Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/9b3b48d5-ec51-32db-a74f-2ac1e3172235.roa
File:                     9b3b48d5-ec51-32db-a74f-2ac1e3172235.roa (raw, json)
Hash identifier:          CUkoZcR/u+Yj9HKSwuwTclmGuc3Tn5Yi9FbfqlDxjWg=
Subject key identifier:   AE:4A:19:3B:21:79:5B:58:8C:62:92:FE:4A:82:C0:57:78:ED:89:16
Certificate issuer:       /CN=73d04562-1247-40b7-bf6a-820de7e69a7a
Certificate serial:       010D0C9F4328584ED431D90F4162C728B9413160
Authority key identifier: 53:24:CF:5A:47:5C:D5:F0:2C:FD:07:08:D8:5B:79:4C:49:9C:E8:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/9b3b48d5-ec51-32db-a74f-2ac1e3172235.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     399016
IP address blocks:        23.168.208.0/24 maxlen: 24
                          64.227.208.0/22 maxlen: 22
                          64.227.208.0/24 maxlen: 24
                          64.227.209.0/24 maxlen: 24
                          64.227.210.0/24 maxlen: 24
                          64.227.211.0/24 maxlen: 24
                          96.9.100.0/22 maxlen: 22
                          96.9.100.0/24 maxlen: 24
                          96.9.101.0/24 maxlen: 24
                          96.9.102.0/24 maxlen: 24
                          96.9.103.0/24 maxlen: 24
                          192.139.176.0/21 maxlen: 21
                          192.139.176.0/24 maxlen: 24
                          192.139.177.0/24 maxlen: 24
                          192.139.178.0/24 maxlen: 24
                          192.139.179.0/24 maxlen: 24
                          192.139.180.0/24 maxlen: 24
                          192.139.181.0/24 maxlen: 24
                          192.139.182.0/24 maxlen: 24
                          192.139.183.0/24 maxlen: 24
                          2606:3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/73d04562-1247-40b7-bf6a-820de7e69a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/73d04562-1247-40b7-bf6a-820de7e69a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d9:0f:41:62:c7:28:b9:41:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d04562-1247-40b7-bf6a-820de7e69a7a
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=b216e859-da33-498e-bdc6-b6ac7e21d432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:88:ff:3c:01:12:6b:ca:96:ae:cb:d5:7c:
                    49:d1:8e:6f:32:0d:44:a8:de:13:01:03:81:c5:04:
                    bf:23:05:91:8f:4c:73:6b:c7:ca:a1:b0:fb:ae:24:
                    7c:bf:0c:bd:14:24:01:74:7f:01:8a:1a:3a:f7:10:
                    6e:59:ce:fa:e2:70:0d:70:f9:4a:1a:fe:ec:4d:91:
                    55:5a:15:1a:2c:4c:89:63:a6:eb:da:e3:b3:7a:e9:
                    1e:63:7c:ee:be:bd:3e:a0:d3:22:b1:a7:0e:5e:5b:
                    42:28:d0:aa:22:9b:09:c9:cb:c5:34:4a:b1:1e:2c:
                    e7:78:38:c6:c6:7c:0f:92:92:c0:71:63:62:71:98:
                    a3:89:39:02:f7:ef:c2:46:8c:a5:34:c9:2b:ea:8b:
                    cd:74:2c:d5:04:9d:ae:98:e3:8f:ed:fa:06:7f:27:
                    bb:ef:99:58:84:8b:3e:7d:50:59:86:db:fd:2f:cc:
                    12:78:e1:78:a5:8e:35:85:e6:06:85:ef:6d:24:ef:
                    72:6c:e2:63:b6:31:47:22:34:4b:9e:51:33:e9:fc:
                    a8:ab:44:50:26:47:cc:cb:00:d2:08:22:96:44:e3:
                    f4:d1:75:3b:da:da:f8:ec:b4:c0:69:57:96:ce:7f:
                    76:15:c3:d5:48:a9:92:3b:9f:22:11:dc:ad:0e:d6:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:19:3B:21:79:5B:58:8C:62:92:FE:4A:82:C0:57:78:ED:89:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/9b3b48d5-ec51-32db-a74f-2ac1e3172235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a/73d04562-1247-40b7-bf6a-820de7e69a7a.crl

            X509v3 Authority Key Identifier:
                keyid:53:24:CF:5A:47:5C:D5:F0:2C:FD:07:08:D8:5B:79:4C:49:9C:E8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/73d04562-1247-40b7-bf6a-820de7e69a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.208.0/24
                  64.227.208.0/22
                  96.9.100.0/22
                  192.139.176.0/21
                IPv6:
                  2606:3c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:74:34:90:62:8e:72:8e:8c:f8:05:54:f6:4c:78:b9:dc:fc:
         55:ea:ab:c5:92:c5:88:88:19:a3:90:9f:ac:1b:2a:d3:b4:57:
         ec:15:64:07:78:a4:1e:89:8e:f8:a4:fa:26:8a:d5:01:24:c6:
         98:89:e7:09:f2:c4:38:31:fb:8f:33:c5:fc:6f:cc:02:b2:3a:
         f7:55:af:d5:d7:24:46:00:fd:4f:eb:2f:9c:a6:8f:e5:b9:0e:
         7b:13:0a:8f:30:5b:1c:0f:32:c6:e7:26:80:5e:d3:f7:6c:bd:
         46:a8:61:7f:53:98:5c:85:07:e0:78:ed:f6:9b:dc:a6:53:9f:
         8b:b0:47:ce:ad:7e:fe:8e:dd:8f:23:c9:d0:9b:07:fd:0b:31:
         60:52:a6:36:a7:ea:c5:c1:1e:d0:70:52:3e:5d:e8:aa:d6:98:
         d8:2d:be:78:4a:fc:93:8b:99:1b:7f:4c:ab:75:9e:e8:36:3f:
         77:1a:28:dc:d8:13:2d:74:f6:d4:22:4f:a5:09:ab:76:12:b6:
         6b:30:0a:98:ef:9c:7e:11:f4:1e:73:db:eb:a4:08:bc:44:f7:
         65:1c:00:84:55:61:db:0b:f2:6a:65:93:53:2f:97:a8:06:0f:
         e2:ad:ab:18:d1:7b:3f:8c:71:47:5e:04:ef:73:f6:b2:57:3e:
         e3:ce:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:05:21 2026 by rpki-client