Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/9739c38e-ec80-3bb5-87da-cecbf185320c.roa
File:                     9739c38e-ec80-3bb5-87da-cecbf185320c.roa (raw, json)
Hash identifier:          5ogDca/Eaq16ga6AT1lZ6lp/bPgNfLZDCZAY/aHjBrI=
Subject key identifier:   B8:8D:AD:41:76:DB:71:A5:81:75:EE:05:28:C9:3B:87:09:76:B9:C3
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F4328584AFBF71484C8E860FB3BEF4B40
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/9739c38e-ec80-3bb5-87da-cecbf185320c.roa
Signing time:             Tue 26 Aug 2025 11:46:30 +0000
ROA not before:           Tue 26 Aug 2025 11:46:30 +0000
ROA not after:            Mon 24 Nov 2025 12:46:30 +0000
asID:                     18932
IP address blocks:        23.161.104.0/24 maxlen: 24
                          192.104.136.0/24 maxlen: 24
                          2602:f590::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fb:f7:14:84:c8:e8:60:fb:3b:ef:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Aug 26 11:46:30 2025 GMT
            Not After : Nov 24 12:46:30 2025 GMT
        Subject: CN=e69ff5b5-2013-436c-a448-570550668f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:f3:81:e8:9a:d3:ae:7c:90:43:14:40:51:
                    39:ca:36:c6:a7:d6:10:93:1b:18:ef:1d:bf:00:f3:
                    0e:f8:2f:5b:25:ac:72:d7:b2:26:d4:29:35:c1:2c:
                    3c:1b:59:8d:d2:b6:fb:8f:86:64:75:1a:7a:01:5c:
                    bd:3b:69:4e:b8:42:8b:17:6c:ce:07:db:37:be:5e:
                    7f:66:cd:06:cb:87:c2:d7:ed:f1:ce:57:c6:ed:dc:
                    fd:73:ac:fb:aa:ba:b1:56:49:ba:03:aa:4d:a7:20:
                    f7:ca:f3:0f:68:14:dd:dc:ad:2d:dc:84:2d:ef:0e:
                    cc:52:c2:ea:fe:06:7d:49:be:c1:a2:b5:0e:d5:6a:
                    94:3d:17:6c:d5:08:ea:a0:b4:99:93:be:17:ec:55:
                    6d:14:6d:83:0b:fa:47:51:c4:e4:3d:c6:b6:d8:d2:
                    52:db:d9:d7:2f:e1:fd:e9:6c:e7:cb:54:3d:d3:96:
                    41:65:7b:8e:a7:ac:cf:d3:95:3d:25:60:b7:f4:48:
                    7d:3d:12:41:9b:40:8e:af:dd:10:df:7b:64:6b:42:
                    0b:8d:b7:10:d2:c3:ce:7d:0a:f9:94:73:19:ba:e6:
                    8c:d6:36:e9:60:d9:c8:b6:44:42:52:a2:ee:3d:a5:
                    01:47:b1:99:75:5d:25:e7:39:3c:d0:c9:5b:be:26:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8D:AD:41:76:DB:71:A5:81:75:EE:05:28:C9:3B:87:09:76:B9:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/9739c38e-ec80-3bb5-87da-cecbf185320c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24
                  192.104.136.0/24
                IPv6:
                  2602:f590::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:ba:e1:f5:79:c8:97:cb:82:b6:d5:4f:af:45:e7:37:69:
         6b:c5:64:d4:10:db:d9:32:ec:ef:7c:9e:5a:29:37:6c:78:df:
         c2:1a:f6:d1:62:6a:4e:f0:f4:62:9a:dd:c0:39:5c:df:aa:88:
         49:a8:2c:90:19:13:fe:68:6d:f1:40:07:03:ce:fc:f5:cc:64:
         ad:2d:82:4e:51:42:6e:77:92:2a:13:89:9e:45:21:1f:de:17:
         ac:3e:16:aa:62:60:50:71:6f:cb:64:c6:f3:67:e9:76:b5:a5:
         00:23:55:d7:91:a5:75:05:19:50:fe:a1:4a:c5:06:1e:a2:46:
         17:e6:03:25:02:8c:71:e4:f3:b3:8c:c3:39:43:1d:64:fc:9e:
         0a:7d:c2:51:e6:9b:12:26:d9:d2:d5:63:b4:32:54:a1:c8:54:
         c0:f1:67:11:25:fd:e4:c9:f8:d3:c9:0f:68:b9:f4:68:88:f7:
         4b:fc:98:e6:01:e5:22:ff:95:22:26:e5:76:15:a6:be:d7:d1:
         7e:78:9c:fa:3f:e7:95:e9:6c:57:f7:f0:29:63:d7:de:9c:1f:
         61:13:91:99:b6:78:ae:7d:50:be:7f:fa:6c:cb:78:95:5d:0f:
         68:9b:9e:78:eb:55:3f:f8:0d:6a:25:88:a6:f3:d2:0b:20:da:
         be:6f:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:47:32 2025 by rpki-client