Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/b329773b-6a95-3c62-b698-ddb9bf294de9.roa
File:                     b329773b-6a95-3c62-b698-ddb9bf294de9.roa (raw, json)
Hash identifier:          ia9TBFhM6orYcfg9Djk+2yKKM8wc6okOfIuLrN+tSbE=
Subject key identifier:   12:06:20:8A:37:F2:C9:D0:C7:7C:FA:46:01:EB:F9:50:A6:FA:92:59
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584EA7926EA578101A26E12380C0
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/b329773b-6a95-3c62-b698-ddb9bf294de9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398900
IP address blocks:        23.134.232.0/22 maxlen: 22
                          2602:fcfb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:6e:a5:78:10:1a:26:e1:23:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ecc1429d-0ed5-415b-bfaf-275c6ca1ad96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:a5:36:fe:a1:e2:56:c2:07:15:3d:ea:c4:
                    f7:f7:bb:c0:7d:3b:7f:7d:ae:54:b3:a6:8f:6d:47:
                    6b:a8:75:3f:7c:07:ff:7a:ae:b4:f1:d0:41:e1:32:
                    64:8e:83:6f:3b:38:45:a8:d2:56:dc:7c:09:35:a6:
                    e6:fd:73:eb:aa:fd:bd:21:6b:95:0e:22:dc:6a:dc:
                    b3:18:bf:1c:af:cf:15:7c:45:9d:06:df:9f:4f:28:
                    93:b0:59:3f:1a:7c:0a:46:40:43:e4:5c:95:af:cd:
                    0c:32:55:58:fa:35:7c:0c:83:85:8c:2e:29:e7:9b:
                    e1:6e:2e:26:5c:03:85:a6:2f:60:ee:41:33:ce:d6:
                    79:d0:3d:35:3f:15:91:98:5d:c8:0b:e5:82:ef:08:
                    6f:db:bc:1c:da:a9:7e:7c:d2:30:16:b0:eb:3f:ea:
                    8a:2d:ef:9c:83:80:ff:81:f6:c7:01:81:f1:52:75:
                    f8:0e:fc:2c:d9:49:08:38:37:b4:7f:04:12:ce:da:
                    b6:a1:f4:1b:98:04:da:9d:7e:22:ee:b6:75:9b:0b:
                    b5:a7:a8:36:e6:5c:be:6b:4c:17:f7:5b:35:9b:93:
                    47:fe:0a:a7:f5:63:78:83:b1:71:aa:4d:c9:9f:c4:
                    d0:5d:6d:68:06:85:7a:06:7e:99:27:0d:28:ad:8f:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:06:20:8A:37:F2:C9:D0:C7:7C:FA:46:01:EB:F9:50:A6:FA:92:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/b329773b-6a95-3c62-b698-ddb9bf294de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.232.0/22
                IPv6:
                  2602:fcfb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:25:50:97:d7:bc:ac:32:8e:e2:6d:cd:9a:a7:59:eb:7e:14:
         83:61:60:98:54:65:20:c9:d6:73:e4:a3:cc:5a:e5:b4:f7:5f:
         6a:ee:19:87:62:c7:48:15:3f:3f:f5:9e:f7:3e:f9:ba:29:e3:
         b3:09:c4:f5:e8:aa:0c:bf:94:3f:a5:76:aa:21:a1:41:85:e1:
         c3:00:78:ce:ed:89:f0:e5:30:0c:ff:36:c6:70:71:fd:e9:05:
         87:b7:0d:87:2b:bd:b3:a2:03:b5:94:88:53:46:10:b0:b8:10:
         5d:8b:e2:5f:09:f3:84:85:af:e3:02:b1:07:3a:6a:ca:98:d5:
         92:e8:84:07:e1:66:44:32:32:fb:e5:a2:4f:fa:cb:da:fc:17:
         18:18:9c:24:8d:41:b6:38:46:ee:ba:3b:43:ad:04:f4:55:8e:
         2b:8b:e6:be:06:54:17:cf:54:05:e0:8a:cf:b2:06:54:43:e0:
         16:c1:66:f7:66:92:8c:b6:86:47:64:c8:c6:be:23:c0:76:81:
         d0:0c:89:12:c5:f8:57:11:0c:38:00:8f:68:96:4e:8f:05:1a:
         6f:5e:f4:42:b5:4f:3b:d8:ab:ba:f8:16:da:f6:34:05:46:41:
         7b:d0:cc:4d:7a:08:a4:6d:5a:27:df:25:30:6d:a7:31:dd:c0:
         39:db:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:38:08 2026 by rpki-client