Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
File:                     c6086dd9-635c-3d69-b167-00ce58160e62.roa (raw, json)
Hash identifier:          55+43aYGYcdUizY31CexLNJAj1e6WavmmfjgzFh1658=
Subject key identifier:   BD:FC:F9:BB:F0:06:13:2B:FB:D0:84:2B:37:3F:BF:A3:57:46:D8:44
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584E4129CF06D576AA5FAF2D7700
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     1299
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:cf:06:d5:76:aa:5f:af:2d:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=711ee0a4-db0b-4725-b246-4ce1af438473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e0:f8:d2:c6:53:fe:91:42:65:a3:72:7d:8e:
                    8a:95:df:e5:67:96:a8:66:36:eb:b9:7e:18:75:41:
                    c7:5f:97:4b:ce:f7:18:a2:ac:81:c4:c4:f3:3a:fe:
                    eb:ec:96:66:35:57:95:a2:f9:58:5e:8e:f6:1e:70:
                    8f:19:0e:26:c4:45:ba:a1:12:20:a5:ed:9d:dd:0a:
                    c4:a7:02:e1:88:b1:1a:bc:70:7c:49:71:cd:9f:22:
                    c9:68:47:d1:0c:98:64:af:36:ad:1e:4e:7e:0d:72:
                    7f:08:d3:35:b9:ba:23:0d:a9:d6:e2:c8:ed:a7:b7:
                    57:3f:b4:57:44:e2:5c:60:83:e5:b5:cf:89:94:67:
                    87:f9:69:1e:37:20:8c:f7:20:0b:77:22:da:31:95:
                    6c:9f:8d:4f:0a:34:1f:b6:33:a0:91:fc:19:18:1f:
                    97:ec:bc:b3:1b:8a:99:14:5e:9e:1b:d9:dd:92:30:
                    62:3e:58:2e:4e:47:d6:ba:e5:74:4b:64:88:f7:8a:
                    ae:9d:1f:84:78:9c:73:e2:3e:ff:5a:0c:90:9c:30:
                    ad:ec:49:8b:56:c4:e5:d2:56:c7:f2:7d:4b:f5:62:
                    f1:41:c1:60:ed:72:76:66:c0:60:36:49:44:ba:fd:
                    7f:02:f4:2e:10:82:ee:4e:92:64:12:b1:23:6e:b1:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:F9:BB:F0:06:13:2B:FB:D0:84:2B:37:3F:BF:A3:57:46:D8:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:36:15:ae:c5:4e:fd:a9:ea:4f:4e:a5:3d:e8:aa:d0:50:b1:
         de:ad:c4:e4:48:bb:f0:20:68:36:3e:fa:25:16:46:95:20:51:
         a8:5b:1f:f9:76:fd:10:0d:25:82:44:1a:40:82:4f:e5:49:4c:
         47:be:ba:a2:96:a3:ae:16:86:60:3d:47:cb:ce:56:9b:e9:cf:
         c1:fa:af:b9:b7:a0:10:b4:35:b8:b1:69:21:a0:d2:b8:7d:19:
         89:79:a3:cd:87:2a:ec:f3:8f:da:d4:92:ee:6e:fe:f7:45:a9:
         38:8e:02:f5:ac:87:dc:de:77:f8:97:26:bf:07:c5:b5:7c:c9:
         98:02:e7:01:5d:9d:70:6a:2c:c1:b1:a2:d3:dc:8b:aa:42:41:
         8b:a5:df:b1:5c:0f:77:af:12:5e:c5:04:b2:6a:9c:39:42:17:
         fc:98:80:af:b8:87:31:dd:05:1b:ae:7d:bc:4f:97:51:71:66:
         c3:3f:75:70:bb:ee:6b:ae:71:96:6d:fa:6f:5f:fc:c4:01:a8:
         41:1d:eb:0e:97:19:5c:57:84:47:0b:9a:c1:ed:5e:a1:35:e7:
         78:42:21:e7:b6:a8:31:f8:fe:89:5f:22:cf:58:ca:37:c9:6a:
         2a:56:a0:9e:37:c1:67:14:16:2a:09:3c:5e:c5:96:e0:6b:8f:
         2b:0b:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:14 2026 by rpki-client