Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/97d7ce58-711a-38c9-b985-97340a2077d2.roa
File:                     97d7ce58-711a-38c9-b985-97340a2077d2.roa (raw, json)
Hash identifier:          aFSsjU/4HeTza+kpJnynV4rnQE0IWjNW7QOfdgXmr00=
Subject key identifier:   8E:36:61:96:B3:A9:05:DB:DB:D2:F7:0A:8C:CF:7D:5D:8B:2F:4B:96
Certificate issuer:       /CN=bf246bfa-4298-4264-af85-3fb2845207f8
Certificate serial:       010D0C9F4328584E4AEF4D02556A540233506500
Authority key identifier: 0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/97d7ce58-711a-38c9-b985-97340a2077d2.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     8796
IP address blocks:        23.135.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4d:02:55:6a:54:02:33:50:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf246bfa-4298-4264-af85-3fb2845207f8
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=2fb3f290-f8bd-4a4e-85d1-33bf4a4aac79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:76:dc:ed:80:5a:3b:df:26:72:5d:a7:0d:
                    cc:fc:8c:cf:92:76:ae:0e:ea:9c:a6:40:17:4f:42:
                    0d:ed:2b:52:e5:de:78:e9:ed:5c:9f:9c:67:48:92:
                    18:11:e5:95:ef:91:20:68:26:af:b8:e8:b9:c7:26:
                    de:fa:ef:e7:43:90:b8:0e:64:5b:d0:cc:88:ca:59:
                    ac:a5:0a:1f:b7:0c:d9:d0:41:f7:ea:bd:e0:46:24:
                    ae:7e:2f:e1:23:1c:c3:70:af:2a:53:0a:77:0b:4d:
                    fe:a6:97:d5:2a:a6:3b:66:fb:94:c6:32:f3:5c:34:
                    f3:ab:e7:60:53:33:f4:fa:0d:6f:ad:9e:60:39:f1:
                    52:6e:65:fb:6d:be:73:c5:f2:98:1c:72:1f:48:8d:
                    d6:44:b1:f4:9a:3e:f5:38:d2:1e:84:d8:23:df:d4:
                    36:08:e5:1b:0b:fc:4d:d9:fa:2a:c3:b9:6c:c2:be:
                    c8:91:61:5c:c3:85:02:5a:b3:cf:83:90:aa:06:a6:
                    92:d0:b6:00:eb:a4:d2:d6:da:33:fe:97:28:36:d6:
                    82:b5:7f:15:d5:ca:6e:92:25:d6:f8:f5:70:26:2f:
                    66:6e:1b:42:63:a0:3b:60:97:15:57:09:b2:c7:4e:
                    83:5b:35:fb:09:78:1c:3c:82:f9:30:54:99:bd:59:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:36:61:96:B3:A9:05:DB:DB:D2:F7:0A:8C:CF:7D:5D:8B:2F:4B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/97d7ce58-711a-38c9-b985-97340a2077d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:9e:14:e1:13:5f:60:dd:7a:f1:1e:08:11:6e:17:95:30:
         05:f8:48:5f:a1:c5:e3:71:f6:12:f7:1a:9e:72:92:79:03:ce:
         bc:e0:09:35:9c:68:42:9c:71:87:56:35:51:7b:ed:7d:71:cd:
         16:46:4a:e5:ae:81:34:bc:cc:97:f5:65:1b:1b:9b:2c:01:0c:
         2e:00:f9:34:4a:cb:bf:54:a8:96:6f:19:37:cc:46:81:7e:07:
         88:f8:29:77:ff:c4:7b:58:60:9a:12:d0:15:2e:c3:c3:88:6c:
         f2:7f:de:6d:2a:3d:22:5e:4c:33:56:9e:d9:9d:29:de:46:1d:
         4a:79:37:83:c2:d3:8d:0c:e5:82:28:9a:6d:79:bd:ed:27:85:
         08:2f:f6:d8:89:0d:1c:6a:8e:22:1e:de:5a:53:ef:5f:0c:ea:
         f1:8c:e6:5f:15:12:db:d4:df:6a:65:4a:88:cf:cb:4f:1a:f1:
         74:7c:50:a8:d0:bc:38:5d:87:e7:67:d2:01:3a:d4:8b:df:53:
         32:e9:72:84:97:4a:1f:09:a7:7e:b1:9a:b1:60:ac:b8:fa:72:
         28:fa:db:b9:3e:7a:13:5a:b6:af:a3:7e:8a:1f:6e:3b:13:71:
         04:a7:54:9e:c5:0d:d2:22:c2:46:be:a5:c1:0d:91:c6:af:5b:
         10:82:e0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 20:59:01 2026 by rpki-client