:9d:d1:54:20:67:e0:45:52:c5:c5:55:95:48:b9:45:
         70:ad:02:6e:43:ca:b5:ec:fa:71:ac:4e:44:b4:79:ba:1f:b0:
         f3:dd:e0:fe:03:14:62:50:a5:dd:38:1b:19:b7:61:74:c1:b3:
         0d:d2:61:60:b4:70:d1:5d:1a:b9:80:a3:84:70:7a:d2:f6:45:
         68:51:18:65:88:32:44:48:0d:be:bb:3c:81:ed:11:ff:7f:64:
         ce:3d:c0:c2:c3:1f:50:d7:79:f9:80:b1:a5:9e:bc:6e:47:4d:
         53:36:5a:5f:fa:86:2f:cd:5b:2d:51:54:bc:a6:a3:9b:cc:20:
         88:49:dd:e9:d1:9f:92:f5:eb:e3:1c:83:fb:aa:1e:3c:8b:b0:
         ca:92:02:16:5c:4f:d7:d8:98:2c:c8:7a:b7:51:40:ae:0d:0e:
         25:da:e4:d4:65:c0:f1:7c:bb:66:d1:e0:79:e3:b0:2e:a6:4a:
         7f:dc:c5:60:d0:71:ff:80:39:82:a5:3f:75:57:b5:4c:8b:31:
         9f:af:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:17 2026 by rpki-client