Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa
File:                     633d00b0-379d-3045-b69f-cbef8b659900.roa (raw, json)
Hash identifier:          er64JpNP3Vn/JEk+j9zA7wnvR91dVpoANI7RXe4t2vQ=
Subject key identifier:   B2:2F:D3:9C:77:D9:94:C0:51:03:74:34:4A:20:31:0A:D7:74:D8:B3
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F4328584D9B854F166F2EB991F72A0980
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     10779
IP address blocks:        23.161.104.0/24 maxlen: 24
                          192.104.136.0/24 maxlen: 24
                          2602:f590::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:4f:16:6f:2e:b9:91:f7:2a:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=11be5148-4325-4aa4-b8d9-58250dc35ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:2f:bb:29:e0:bc:18:22:05:43:12:cb:b5:
                    e4:44:6f:90:43:e4:95:0e:40:03:34:52:94:7a:b8:
                    f6:0f:30:1d:8c:1f:c6:00:40:c2:ad:39:47:1a:f3:
                    2c:2e:6e:6a:41:de:5c:89:9c:01:63:f0:59:92:3d:
                    96:de:f7:55:f7:0f:e1:5c:3b:81:22:66:fe:23:ab:
                    a6:64:0b:24:af:0a:0d:43:f8:b3:1a:b5:b5:cb:bf:
                    87:bd:d0:92:b8:e5:ea:55:61:03:3e:a7:72:76:82:
                    2f:65:5b:b2:7e:cb:96:99:09:c6:c4:a6:82:79:e9:
                    01:e6:28:4e:13:48:ee:90:aa:f8:89:2c:c9:8e:9a:
                    01:ac:e9:6c:af:0e:0d:0f:2a:e6:9a:1d:d9:01:c2:
                    f0:68:5c:03:22:61:cf:29:1a:45:df:ca:0c:77:2a:
                    33:ef:8d:cd:c2:5d:a5:b0:33:fa:9e:68:57:5f:0b:
                    e2:0c:70:70:a8:3c:f5:ad:cc:7c:46:a7:ae:63:1b:
                    0a:39:ed:17:51:8e:7b:21:24:6d:d8:54:e9:c6:c6:
                    31:49:77:e7:1b:96:73:3f:c5:d5:ae:20:86:05:98:
                    f8:3d:46:c8:ec:7f:d6:1f:1a:ca:05:91:b7:be:2c:
                    b2:9e:4e:6f:c6:51:bd:6e:a2:34:e0:b7:8c:1e:fc:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:D3:9C:77:D9:94:C0:51:03:74:34:4A:20:31:0A:D7:74:D8:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24
                  192.104.136.0/24
                IPv6:
                  2602:f590::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:71:81:6a:61:04:e6:a8:46:f5:5a:29:71:43:b8:96:5e:
         80:ec:d1:40:a0:7c:16:7c:53:97:24:51:aa:f7:e5:5d:da:ee:
         be:80:1c:07:be:4e:1d:95:db:3d:20:b0:8b:00:fe:34:ff:f2:
         3b:99:cc:a5:1c:77:8a:1f:db:32:33:92:52:ec:dc:b1:22:54:
         93:b8:8b:3f:e7:52:e7:63:26:c5:9a:d5:de:6b:16:a7:5d:a2:
         76:25:13:82:3f:93:95:4c:a5:69:c9:85:39:a0:92:b3:fa:42:
         b8:bf:97:eb:b3:e5:93:71:3d:82:5a:46:a3:56:11:91:3d:fe:
         33:7e:13:22:46:ab:09:4f:4f:e8:1a:74:59:9e:9b:81:61:7a:
         e8:df:f4:a8:c9:ce:e1:55:06:89:b0:c3:ea:7e:1f:bb:42:f5:
         80:ac:5f:79:24:ba:f5:18:a2:d4:bd:2a:56:e5:a6:86:1f:ff:
         5c:6e:c8:12:f1:7f:1b:f6:00:87:18:1c:c9:e6:88:fa:15:d9:
         9d:48:a5:c8:49:e1:eb:d9:46:7c:5b:e1:bc:2d:34:ee:2e:39:
         8b:c9:43:57:13:36:c3:9e:9d:22:89:77:e4:66:30:a7:2c:3e:
         ff:0d:53:be:73:d5:51:97:9e:19:7d:d0:4a:d6:fb:08:55:10:
         90:14:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:04:39 2026 by rpki-client