Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/da760c50-d4e0-3bf6-9d1a-74873a53d6b2.roa
File:                     da760c50-d4e0-3bf6-9d1a-74873a53d6b2.roa (raw, json)
Hash identifier:          pEVKbmQlR/2q730jT//6vtrn82EF4QIBafFrHVy4Wo0=
Subject key identifier:   D0:4A:4B:05:0F:B1:8E:71:33:83:B7:DC:0F:CD:96:F3:79:D5:C6:51
Certificate issuer:       /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
Certificate serial:       010D0C9F4328584E31CF155098C944A45C2F2340
Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/da760c50-d4e0-3bf6-9d1a-74873a53d6b2.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     400932
IP address blocks:        23.146.96.0/24 maxlen: 24
                          2602:fe4d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:15:50:98:c9:44:a4:5c:2f:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=f0d21c40-75b9-4783-a346-acda5f2c2bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:bf:1d:5c:a2:10:ce:40:f5:53:0f:30:57:
                    ac:71:cb:25:9b:2c:95:62:3b:70:b4:7d:c5:00:0d:
                    4d:ef:18:f6:4c:ad:38:64:16:ba:7e:41:a6:d2:d3:
                    f7:56:72:e1:01:68:e5:02:e2:b1:86:38:ad:d6:6a:
                    ee:ad:e7:27:cd:0a:24:02:56:d7:34:54:70:08:9c:
                    ba:f7:be:6a:14:39:80:08:b6:0e:83:98:87:0c:f6:
                    66:ff:89:94:77:df:8b:90:b9:8e:a2:45:83:ab:96:
                    35:4c:9f:1b:91:cf:39:5c:b4:4e:be:c0:9b:98:16:
                    1a:b6:79:1f:8c:67:e2:f6:c4:97:69:13:60:38:af:
                    c0:35:3d:b5:bc:86:e9:8d:c0:ba:af:e2:23:56:51:
                    97:b6:51:2f:c6:e2:83:0a:8f:4a:b9:5c:6a:f2:e4:
                    1f:0f:94:25:3d:d4:63:ba:51:73:09:69:8a:a5:c5:
                    b1:1c:7f:d5:ca:a3:f2:03:23:74:0d:56:ea:4e:6a:
                    be:27:16:16:8e:1c:0c:5e:b0:6b:8f:45:f3:29:fd:
                    84:ed:d9:4a:c4:ab:94:9c:3a:b6:76:be:cb:bf:ff:
                    b5:27:44:0a:d0:fa:1d:5d:c2:0d:a1:74:c7:df:a7:
                    12:b3:81:9e:d1:88:d6:18:62:3e:54:b4:4c:14:fc:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4A:4B:05:0F:B1:8E:71:33:83:B7:DC:0F:CD:96:F3:79:D5:C6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/da760c50-d4e0-3bf6-9d1a-74873a53d6b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.96.0/24
                IPv6:
                  2602:fe4d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:09:a2:cb:93:6c:1d:23:28:16:2b:06:10:93:8f:66:4a:a7:
         16:34:e7:67:15:55:07:3d:4a:53:5a:9a:43:d6:e6:f1:a5:1f:
         f8:02:15:12:e1:35:8b:63:d6:41:68:b6:34:aa:c3:48:62:3a:
         7d:dd:38:d9:bc:41:bb:c9:04:48:f2:36:fe:46:33:e0:7d:16:
         ea:d9:51:c9:dc:f2:0e:7b:ff:02:3f:bf:ae:81:b9:6c:84:23:
         f8:ce:80:57:e8:4c:cb:99:09:d9:4a:07:28:98:3b:67:db:fb:
         30:8b:74:8c:c4:08:0d:7d:ac:c0:18:40:66:5d:cf:b9:0b:58:
         f7:a4:f0:a4:4f:f2:a5:47:5c:54:ec:5b:ca:4b:11:2e:41:23:
         4e:05:c8:76:94:18:c8:7a:f4:c0:f6:e4:83:8a:e9:8f:ad:0b:
         ef:82:52:0c:c9:87:9d:61:17:24:dd:b7:4a:b8:d2:9b:e5:0d:
         b0:9a:50:f3:ce:ba:17:92:5e:60:0e:1f:42:8b:5a:ba:68:70:
         76:e5:23:f2:13:e8:62:84:eb:1f:8d:fe:dc:d3:be:01:2f:c7:
         94:39:8b:b0:a3:1d:d9:34:8d:b6:fd:90:f2:56:53:97:11:53:
         a8:8b:90:ed:16:db:dd:a6:8a:e2:6f:f0:bb:bb:68:18:18:5e:
         32:ff:dd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 00:39:51 2026 by rpki-client