Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/c3bdeb67-3e5a-3344-a860-8c24d0d6dd12.roa
File:                     c3bdeb67-3e5a-3344-a860-8c24d0d6dd12.roa (raw, json)
Hash identifier:          5DA7TmtbUZm+N1bWKgUmNnc5DTzbspKZhXUjcfzO/qA=
Subject key identifier:   F6:17:30:10:66:CB:00:C5:1B:44:C4:7D:72:B9:2E:25:AB:A9:8C:D8
Certificate issuer:       /CN=2e4c886d-0c38-40e5-98a3-021f2eb8f4c9
Certificate serial:       010D0C9F4328584E5D14A6E3242C2106A39EDB80
Authority key identifier: 0E:38:DB:F2:6C:EC:B7:FE:1E:2F:95:11:BC:46:2E:62:84:67:C3:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/c3bdeb67-3e5a-3344-a860-8c24d0d6dd12.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     21752
IP address blocks:        23.141.44.0/24 maxlen: 24
                          2602:f5f6::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a6:e3:24:2c:21:06:a3:9e:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4c886d-0c38-40e5-98a3-021f2eb8f4c9
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=87418025-03ac-470b-aae3-1b0f3b911195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:3e:5a:0f:df:70:30:d9:ef:a6:22:30:22:
                    f8:2c:47:d3:63:d2:c0:b6:89:c4:a6:c4:ac:66:d0:
                    d7:fa:d8:36:a9:e9:39:65:2d:3d:9e:5c:1a:79:8f:
                    6f:fc:8c:1e:20:8c:65:c6:69:96:e7:89:a6:5f:1f:
                    d4:7d:5f:fb:01:75:29:88:f1:ff:16:2d:1c:17:e5:
                    be:43:bb:e1:97:d2:c9:eb:f5:33:ad:56:96:5c:80:
                    80:bd:07:cf:69:b0:20:98:a3:b4:2f:90:4b:c6:20:
                    e0:76:25:33:f9:d9:48:fa:8e:a3:29:fb:e6:c1:fd:
                    89:c2:85:78:70:6f:66:1d:97:a2:1b:c3:5c:12:99:
                    c3:c1:70:f0:e9:0f:22:d5:cc:a8:b2:c5:f4:c2:27:
                    db:66:05:7f:05:ef:36:ed:b4:1c:11:be:8e:0d:72:
                    fa:d1:2c:39:15:d3:5e:35:15:f0:a7:61:36:a6:47:
                    96:45:8b:4c:7f:2d:31:4f:89:b4:fb:5f:06:fd:07:
                    e1:2d:b3:50:1c:36:57:90:3e:ca:ad:06:67:5b:9f:
                    21:a0:35:26:51:3d:b1:61:31:20:fa:8f:85:8a:87:
                    a7:6d:ef:e5:dc:4e:85:97:a9:28:a3:d2:d7:a3:f7:
                    df:1d:d2:fb:e3:90:28:39:d5:aa:d9:fa:3f:b4:ac:
                    38:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:17:30:10:66:CB:00:C5:1B:44:C4:7D:72:B9:2E:25:AB:A9:8C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/c3bdeb67-3e5a-3344-a860-8c24d0d6dd12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:38:DB:F2:6C:EC:B7:FE:1E:2F:95:11:BC:46:2E:62:84:67:C3:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.44.0/24
                IPv6:
                  2602:f5f6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:d4:2d:18:8b:ea:7b:17:81:b8:f3:00:64:4e:bd:d6:5f:
         c8:f1:5d:37:4c:b6:64:9b:06:6d:81:86:b6:5f:1e:8e:fe:4b:
         d3:26:e4:de:06:e4:c2:4e:67:df:ca:c7:62:de:88:83:80:29:
         9b:68:16:2a:d6:a0:59:8f:35:ac:11:49:06:06:e7:ab:f3:a4:
         b0:1e:e2:46:08:5e:c8:65:3a:41:66:09:32:aa:9e:74:ae:41:
         f5:c2:19:92:f4:cc:32:f1:b3:cc:53:2e:5a:ae:71:7b:f7:6d:
         5b:e7:16:ff:dc:9d:90:43:86:04:5f:22:b2:55:b1:8b:71:05:
         a3:b3:1c:b3:9d:93:14:a7:67:2a:81:9b:4d:74:a0:cc:32:cc:
         33:4c:d1:0e:bb:94:04:44:83:a4:91:7a:2a:49:76:cd:62:15:
         f1:ff:ea:12:2a:90:1f:13:03:3f:de:72:cb:e5:d5:85:4a:84:
         58:5b:97:81:83:bf:f6:1e:1f:90:e8:62:b4:80:a3:27:d5:30:
         b6:0c:fc:25:27:38:d2:51:26:ec:67:d2:3f:ba:b9:a5:e2:a4:
         6c:b2:8b:2b:ab:ac:06:ab:b9:7b:14:da:75:5e:75:5b:23:c1:
         b5:45:84:4d:85:be:7e:a9:45:e0:d4:e4:98:4b:40:f8:b5:e2:
         e4:c7:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:05:39 2026 by rpki-client