Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/e9a9c0b9-3e7a-34a7-9732-324e27b89ad2.roa
File:                     e9a9c0b9-3e7a-34a7-9732-324e27b89ad2.roa (raw, json)
Hash identifier:          ebJw5v4YGpSlUy4osTts0W95Syhl+9QIuL+b/veb5c4=
Subject key identifier:   0C:EB:74:33:73:6F:0D:90:2D:AC:D6:40:EA:B4:0E:AA:2A:01:26:EC
Certificate issuer:       /CN=f5b47d91-eb0d-4085-9bc2-452042c0b313
Certificate serial:       010D0C9F4328584EA7876320A9B0BF5A7A698900
Authority key identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/e9a9c0b9-3e7a-34a7-9732-324e27b89ad2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31775
IP address blocks:        23.174.0.0/22 maxlen: 24
                          23.174.4.0/24 maxlen: 24
                          115.84.192.0/19 maxlen: 24
                          2606:e780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:63:20:a9:b0:bf:5a:7a:69:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b47d91-eb0d-4085-9bc2-452042c0b313
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eb967126-78d0-4112-94dd-ed31b4f6a515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:56:c0:3e:17:48:4c:be:74:86:8f:88:39:08:
                    8a:9d:d9:69:16:90:e2:24:e2:73:64:76:c0:36:00:
                    19:b2:f4:91:6b:09:7a:e3:54:8b:b4:f1:c3:d4:aa:
                    e9:aa:c0:47:a6:91:44:c7:8b:e9:f3:38:ab:92:55:
                    4f:1e:c9:9e:91:db:d8:3d:7e:1a:fa:5b:dd:7a:80:
                    27:7c:27:3f:28:8d:7b:60:d3:5a:09:4e:1b:5e:4c:
                    9c:6c:8a:09:37:1b:2e:4a:8b:87:d3:bb:9a:fd:eb:
                    aa:af:5e:cc:59:d4:3e:88:71:56:a4:dd:2d:5f:ce:
                    2b:7f:73:4a:d0:11:8c:0c:20:22:bf:1e:75:66:f3:
                    cb:52:8d:35:95:4d:a4:d8:d8:c8:11:dd:a6:47:df:
                    44:20:92:06:b7:21:df:45:55:32:87:f1:6f:4c:42:
                    c3:e5:01:2c:28:44:af:98:3a:d6:4d:7e:ce:a2:e0:
                    90:71:a5:53:2f:26:2c:5e:ed:5c:2a:fa:11:bf:c3:
                    e0:f5:eb:0f:07:dd:5d:bc:d1:35:33:1f:ed:62:57:
                    42:8c:f9:f6:73:d5:32:75:40:4f:66:60:27:ee:d0:
                    90:3a:02:1c:52:26:3e:1f:d2:08:d8:c8:f2:d8:0d:
                    3b:b0:3b:b8:9d:b1:b5:fe:5a:00:56:f8:32:4b:74:
                    56:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:74:33:73:6F:0D:90:2D:AC:D6:40:EA:B4:0E:AA:2A:01:26:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/e9a9c0b9-3e7a-34a7-9732-324e27b89ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.0.0-23.174.4.255
                  115.84.192.0/19
                IPv6:
                  2606:e780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b7:bf:f2:56:f2:09:60:8f:a6:c9:fb:19:d3:53:37:8d:0e:
         a8:38:db:08:1f:fb:ac:19:9a:7c:d2:16:13:09:6f:04:ef:93:
         da:08:9b:dc:34:96:ad:f6:37:39:32:de:c1:8d:03:80:db:ed:
         eb:45:e3:ca:da:26:88:82:6c:31:4e:5b:0c:5c:c3:b1:dd:96:
         a2:a6:f9:a6:72:93:67:3f:47:5a:d6:12:60:7c:27:c9:db:eb:
         23:ce:db:a3:4e:2a:e8:b3:fe:31:7a:7d:7a:4d:9e:89:36:ed:
         e8:ab:23:42:29:b2:d9:87:da:e4:d5:bf:d5:5f:e7:61:07:b6:
         01:5b:3b:f5:84:00:b3:5b:24:a1:01:2c:fa:3c:1a:f8:c1:f0:
         69:68:d3:6e:46:f1:5d:6f:a9:57:4f:98:b8:f8:bb:8d:ff:03:
         0e:3f:bd:59:2f:27:ea:fa:46:84:6b:b0:42:11:fc:e2:6b:f3:
         1a:c1:62:d5:1a:40:40:4d:9d:bc:17:5f:f4:ec:f0:c8:87:3e:
         76:f8:22:55:da:3c:46:0d:14:12:6e:4d:03:91:7b:8f:fa:8a:
         fc:b8:de:7d:d7:30:c9:8b:5a:f9:f6:33:eb:54:41:f3:92:c4:
         07:fb:ea:40:20:5b:e9:81:df:11:e2:cc:8b:94:8e:7a:af:4a:
         9a:0f:3e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:07:23 2026 by rpki-client