Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/37198e11-c5d4-34ea-93b0-bfcba0b154b5.roa
File:                     37198e11-c5d4-34ea-93b0-bfcba0b154b5.roa (raw, json)
Hash identifier:          oQl9zNII4TFpt5kiMN88U0H+iyY9Lyot2w/AEppFYwo=
Subject key identifier:   10:E7:61:71:B7:E0:AF:C7:65:97:C8:D2:01:DB:41:63:D4:41:6D:7E
Certificate issuer:       /CN=9352489f-1208-4760-a292-4b8a2bda8e04
Certificate serial:       010D0C9F4328584EA7885F9E1B158427DC3A1B80
Authority key identifier: 34:EE:C5:D6:C3:C7:59:DD:66:39:A1:1F:32:0C:83:3B:60:58:5C:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/37198e11-c5d4-34ea-93b0-bfcba0b154b5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400684
IP address blocks:        23.130.244.0/24 maxlen: 24
                          208.75.96.0/21 maxlen: 24
                          2605:5ec0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/9352489f-1208-4760-a292-4b8a2bda8e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/9352489f-1208-4760-a292-4b8a2bda8e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5f:9e:1b:15:84:27:dc:3a:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9352489f-1208-4760-a292-4b8a2bda8e04
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=479a3160-720e-4fea-ad35-d9246766439a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:ae:4f:67:66:24:47:76:be:87:db:7c:e2:
                    06:bf:10:44:60:82:eb:c0:b2:1a:68:33:fe:e8:d1:
                    50:6e:1f:bb:34:b1:68:b4:8b:9b:0c:ef:23:c3:43:
                    3c:33:44:fa:51:6c:72:33:e5:2f:66:6e:7a:91:29:
                    d1:93:e9:52:68:cd:d9:96:93:34:77:24:db:48:01:
                    c2:d8:4f:fc:28:c7:2a:f8:bf:c0:c7:e4:61:89:dc:
                    dc:cf:40:c3:ad:6d:2b:49:8c:35:0e:26:9a:d3:2a:
                    62:34:3f:82:6d:1e:62:84:9f:32:33:60:34:ab:74:
                    ff:3d:ac:72:d0:d0:0e:63:6a:ec:47:38:36:ec:76:
                    23:18:13:70:cf:8f:5e:12:85:15:a4:89:18:15:10:
                    11:11:95:af:58:02:2c:dc:46:4f:01:77:e6:82:11:
                    96:a3:18:ea:fc:de:62:78:5d:09:e6:b2:4b:3d:83:
                    8b:c5:7c:01:61:d6:50:58:cd:f8:03:55:96:03:75:
                    2a:72:88:05:49:ae:d5:f4:62:80:0b:f5:6d:25:01:
                    dd:80:2b:27:89:49:fb:13:15:9e:2d:e8:6e:ca:a6:
                    8a:cf:c2:7e:3f:c8:83:6a:81:55:c1:8c:f0:67:91:
                    d4:f0:6e:ab:64:8c:a9:46:a4:a0:fd:57:b2:3b:94:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E7:61:71:B7:E0:AF:C7:65:97:C8:D2:01:DB:41:63:D4:41:6D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/37198e11-c5d4-34ea-93b0-bfcba0b154b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/9352489f-1208-4760-a292-4b8a2bda8e04.crl

            X509v3 Authority Key Identifier:
                keyid:34:EE:C5:D6:C3:C7:59:DD:66:39:A1:1F:32:0C:83:3B:60:58:5C:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.244.0/24
                  208.75.96.0/21
                IPv6:
                  2605:5ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0d:6e:6d:bc:03:28:cd:b8:19:79:49:86:11:b1:43:25:b3:
         20:32:7e:a6:da:70:91:7a:01:53:73:9e:11:64:55:06:33:bf:
         fc:70:28:c2:f5:06:31:fb:eb:b6:68:f6:60:38:b1:73:08:be:
         60:c4:2a:bc:16:75:d8:ba:3e:8c:5a:ad:68:9c:90:8d:c6:98:
         2b:1d:74:43:4d:94:fa:42:43:01:e5:ee:71:47:e0:3c:20:05:
         03:29:07:39:2f:f1:10:c6:0c:54:13:00:24:21:43:b3:ad:b2:
         1e:a8:60:43:83:7c:84:b4:9c:6a:06:bd:62:72:9e:af:00:18:
         5d:3c:33:25:ee:fe:69:27:d9:b7:57:68:be:c4:ff:ab:2f:8b:
         90:f6:9c:08:9e:2a:bf:fd:f6:64:c8:1e:68:5f:84:bd:a9:5c:
         a1:50:dc:d4:3b:29:93:09:46:bc:94:22:13:4c:4d:29:08:e7:
         0e:75:4e:f6:be:07:49:44:62:5b:52:37:92:ac:ec:2e:8f:45:
         3d:3b:01:7e:29:dc:ed:9d:bb:85:e2:bb:ae:98:7f:e9:03:76:
         8a:d7:83:3c:ac:2f:6f:6e:ee:fd:5d:f6:14:fb:4a:0f:a9:06:
         10:72:a3:0e:51:82:c2:bc:f0:ae:e5:4d:f9:ba:3e:66:fd:44:
         8c:d9:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:09:15 2026 by rpki-client