Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f2695b63-b118-39e4-8015-114589695a4c.roa
File:                     f2695b63-b118-39e4-8015-114589695a4c.roa (raw, json)
Hash identifier:          BhhtcyBUrw9Lj3DAIY4E6Z57JhF7m3UF9KjXniVvF+g=
Subject key identifier:   44:5D:85:D5:E2:02:4D:21:3D:18:0A:34:3D:D9:84:B8:B1:8C:63:AE
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584EB2B1B48DEB57DD2464156080
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f2695b63-b118-39e4-8015-114589695a4c.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     2516
IP address blocks:        23.226.37.0/24 maxlen: 24
                          23.226.45.0/24 maxlen: 24
                          23.226.222.0/24 maxlen: 24
                          23.239.164.0/24 maxlen: 24
                          23.239.166.0/24 maxlen: 24
                          107.155.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:b4:8d:eb:57:dd:24:64:15:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=834e1db0-ca27-4f2c-b195-358240774c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:aa:68:89:46:20:47:08:8f:6a:d5:62:ae:
                    d8:98:21:89:14:2a:ae:dd:b6:d9:cc:2b:63:20:39:
                    cf:61:ff:08:22:5f:cb:4f:f9:8d:e3:85:13:98:62:
                    6b:60:53:34:89:94:3c:65:f8:af:5d:b1:c6:0c:00:
                    00:2b:6a:7b:2f:8b:20:da:f1:e3:83:88:04:8c:0e:
                    d2:31:23:c8:6d:ed:70:6c:01:41:bd:71:e9:c9:0e:
                    76:b3:50:21:c8:39:8a:16:99:7e:52:ef:93:b0:98:
                    ce:98:e0:0d:19:d9:c1:aa:01:a1:bf:c5:e7:d7:3c:
                    53:87:62:73:3c:14:65:85:bd:a1:c8:4b:6d:47:5c:
                    92:4a:b1:87:92:98:40:9f:c7:63:d0:3f:bf:bc:98:
                    01:1c:de:c5:41:ad:14:5d:d8:cc:a5:61:4f:8b:9f:
                    9d:0f:50:63:64:6c:f2:00:40:6a:15:12:60:9a:66:
                    8f:04:03:ac:50:cf:86:ed:aa:ae:05:2e:f1:d9:aa:
                    bb:e7:66:5b:87:ef:70:16:d7:92:b0:99:1f:71:b0:
                    e4:34:65:de:b0:9f:5e:12:43:32:2f:00:ec:6c:4e:
                    ba:ff:c2:b4:24:c8:3d:af:14:11:69:26:01:98:72:
                    09:43:8b:0c:2b:8a:45:36:70:36:95:91:31:56:f1:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:85:D5:E2:02:4D:21:3D:18:0A:34:3D:D9:84:B8:B1:8C:63:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f2695b63-b118-39e4-8015-114589695a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.37.0/24
                  23.226.45.0/24
                  23.226.222.0/24
                  23.239.164.0/24
                  23.239.166.0/24
                  107.155.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3d:38:14:25:87:dd:e6:97:0c:16:56:67:02:d1:7f:84:f5:
         48:71:90:96:0b:93:28:90:c3:06:e0:84:13:1d:ac:a7:9e:80:
         11:20:5c:80:37:25:08:1c:b4:11:c1:18:40:af:18:3e:14:65:
         5d:fd:ae:e6:79:95:a7:a4:da:f3:71:89:a1:5a:19:52:95:bc:
         2e:f4:45:f7:65:f5:6c:b2:37:6c:0b:75:6e:f9:66:23:9c:d0:
         a6:63:31:fa:fb:72:d0:95:8f:80:fc:b0:37:49:c4:73:46:e8:
         1d:f5:02:2e:98:49:95:79:8f:8b:6d:79:c4:32:32:76:dd:9d:
         d5:7f:4a:68:1c:6c:b9:9b:52:32:4a:66:b4:af:79:4e:0b:11:
         87:d8:bf:8c:65:65:9a:69:5e:9e:84:a9:52:54:d5:ba:61:da:
         d4:b4:c8:32:e5:97:84:43:e4:25:84:a5:52:7c:3f:65:f0:4b:
         b8:cc:e8:4c:94:bc:a6:6a:7e:bb:48:43:f4:19:b9:e7:5c:36:
         d8:5f:1d:68:a4:60:5d:88:76:15:a1:49:ec:cf:15:ca:d1:55:
         4a:0d:14:8a:70:56:95:41:d1:d1:f2:87:eb:01:75:2e:19:34:
         21:26:73:27:89:cd:2a:9d:0d:d6:38:00:c7:ff:5d:fb:92:04:
         44:f8:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:43:06 2026 by rpki-client