Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa
File:                     7a124059-8167-385d-841b-71708d4474a3.roa (raw, json)
Hash identifier:          VtUWhheWgmRVVpY4g8sq19mVYFzwQ5LcOJBY/T3D6vc=
Subject key identifier:   D2:9A:C2:A2:BB:40:C8:84:FB:1D:FC:4A:2A:AE:A2:65:A3:FE:B8:A2
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F4328584EA79A33310E7666CE6C275D34
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        23.134.216.0/24 maxlen: 24
                          128.254.185.0/24 maxlen: 24
                          128.254.186.0/24 maxlen: 24
                          128.254.187.0/24 maxlen: 24
                          2602:fbca::/36 maxlen: 36
                          2602:fbd0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:33:31:0e:76:66:ce:6c:27:5d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5e15d4d8-e6e2-49cf-bc06-5513d015df4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:d0:8a:19:2b:4e:cf:88:33:d5:b6:00:3b:
                    43:42:3e:3d:9d:78:7b:5a:1d:b3:ba:96:d3:d9:61:
                    be:64:b6:3b:6f:0c:a5:46:b3:9e:62:5e:6e:be:c9:
                    6e:4d:fc:0f:81:66:ba:32:94:29:08:76:d6:af:07:
                    a8:4f:16:6e:1d:b3:d9:16:36:97:06:5d:a8:c8:34:
                    8c:4c:5d:1f:4c:8c:2f:f4:eb:9e:84:fb:0b:af:e0:
                    96:29:8d:4e:be:dc:6e:dc:41:ec:26:c3:ee:4f:cb:
                    c7:3d:21:34:7c:9f:93:db:bf:2b:90:47:34:ea:11:
                    32:e3:22:7e:8c:ca:75:28:3e:cf:87:d6:b1:b4:8f:
                    c3:0d:56:e3:80:73:82:90:e8:5b:ab:af:65:61:1b:
                    4f:10:38:36:44:da:e7:0c:cb:6e:4a:d0:35:f8:ef:
                    8e:fb:4c:28:62:a5:82:6b:9d:0f:6e:82:b3:64:e6:
                    f2:85:e9:c8:36:2d:67:9d:b3:13:bf:e0:ec:59:ab:
                    39:36:ae:b8:5f:ef:e6:50:74:64:b1:45:c9:ae:97:
                    16:55:e1:e8:8d:79:6f:60:3e:1b:2a:6e:2f:77:ae:
                    de:e8:27:a8:ca:4b:c1:63:c8:e5:af:f0:83:e1:aa:
                    1c:da:22:b0:4c:2a:94:89:e5:a7:bd:14:9f:ce:fd:
                    6a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9A:C2:A2:BB:40:C8:84:FB:1D:FC:4A:2A:AE:A2:65:A3:FE:B8:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.216.0/24
                  128.254.185.0-128.254.187.255
                IPv6:
                  2602:fbca::/36
                  2602:fbd0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:19:d2:15:e5:e3:39:5c:aa:75:77:0b:c1:d4:de:90:d9:8a:
         79:9f:da:ea:66:df:ad:fd:f9:08:9c:72:22:2e:f8:84:40:e2:
         bb:69:b7:e2:e0:a0:51:59:5f:92:01:9f:f0:cc:32:35:61:f1:
         42:29:60:87:bf:45:b3:7c:2b:8b:b1:e6:f3:b2:1b:5e:6d:ae:
         e9:ae:20:41:aa:0d:57:4c:f4:60:07:57:a6:0a:e6:7d:f1:a5:
         cb:65:9f:45:6c:46:e4:a9:13:2d:68:68:8c:22:ac:54:e7:fb:
         51:9c:e5:3e:cc:63:15:43:e9:2d:be:25:ca:ff:8b:d5:49:79:
         37:4d:24:1c:66:8e:f2:ba:43:c2:13:6c:ca:23:e1:fe:2b:17:
         74:e5:34:32:a9:86:8d:0c:57:d6:32:74:ce:8e:35:99:33:72:
         1f:2e:99:f9:49:cb:e3:bb:04:f1:1e:b6:d2:fe:23:74:37:7c:
         ca:46:e5:d3:88:6e:8b:16:ef:8e:93:ad:56:fa:45:08:97:84:
         84:fe:c6:02:6b:b2:fb:57:a6:37:8c:ae:24:f0:fd:da:1f:45:
         39:d2:ff:45:db:c0:04:e9:f3:1f:4d:5c:f4:0f:1f:40:a5:d2:
         3b:0d:1d:54:97:ed:18:e7:5f:87:25:d3:1d:d6:87:c2:51:64:
         89:7b:6f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:48:38 2026 by rpki-client