Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa
File:                     b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa (raw, json)
Hash identifier:          T0kgUuKoC3mTZ7WXmRVM6odXfrfODg7ZWE6+08P5nnY=
Subject key identifier:   89:00:57:7F:32:43:7A:CF:20:D1:D6:AD:C4:C9:E5:11:2A:B4:AB:18
Certificate issuer:       /CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
Certificate serial:       010D0C9F4328584EA7881021367C20D13E410C00
Authority key identifier: 13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     393796
IP address blocks:        63.245.180.0/23 maxlen: 24
                          104.128.32.0/20 maxlen: 24
                          130.51.32.0/23 maxlen: 24
                          2604:7640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:10:21:36:7c:20:d1:3e:41:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a3b9edd5-8286-4dc4-933c-debde32b6274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:71:55:fc:4e:d1:ba:00:a9:bb:54:1a:a8:
                    39:0f:86:f0:c1:37:3a:6f:b5:04:81:36:c6:34:ed:
                    7a:94:a8:78:b8:90:7b:b4:5d:24:67:c3:88:4b:76:
                    59:0d:f0:1f:a0:2a:18:c9:24:a8:f6:2f:8a:75:da:
                    e4:21:c4:87:16:d0:c0:36:2c:c0:42:57:41:5c:7b:
                    e5:09:ac:26:94:27:ed:9b:7b:96:4d:24:ee:9f:e7:
                    01:e3:fc:c7:77:48:41:5f:92:f1:79:ca:ce:16:54:
                    40:40:cc:18:d6:6d:3d:63:d1:71:77:98:08:ee:8b:
                    96:9f:67:a1:22:d0:d7:d0:5a:d4:a4:e5:5c:8f:0c:
                    1e:6b:fb:56:f2:b9:0a:71:83:77:4b:16:9d:66:d2:
                    b9:3d:92:ea:c2:dd:11:66:9c:0c:78:ac:c3:de:da:
                    57:ef:e1:13:ba:45:83:e3:b6:7a:37:fb:90:bb:17:
                    3c:3c:b5:bc:6b:c4:31:a4:0e:65:04:10:e3:86:67:
                    15:c8:80:57:03:e6:eb:c1:e2:48:07:b1:50:b5:27:
                    ad:b7:56:e4:f0:38:3e:49:7a:8b:9d:9a:9b:41:4e:
                    02:03:02:23:ac:17:72:ca:81:ea:29:01:49:1a:dc:
                    1a:81:57:5a:6a:0f:a7:69:82:a8:04:88:da:f8:6d:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:00:57:7F:32:43:7A:CF:20:D1:D6:AD:C4:C9:E5:11:2A:B4:AB:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.crl

            X509v3 Authority Key Identifier:
                keyid:13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.180.0/23
                  104.128.32.0/20
                  130.51.32.0/23
                IPv6:
                  2604:7640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2d:02:85:db:97:8b:99:0a:f5:d4:4c:75:42:64:57:0c:e5:
         c3:b6:36:95:42:3f:97:40:36:cb:64:46:e4:15:99:da:1f:a9:
         5e:cc:85:7c:62:0f:65:90:54:c9:d3:e1:eb:fb:82:34:6b:ee:
         01:86:ce:04:e3:a3:24:74:bf:b1:85:9b:d2:8a:bf:ea:78:46:
         26:7f:39:e5:3c:a1:6b:8e:bb:f4:ef:87:aa:00:7e:d8:5b:5c:
         59:1c:ce:9a:3e:3b:0c:c6:3d:de:25:37:01:72:1a:42:d0:31:
         0d:01:c1:b2:42:29:5c:0b:fd:17:57:f0:3e:fb:bd:55:e1:f2:
         ff:bf:23:1c:a8:02:85:b9:77:e3:b2:27:94:f1:b1:1b:9c:a1:
         38:ae:a0:14:99:bb:ea:f2:34:f7:79:c8:4f:85:ca:63:57:30:
         cb:b2:c8:43:d2:e7:a3:22:0b:6f:ba:fd:75:85:f4:eb:5b:0b:
         8d:09:5c:94:86:d0:1e:11:02:d9:18:ae:27:41:4c:dd:7b:f1:
         b1:3f:ee:c3:a5:b8:3f:be:23:1e:48:cd:ed:5d:e7:e3:47:c5:
         02:4e:75:9f:dc:f1:b0:bb:9f:2c:05:15:87:14:98:6e:bc:4e:
         6b:82:e6:15:54:7e:f6:fe:87:4d:39:fd:34:8a:d0:83:bf:1b:
         74:9a:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:52 2026 by rpki-client