Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/732639e5-295c-3ddf-9899-d6cd4d4cd476.roa
File:                     732639e5-295c-3ddf-9899-d6cd4d4cd476.roa (raw, json)
Hash identifier:          xp08suOS2DIhf2pz7BUqVfmFfvkyMjbm6oys7Wd3QNU=
Subject key identifier:   24:1B:32:8D:67:CD:BC:1B:A0:64:D2:3E:AA:54:EE:59:70:8B:4D:2B
Certificate issuer:       /CN=5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1
Certificate serial:       010D0C9F4328584ED167201EA2090A75A968A400
Authority key identifier: 4F:A1:CE:C1:B0:58:1E:F7:D3:79:D9:CE:E8:8A:18:FE:2C:31:61:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/732639e5-295c-3ddf-9899-d6cd4d4cd476.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     401320
IP address blocks:        23.191.88.0/24 maxlen: 24
                          130.12.90.0/24 maxlen: 24
                          2602:f7ec::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:20:1e:a2:09:0a:75:a9:68:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=cf9441dc-c2b0-4694-aa24-78f5817b4f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:4a:20:26:42:ff:95:f8:63:b6:59:31:38:
                    d6:72:1b:5e:f1:06:ab:22:0a:1a:96:ed:f2:5d:5a:
                    45:c7:2a:4b:18:ef:dc:f0:bc:3e:49:31:eb:f3:ec:
                    31:2b:ff:df:de:ad:11:ed:cc:a5:44:da:a1:00:a7:
                    a9:75:ce:63:ea:b0:30:59:9d:08:45:53:27:bf:da:
                    66:40:39:31:2c:12:5a:83:7a:c5:64:51:47:e2:30:
                    07:16:5e:af:7b:c4:58:12:e6:53:c7:c3:89:6c:d6:
                    4f:9e:e0:85:92:d7:16:a4:51:4a:ec:69:58:77:91:
                    3c:1d:c2:1a:2a:cc:14:48:f7:95:4d:bc:af:3d:d9:
                    a4:82:1e:7d:53:07:a1:fc:aa:17:12:7f:3c:64:c0:
                    89:35:26:dc:aa:b0:2b:e5:1f:53:e9:98:31:2d:cf:
                    bf:c8:18:64:e6:ad:23:59:7c:df:ba:d6:a5:ec:35:
                    ab:b1:81:61:c8:4d:13:e4:d5:4b:c6:fd:a5:8b:ba:
                    ae:eb:a3:6b:0e:24:30:c7:fa:38:fb:12:ae:c3:35:
                    54:56:1b:5b:35:ea:65:ce:80:44:1f:2a:d8:b6:b5:
                    94:d7:01:43:c4:a6:b3:38:fa:c2:ee:6f:17:04:8f:
                    42:b8:2f:c4:f5:7e:7b:7e:31:bf:a8:0f:73:f7:53:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1B:32:8D:67:CD:BC:1B:A0:64:D2:3E:AA:54:EE:59:70:8B:4D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/732639e5-295c-3ddf-9899-d6cd4d4cd476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.crl

            X509v3 Authority Key Identifier:
                keyid:4F:A1:CE:C1:B0:58:1E:F7:D3:79:D9:CE:E8:8A:18:FE:2C:31:61:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.88.0/24
                  130.12.90.0/24
                IPv6:
                  2602:f7ec::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b2:1f:8a:1c:2a:b5:4a:3c:7f:37:93:13:ed:22:a4:70:2b:
         54:15:a3:76:3b:b0:a0:74:58:f4:6f:63:66:5f:91:fa:fd:ac:
         fb:ed:f0:61:5a:77:43:61:11:e4:0d:ee:ac:46:4e:ab:ea:de:
         cf:1e:4b:d2:68:7b:e7:cd:ed:ce:ca:86:a5:a4:27:f0:13:ae:
         ac:a0:73:d4:cf:ba:f1:86:1d:d4:f5:b3:cf:ba:c3:25:10:87:
         df:02:1c:13:f1:50:ab:06:71:d0:84:81:09:37:b0:07:f0:85:
         15:4e:98:08:e0:6b:b7:25:ec:d0:27:7d:4b:e3:98:55:b3:f8:
         58:48:4f:c8:02:6d:95:41:e2:fd:46:42:df:32:53:af:b6:46:
         a4:de:20:ab:7a:99:26:11:17:b7:de:8c:14:64:1f:68:d7:cf:
         0f:6b:d3:2d:57:7c:90:75:55:bf:40:43:2a:b3:fa:31:a5:5f:
         a3:42:a3:8c:d0:4e:cb:70:05:d8:fa:37:66:c2:f3:3b:e5:f3:
         fe:9c:17:6e:5b:a8:38:8e:9b:b5:a0:73:a4:17:aa:52:ca:9b:
         c5:12:ca:16:38:93:ec:e0:cd:74:f4:d1:77:a8:30:95:1e:4c:
         5e:11:a3:6a:54:f2:3a:ef:aa:10:00:51:ed:aa:d2:fa:d6:59:
         f4:e7:0b:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:43 2026 by rpki-client