Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/568cec6e-9f00-3363-bce9-e472a78e32a3.roa
File:                     568cec6e-9f00-3363-bce9-e472a78e32a3.roa (raw, json)
Hash identifier:          /fWh9euRU3/bRf1+m6PKzothn0yL04LrtJyzffwB4nY=
Subject key identifier:   9C:58:3A:F1:D0:5A:91:32:98:88:A6:DF:6C:4A:32:DF:8F:58:E4:43
Certificate issuer:       /CN=e0dd35b2-9124-461e-adea-17906cb49705
Certificate serial:       010D0C9F4328584EAA520B9B05E5184D9D41B1C0
Authority key identifier: 42:59:56:81:9E:CB:EA:62:C6:17:E7:07:7A:5A:1E:3C:50:4C:EA:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/568cec6e-9f00-3363-bce9-e472a78e32a3.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     36741
IP address blocks:        23.157.32.0/24 maxlen: 24
                          131.143.156.0/22 maxlen: 24
                          192.86.81.0/24 maxlen: 24
                          2620:12e:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:52:0b:9b:05:e5:18:4d:9d:41:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dd35b2-9124-461e-adea-17906cb49705
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=4512bd59-db06-408d-9cf8-2771d7f8e4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:50:60:52:7a:22:88:d8:a0:ee:1d:a8:3f:
                    66:8c:1a:cf:92:43:34:cd:4e:88:65:2a:b1:03:04:
                    8c:a2:b0:0d:8f:2b:eb:aa:99:94:d6:cb:72:76:1c:
                    3c:64:8b:20:ad:ba:92:7d:ea:52:89:44:78:80:c1:
                    02:26:d9:13:99:da:fd:90:5b:2c:4c:ec:e0:26:fa:
                    ec:2c:8d:1d:f1:a6:c1:d0:99:87:99:1d:a8:28:30:
                    ab:f2:2a:28:00:04:64:87:36:f0:0e:03:01:7e:e5:
                    80:25:e5:4a:80:67:b0:ae:55:24:1b:8d:34:52:3b:
                    79:31:93:ff:19:36:1b:d2:9e:fc:94:66:8b:fd:b2:
                    f0:a6:b5:63:53:6c:1d:3f:77:c0:69:d8:a8:24:e2:
                    89:62:e0:8c:f8:a0:75:18:aa:db:2e:2d:87:c7:d9:
                    82:d9:83:a9:9a:b7:e5:de:ca:4d:e8:c5:c8:72:6c:
                    09:6d:34:62:00:05:fa:3b:c4:2c:88:23:44:26:8f:
                    9a:4b:1e:75:90:09:d9:b8:8b:93:2c:48:74:5e:2d:
                    5e:9d:85:07:d2:f3:31:41:9e:c1:1b:e5:d4:40:10:
                    04:99:b6:ae:a4:cd:df:a1:bb:3d:d2:71:af:fd:a3:
                    e6:dc:cb:76:fb:73:2e:37:4f:03:05:80:f4:97:94:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:58:3A:F1:D0:5A:91:32:98:88:A6:DF:6C:4A:32:DF:8F:58:E4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/568cec6e-9f00-3363-bce9-e472a78e32a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.crl

            X509v3 Authority Key Identifier:
                keyid:42:59:56:81:9E:CB:EA:62:C6:17:E7:07:7A:5A:1E:3C:50:4C:EA:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.32.0/24
                  131.143.156.0/22
                  192.86.81.0/24
                IPv6:
                  2620:12e:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:99:ea:dc:a0:b1:d7:7a:f7:af:d3:5e:6e:b1:3d:c9:ba:
         47:83:8b:d3:a6:a5:ef:2f:4b:a7:3b:c0:a8:ae:63:38:ec:88:
         d2:2f:d1:78:fc:2c:66:1c:e8:c1:bf:a8:1b:60:da:80:99:d2:
         24:37:da:bb:42:34:c0:44:29:cd:93:a9:55:c3:53:e8:e3:e3:
         41:e1:8f:c0:3e:31:70:ce:8c:77:57:44:72:d7:7c:4a:8c:9d:
         12:6b:b3:a1:bc:8a:b6:b3:a9:39:4b:2e:42:8d:92:2a:7c:d1:
         50:0c:f3:61:0d:e7:e5:e3:e7:c9:fc:fd:22:86:40:b0:38:50:
         aa:4f:d6:17:7d:6f:e7:f3:2b:57:ee:c1:c8:29:4b:63:5c:6f:
         8d:2d:be:26:cf:fa:36:97:c5:58:63:02:4c:1b:57:7f:d9:89:
         44:3a:b0:bb:24:7b:19:df:73:79:38:b2:fb:2f:2d:3a:2e:d3:
         98:88:fc:9b:fa:ad:e2:f7:a5:bd:80:ae:57:72:53:41:4c:eb:
         18:01:b8:97:7a:d0:17:96:22:43:a0:12:cd:2b:c2:2f:cb:17:
         df:5b:cd:e6:17:15:4e:a7:7b:35:ed:f7:00:2c:2a:64:58:19:
         b8:62:75:d5:33:73:c3:b8:a2:69:ec:a7:c1:bb:ff:d6:fe:05:
         86:d9:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:49 2026 by rpki-client