Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa
File:                     9b36d67c-d771-3dd9-ab4a-67645e996e77.roa (raw, json)
Hash identifier:          78G6GIoYvAzYOIulP42UX22o1tCzaplZBXnjEkypinQ=
Subject key identifier:   1D:B8:35:4D:98:68:B9:70:AE:FB:16:E7:54:22:F8:1E:B3:83:C1:9C
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584EA5AA6EDB1E0F28DAA50FC600
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     53667
IP address blocks:        23.183.80.0/22 maxlen: 24
                          104.244.72.0/21 maxlen: 24
                          107.189.0.0/19 maxlen: 24
                          162.244.92.0/22 maxlen: 24
                          162.245.0.0/21 maxlen: 24
                          198.98.48.0/20 maxlen: 24
                          198.251.80.0/20 maxlen: 24
                          199.19.224.0/22 maxlen: 24
                          205.185.112.0/20 maxlen: 24
                          209.141.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6e:db:1e:0f:28:da:a5:0f:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=53becfcb-2c32-4b70-9855-7ead41ae2dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e4:75:94:82:ee:43:77:90:29:b4:1e:7e:75:
                    a4:15:a7:42:0a:4f:5e:bd:c3:76:86:50:69:1b:21:
                    95:c2:66:3a:b6:eb:b1:25:5b:cd:2e:c1:2f:7d:32:
                    af:32:b3:94:b5:47:f1:b7:27:de:9a:67:f7:d2:27:
                    11:db:fa:e8:a5:41:32:1f:f0:55:92:b8:ae:00:cf:
                    19:f1:29:53:e1:87:52:3d:43:c6:27:5d:20:50:a2:
                    6f:b7:b4:f9:92:ea:81:4a:a6:00:ae:da:e8:c1:b5:
                    86:ce:c0:8b:3f:0b:f1:da:1b:28:18:da:eb:b0:4c:
                    cb:07:eb:03:2d:11:10:7b:2f:b7:53:0a:e5:72:e1:
                    d9:34:3e:8d:6f:0f:cd:39:31:ef:45:20:30:09:85:
                    c7:e2:e0:8e:ad:35:26:fa:5f:8d:12:f0:5a:fb:4c:
                    40:57:ca:00:31:34:14:e6:27:93:ff:3c:5e:3e:a3:
                    91:d0:41:13:80:e0:7b:a8:c8:7e:e9:30:18:15:99:
                    a5:31:15:85:73:a3:e7:07:69:78:49:24:19:f6:ec:
                    0c:84:9f:d9:02:a7:a7:2b:61:96:02:31:38:c1:2f:
                    af:89:bc:e3:d9:9b:f6:d4:a9:df:80:34:b2:32:b7:
                    76:c9:95:15:55:10:22:2a:8c:29:63:91:90:18:ff:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B8:35:4D:98:68:B9:70:AE:FB:16:E7:54:22:F8:1E:B3:83:C1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.80.0/22
                  104.244.72.0/21
                  107.189.0.0/19
                  162.244.92.0/22
                  162.245.0.0/21
                  198.98.48.0/20
                  198.251.80.0/20
                  199.19.224.0/22
                  205.185.112.0/20
                  209.141.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:5e:b2:53:2e:ed:ac:38:0e:6a:b5:d2:83:a0:07:98:4c:
         1a:c0:5e:c2:f9:58:66:4e:b7:95:6a:b5:eb:f1:44:22:bc:65:
         57:10:c6:3e:84:da:b8:34:c4:38:2c:2d:a7:16:d3:b1:32:8b:
         2d:d8:df:12:06:27:33:36:95:fc:94:8f:7d:99:82:48:93:6f:
         a0:d6:67:e5:ff:5d:66:a5:73:60:67:57:92:c3:d4:9d:17:2a:
         55:14:c7:21:ea:49:35:f5:73:9b:20:74:23:09:f0:73:ec:4d:
         58:4f:83:1e:66:d7:f3:7d:4c:73:c9:fe:e7:4a:44:ae:47:c0:
         3a:12:e1:58:bd:1c:ce:6a:9e:89:c9:64:83:d9:38:ab:79:85:
         48:3e:01:eb:66:f4:06:53:7c:28:14:7f:b3:a1:03:1d:4a:7c:
         7b:67:9a:7e:ba:4b:48:8a:57:9f:78:2b:a1:91:de:2b:59:01:
         b1:7d:2d:72:6c:e8:7d:89:e8:03:ea:6c:ab:5e:54:22:6c:16:
         ff:39:2c:c7:55:74:54:58:4e:5d:99:d3:f6:01:a2:6c:a7:d5:
         9e:92:ec:25:0e:03:30:d2:89:11:18:1e:de:39:6c:1b:a7:f0:
         38:88:72:9e:3a:53:5f:91:b2:de:f5:65:eb:58:63:73:94:73:
         ba:11:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:51 2026 by rpki-client