Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
File:                     1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa (raw, json)
Hash identifier:          unRLiYUoSsC8pS9yxWDEKN2oUhJSsx5hlRSzt7Ws5ck=
Subject key identifier:   D7:22:B6:26:91:07:9D:C7:D9:1A:7B:DF:FD:7A:6E:01:0A:36:8D:AC
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F4328584EA01531812A81670F669C2900
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     964
IP address blocks:        23.140.96.0/24 maxlen: 24
                          23.140.97.0/24 maxlen: 24
                          23.140.98.0/24 maxlen: 24
                          23.140.99.0/24 maxlen: 24
                          172.111.12.0/22 maxlen: 24
                          204.9.36.0/22 maxlen: 24
                          2602:fe54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:31:81:2a:81:67:0f:66:9c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=1f70d4d3-2fa2-422f-bdde-161a4786cbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:7f:f2:8c:21:93:8e:1b:94:13:9b:8d:cf:
                    53:d3:71:41:d6:49:b7:c5:98:27:a1:f2:90:0f:9b:
                    0e:f6:4d:c9:c0:eb:4f:28:b1:07:2f:f9:fd:63:e7:
                    97:d0:65:da:a9:89:49:5f:60:2b:6b:c0:6f:91:f3:
                    7d:2b:70:c7:b8:ee:34:c2:64:9e:d2:f9:6b:c0:cd:
                    c6:e1:5b:66:a3:45:02:87:a9:04:41:10:82:95:b8:
                    69:b3:81:66:7c:c4:81:ac:6b:3c:03:6e:df:39:14:
                    86:c3:d0:39:de:5c:4a:93:34:8e:21:65:18:fb:24:
                    64:bb:dd:e1:95:2d:d6:86:26:6b:35:21:3d:5a:cd:
                    ac:78:eb:e4:19:02:a0:49:41:c8:f3:aa:42:c7:81:
                    a0:9b:61:28:dd:63:7a:bf:0a:09:43:00:fa:48:dd:
                    7a:b0:69:b2:99:31:52:f2:da:08:75:32:de:42:71:
                    0b:98:fe:43:94:50:b4:ee:00:1a:95:04:d0:90:45:
                    46:a6:3b:1f:03:97:e6:fc:32:b8:37:58:a2:cf:99:
                    b0:48:9b:ce:9c:45:65:b4:43:f7:88:9a:a2:92:18:
                    0d:5f:12:ad:5c:7f:08:72:3e:06:48:d3:fc:56:42:
                    87:e8:f4:dd:e6:bf:38:1a:ec:cb:b1:4b:80:a7:52:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:22:B6:26:91:07:9D:C7:D9:1A:7B:DF:FD:7A:6E:01:0A:36:8D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.96.0/22
                  172.111.12.0/22
                  204.9.36.0/22
                IPv6:
                  2602:fe54::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:49:cc:46:2b:7e:67:cd:bd:05:d1:d4:60:d9:bb:a1:c4:
         26:60:e8:89:f0:92:24:65:ae:a3:ca:ef:55:97:f2:19:30:47:
         79:eb:dd:fd:5f:27:7a:c7:3a:52:86:25:77:6d:93:b6:2a:d3:
         9b:94:00:bd:67:9f:ec:53:23:a8:63:04:e0:88:19:9e:92:4e:
         84:5f:00:22:00:04:6f:c5:d1:11:f5:02:fc:fb:bc:00:98:08:
         23:fa:b9:89:74:f5:f1:eb:28:dc:06:21:31:a9:19:e3:bb:78:
         8e:9a:43:f0:a9:14:43:31:82:f3:45:37:b7:64:d8:c6:22:33:
         bb:b2:42:fe:00:da:34:c5:84:35:02:14:f8:df:60:40:b0:b5:
         3e:40:c7:d5:c6:38:dc:00:20:52:f3:10:d4:d0:6a:07:43:96:
         77:7d:e4:ff:43:b7:37:a3:09:9b:af:3c:1b:bc:0c:fc:b3:b9:
         dc:81:d2:72:68:9b:10:ba:19:83:46:ca:06:13:65:f9:7a:4b:
         42:fb:e0:84:83:25:fd:2b:71:33:32:2c:77:f7:e9:d9:d6:3e:
         3c:76:e5:51:9e:e9:4c:4a:03:96:5f:f6:d2:81:e4:49:eb:7e:
         c5:ff:08:9d:4e:5e:86:f5:3f:e5:c7:f4:03:6e:78:55:6c:e2:
         82:b8:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:15 2026 by rpki-client