Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa
File:                     13ee82f5-89fe-3243-a686-2132e4e2271a.roa (raw, json)
Hash identifier:          18hGeeHXMUqViLrox1J/zqihX4Oy9xwPl8458vJXTRA=
Subject key identifier:   04:75:6B:53:25:20:14:A9:B9:84:56:93:98:78:DF:E5:CD:36:32:F6
Certificate issuer:       /CN=cd043f47-7524-4b11-a109-6bba895f6e1c
Certificate serial:       010D0C9F4328584E9BE51CAFB6BA42FA9102B100
Authority key identifier: F7:81:22:5B:63:96:02:E9:BD:55:DC:50:B5:4B:81:A9:0A:FA:73:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     47055
IP address blocks:        23.185.136.0/24 maxlen: 24
                          142.249.220.0/24 maxlen: 24
                          2602:f85b::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/cd043f47-7524-4b11-a109-6bba895f6e1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/cd043f47-7524-4b11-a109-6bba895f6e1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:1c:af:b6:ba:42:fa:91:02:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd043f47-7524-4b11-a109-6bba895f6e1c
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=070f6038-0516-4106-89a9-9e78f507b881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:3c:14:c4:49:d7:4c:ff:63:55:dd:60:19:
                    6a:5f:86:37:64:a5:5b:1c:3f:06:61:16:59:67:64:
                    1b:ad:16:db:f5:64:80:dc:7e:ec:09:dc:a1:23:5a:
                    ff:70:7b:08:95:0d:f0:d7:71:f1:1e:e5:d4:25:99:
                    e1:df:b4:62:f1:42:31:8e:66:4f:21:2e:87:4a:a9:
                    f4:52:5d:8d:5c:e5:cf:4a:4d:3e:44:02:9c:cb:fe:
                    9c:72:59:a6:3f:46:7b:48:5c:ac:6e:74:e3:10:64:
                    9c:78:19:42:f2:78:ca:70:3e:7c:bd:32:c7:4a:cf:
                    47:bd:d9:fb:13:eb:b9:eb:07:62:b5:06:9b:f0:a3:
                    31:a0:1e:4f:43:c8:92:7e:c1:ae:0a:08:3f:03:5c:
                    26:37:21:d9:a8:96:5d:c4:40:aa:5e:67:56:dd:ef:
                    48:e7:37:3d:18:d6:11:22:7d:24:17:ee:5a:9a:f9:
                    8a:66:51:d1:df:e8:a5:45:1d:71:d6:d1:5a:dd:d2:
                    8d:dc:a2:f7:db:f6:a8:3c:55:17:e3:54:33:08:56:
                    93:e6:0d:f1:4c:7e:5c:e4:78:a0:ae:30:84:84:da:
                    3f:26:17:12:d0:ea:d2:12:87:5b:c1:8d:6c:22:ca:
                    30:d9:6d:9d:60:73:ed:f5:3c:10:8a:3c:33:99:f9:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:6B:53:25:20:14:A9:B9:84:56:93:98:78:DF:E5:CD:36:32:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/cd043f47-7524-4b11-a109-6bba895f6e1c.crl

            X509v3 Authority Key Identifier:
                keyid:F7:81:22:5B:63:96:02:E9:BD:55:DC:50:B5:4B:81:A9:0A:FA:73:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.136.0/24
                  142.249.220.0/24
                IPv6:
                  2602:f85b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:26:37:32:e8:71:8a:39:c8:2e:1f:f4:18:0e:96:4f:5e:
         8b:91:e0:77:a8:08:24:f7:9e:4a:26:9f:99:5b:99:f6:6e:72:
         a0:57:10:7c:63:d5:db:9b:14:bd:5a:dc:ff:3b:90:c7:58:6d:
         b4:3d:bf:7a:b1:f3:e0:91:85:a9:aa:2d:27:fd:07:b2:b4:55:
         06:be:63:c6:d8:88:e3:28:63:5a:16:d8:b9:9e:cb:71:dd:9e:
         ca:20:11:5d:2c:cf:c2:9d:bc:51:f1:15:4f:d4:03:67:1c:d0:
         b1:e5:e6:f8:85:d6:87:59:42:2d:e4:b8:0d:70:fc:ea:ab:eb:
         8b:91:47:88:b6:18:a1:12:70:40:de:84:e6:8a:47:f5:77:a1:
         5d:c2:24:5a:1f:d9:45:20:e4:bf:39:63:48:1a:b0:48:a1:01:
         27:77:bf:77:96:62:fd:2b:9c:80:5d:7b:80:d6:03:9e:f1:ab:
         a2:d9:76:64:13:de:a7:91:ce:7c:e8:8b:84:96:9a:62:58:68:
         05:fd:67:e5:fa:55:16:50:25:cf:47:4b:23:79:48:09:59:7f:
         eb:8a:72:e8:eb:95:12:82:1f:14:42:6d:cd:cd:ee:7d:cf:e7:
         64:41:93:ab:ad:ce:a2:8d:ee:4e:ce:fe:92:7d:dd:d0:1b:c8:
         27:f0:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:36:36 2026 by rpki-client