Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
File:                     d44ea506-3bb6-396c-9617-92bba4db10b9.roa (raw, json)
Hash identifier:          Cut6Rcg2+1BpQzfadePAzknToyQUwJNwo4eSzy03/b0=
Subject key identifier:   8D:D2:03:5A:5F:7B:46:B7:50:08:72:BC:A2:77:97:64:DC:79:7F:78
Certificate issuer:       /CN=46d43cee-39e6-4150-ae7b-94a20c139206
Certificate serial:       010D0C9F4328584E6B0A13B1337DF103FE0DCF00
Authority key identifier: 28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     394367
IP address blocks:        23.176.0.0/24 maxlen: 24
                          205.207.142.0/24 maxlen: 24
                          207.167.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:13:b1:33:7d:f1:03:fe:0d:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43cee-39e6-4150-ae7b-94a20c139206
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=5a75bd42-05c8-487e-a070-fbb472886bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:d6:d1:23:15:7f:5f:c8:86:b6:be:88:bb:
                    1b:98:03:4b:85:8c:6a:01:e5:13:dd:8f:8d:eb:a6:
                    a3:0c:2f:4f:23:41:dc:1a:04:90:19:f7:46:7c:e4:
                    d2:34:75:a9:86:ba:59:55:9a:e4:79:0b:4b:1d:e0:
                    f5:fa:ab:0e:c4:c4:9d:1a:6b:01:30:af:29:39:aa:
                    90:fc:c2:41:38:fe:98:70:6c:1a:df:d8:97:39:8b:
                    dc:ce:52:1a:9c:2c:f5:8c:4e:f6:5d:37:3c:49:46:
                    3c:70:9d:91:23:f0:89:9e:1f:04:31:27:19:1a:d4:
                    52:c5:9f:fe:71:cc:1e:43:6e:f8:52:9f:2e:87:e7:
                    e4:cd:ab:3b:9c:c6:c9:2d:e8:26:f0:9f:e9:c9:56:
                    6b:7c:cb:bc:47:3e:1a:f0:5d:df:d8:45:9c:90:22:
                    7a:5c:f6:02:6e:d9:0e:0d:6a:59:74:61:a9:3e:c2:
                    67:12:2d:cf:86:fb:84:10:cd:98:4c:9e:f7:cd:62:
                    a1:ea:a5:8e:45:cb:59:10:53:5f:f5:fb:0c:8b:4d:
                    1e:e0:87:98:4a:e6:c9:6d:71:55:85:c4:4b:02:3f:
                    f4:09:f2:56:5b:ae:f2:d4:f6:f1:54:c1:42:18:8c:
                    6f:a6:7b:29:c5:27:c5:2d:ad:a2:22:c6:31:fa:49:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D2:03:5A:5F:7B:46:B7:50:08:72:BC:A2:77:97:64:DC:79:7F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl

            X509v3 Authority Key Identifier:
                keyid:28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.0.0/24
                  205.207.142.0/24
                  207.167.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:a7:a3:bd:13:52:9c:48:d5:69:06:5f:d2:00:ce:0d:cc:
         41:0a:1b:e2:26:5e:5b:a6:2d:45:f6:fa:42:bb:ab:90:75:e3:
         85:c3:ef:d2:aa:98:1b:78:6b:56:f2:bc:37:7a:89:cf:52:3d:
         4f:3e:78:38:cb:19:7f:15:d4:98:9b:06:40:18:41:ad:a2:77:
         8e:71:60:6d:7e:7f:3b:8f:53:90:37:98:61:b5:37:f1:e7:2b:
         db:96:92:e5:1f:e6:a0:44:8a:cd:7d:93:9f:bc:33:95:b8:5d:
         4a:af:1f:92:df:1e:30:48:7c:af:00:66:7d:d2:75:ac:3b:43:
         cf:e6:61:c6:15:b4:d7:48:31:63:df:12:ec:01:6a:e4:40:56:
         87:52:2f:e0:55:2b:bf:05:cb:b2:08:c9:98:09:42:5a:bf:28:
         6d:54:0d:2f:04:44:a3:01:75:13:31:91:ca:43:08:37:7c:18:
         3e:2e:3e:a3:8a:15:06:6b:c0:47:62:30:b3:34:29:b6:55:b0:
         1c:16:cb:27:1e:c8:19:06:b3:a3:bd:b2:c5:ef:d6:82:7f:bd:
         35:75:a0:60:ee:85:a3:a5:fe:aa:c5:2c:8c:aa:1c:ad:81:b1:
         d2:50:fa:d1:cb:f4:a3:4c:c4:72:ab:34:18:77:54:10:45:8f:
         c0:71:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:10:33 2026 by rpki-client