Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa
File:                     c0888bfe-5f4f-3e00-83d8-b424d973531e.roa (raw, json)
Hash identifier:          x7Iev2cBmePlu1pxTlfpruoB5iOosztapoZ8JTr5DVk=
Subject key identifier:   E6:56:29:79:8E:1F:0D:55:42:B1:24:67:EE:CF:2C:B3:9D:73:06:DC
Certificate issuer:       /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
Certificate serial:       010D0C9F4328584E3A2F1D7497529699C9C7CA40
Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     53758
IP address blocks:        23.128.96.0/24 maxlen: 24
                          2620:137:e000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:1d:74:97:52:96:99:c9:c7:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=1f91b088-cb40-4154-b23c-5975a9fd7458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f6:c9:fe:0d:0f:1c:1c:2a:3e:54:35:0e:62:
                    15:ba:f1:2e:22:13:7e:00:98:f8:1e:aa:96:3e:6b:
                    e8:97:7b:fc:c0:f6:92:48:26:4c:53:c0:69:3b:df:
                    a8:47:1e:ff:36:97:61:c4:59:a9:1d:72:4d:58:7a:
                    60:15:80:f2:68:f0:f3:36:89:32:d8:5a:c7:f3:3a:
                    3b:bf:e5:db:30:47:39:2b:7a:5e:c3:73:e0:29:64:
                    78:e2:7c:5e:5d:cf:7f:da:3e:bd:8f:21:37:5b:9f:
                    9c:00:80:2b:30:07:21:06:0f:2c:ee:d4:9c:84:be:
                    48:ed:10:de:e7:d0:c7:de:0a:ae:89:e8:eb:1a:6f:
                    9b:9e:9e:30:5b:b9:4b:b4:80:31:e5:46:03:69:35:
                    3b:d5:e3:93:0e:32:b5:ca:42:b1:ad:6c:80:12:79:
                    f1:ab:67:d1:46:99:2e:03:fd:70:cb:4b:04:2c:7b:
                    c8:9d:1d:73:5b:f6:b3:cc:0e:7d:fb:0c:50:3b:37:
                    bc:cc:68:dd:e1:97:39:e9:a2:cc:6a:21:d4:08:54:
                    79:c6:1c:2b:1f:54:03:bb:67:08:c5:5c:6a:75:35:
                    cd:c4:6c:f2:36:97:a4:9b:2c:bf:23:ae:69:b0:33:
                    b2:16:df:ff:b4:6a:03:e1:c5:84:43:87:c3:47:10:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:56:29:79:8E:1F:0D:55:42:B1:24:67:EE:CF:2C:B3:9D:73:06:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl

            X509v3 Authority Key Identifier:
                keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.96.0/24
                IPv6:
                  2620:137:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:46:bf:d5:c4:ea:5f:93:d6:6c:bb:b0:aa:4a:38:e4:5d:
         5f:e7:6e:af:2a:a0:84:83:b9:45:a6:e7:da:39:f5:b3:b9:b2:
         b0:a0:5b:16:54:d7:30:e0:65:d8:1e:90:6f:76:09:cd:e6:10:
         8b:50:4e:8a:63:be:74:8a:65:82:9b:51:ce:32:23:14:36:a7:
         eb:07:08:0d:ed:2d:ec:3c:64:02:db:d9:d7:db:f8:61:f8:65:
         8b:27:37:0f:d8:77:2e:8e:c3:e9:65:cf:08:41:a6:f6:d2:68:
         30:e5:53:56:40:75:69:0d:40:92:07:be:bf:4f:72:52:04:8a:
         ce:16:cf:de:7d:79:dc:72:73:8d:90:c8:44:c3:52:bc:d9:83:
         e6:34:eb:c4:89:8a:ec:97:49:43:9d:35:42:91:4f:14:59:71:
         21:83:f0:c2:12:d7:3c:0a:3d:97:f7:0e:fa:42:e9:1d:c9:c5:
         06:8a:d5:1a:ce:83:a3:96:93:4a:d1:93:84:f2:08:10:64:1c:
         0c:0b:31:ab:29:b1:a7:4f:5b:aa:b9:61:61:34:ea:0c:9e:ef:
         41:8b:56:80:fb:12:e8:35:1c:15:ad:dc:68:a3:73:f0:25:a7:
         91:a4:3e:8e:1b:f8:2b:b7:66:ce:56:99:88:dd:b4:d0:45:b5:
         7e:96:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 22:52:07 2026 by rpki-client