Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/01c88c5c-3314-35d1-a1d5-61fb4536415e.roa
File:                     01c88c5c-3314-35d1-a1d5-61fb4536415e.roa (raw, json)
Hash identifier:          FRfanKMzbsY2JmuaItmZPI4gkAtbtSKGhAFPhi5tIz4=
Subject key identifier:   38:A1:F9:86:37:74:F5:D4:66:D1:4D:B5:5F:E0:E0:42:F6:1D:AF:39
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584DD35B09B39FF2AE6920289FC0
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/01c88c5c-3314-35d1-a1d5-61fb4536415e.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     393336
IP address blocks:        23.163.209.0/24 maxlen: 24
                          23.163.212.0/24 maxlen: 24
                          104.193.225.0/24 maxlen: 24
                          162.250.233.0/24 maxlen: 24
                          162.250.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:09:b3:9f:f2:ae:69:20:28:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=07c1c35e-fc00-4e64-a412-514d607fbe6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:40:94:49:65:d9:b6:06:54:5f:e4:6d:3f:
                    fd:24:54:07:df:fc:b4:05:14:74:22:0b:6d:f9:ae:
                    6c:5b:7c:8b:8c:de:c1:30:e8:2d:1f:a5:a1:6a:a5:
                    c1:8d:90:73:e4:a5:16:77:00:b8:35:eb:6c:2f:1e:
                    64:80:5a:6b:45:1b:44:73:f9:38:b0:e7:e6:97:ff:
                    1f:75:01:2f:19:f9:b4:f4:a3:bb:c3:12:68:73:d6:
                    9e:2a:d9:2f:24:be:7b:05:99:6b:b5:c7:6f:26:eb:
                    08:66:d1:74:cb:14:7f:25:16:75:84:28:a6:bd:79:
                    c5:24:5c:74:77:d5:53:8e:92:a2:ff:2f:09:1c:48:
                    b1:44:03:9e:48:8b:a5:5f:b3:c9:7c:ca:0d:1a:aa:
                    e6:a9:99:96:2c:82:6a:de:38:16:ee:09:01:e4:ae:
                    41:a7:aa:2b:f3:e5:89:90:80:a6:cb:0c:36:64:c3:
                    51:15:66:7e:34:a7:91:85:3a:d1:fc:c3:ef:c8:e0:
                    5a:48:b0:3e:9b:a1:30:cd:f8:21:93:86:d5:11:fb:
                    68:cf:fd:c6:20:7b:f1:96:9d:5d:22:09:60:2f:24:
                    8a:ea:10:d2:b0:49:1b:35:82:0d:8b:82:0c:c3:9a:
                    f5:ea:8f:f8:7c:31:ea:e3:b5:14:38:49:13:c1:80:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A1:F9:86:37:74:F5:D4:66:D1:4D:B5:5F:E0:E0:42:F6:1D:AF:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/01c88c5c-3314-35d1-a1d5-61fb4536415e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.209.0/24
                  23.163.212.0/24
                  104.193.225.0/24
                  162.250.233.0-162.250.234.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:13:81:7c:01:5a:b9:7b:0f:f0:02:7f:36:f7:f5:d3:4c:56:
         06:47:71:42:52:c6:5c:99:41:37:06:7e:90:46:5c:c3:76:59:
         a0:7a:68:42:f2:01:05:9f:64:fe:19:df:fe:f1:11:61:2a:5e:
         09:dc:8e:8f:46:0d:42:d6:e6:0c:32:f6:e0:a6:97:9c:69:3c:
         4f:0d:62:48:f1:da:85:fd:8f:2c:0a:78:93:08:16:4a:0c:21:
         ce:53:ad:48:46:f0:e8:dc:33:79:2b:64:ce:a1:4b:0b:ac:b3:
         5a:19:bc:a8:aa:bf:e9:c8:4a:85:48:1b:c0:c9:a3:b2:89:9c:
         07:47:e2:4f:cb:6c:ae:b5:2c:05:d1:cf:72:bb:95:f5:2d:dd:
         36:7b:c3:3f:3d:eb:21:da:59:49:74:23:91:e9:88:e5:04:6e:
         d7:4a:36:5b:59:b8:50:5b:6e:61:0e:30:e9:71:ec:0e:e1:54:
         8c:66:3d:11:dc:20:a0:de:04:2f:c4:d0:3e:e0:9e:34:26:8e:
         d1:9c:c4:7e:b2:27:e5:e2:1b:01:9a:0b:29:51:a7:51:8a:8d:
         b1:43:c1:fd:56:44:92:5c:43:8a:cb:cb:86:99:3b:41:74:ef:
         10:a5:c1:08:68:32:78:06:fa:db:b0:05:47:6d:fb:14:c4:01:
         64:7b:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:45:44 2026 by rpki-client