Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/74e2a30e-7aaa-39e0-850a-24c3d00054a7.roa
File:                     74e2a30e-7aaa-39e0-850a-24c3d00054a7.roa (raw, json)
Hash identifier:          HZiPUGq2XnEJNA5bBSnXXr6Sn4M0DPBMXudx0aABak4=
Subject key identifier:   78:94:05:09:F0:ED:A3:4F:E3:3D:5D:B1:A2:35:9F:72:BD:7A:FB:73
Certificate issuer:       /CN=6dc946cf-a3d1-4e7f-9e58-7052b2deac6b
Certificate serial:       010D0C9F4328584D300A50E98259D2E5F09E37A0
Authority key identifier: 3A:7D:6E:94:22:BE:7D:5F:01:25:C2:7C:EA:76:02:93:AF:E6:62:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/74e2a30e-7aaa-39e0-850a-24c3d00054a7.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     397911
IP address blocks:        23.144.144.0/24 maxlen: 24
                          23.164.16.0/24 maxlen: 24
                          23.164.17.0/24 maxlen: 24
                          104.160.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:50:e9:82:59:d2:e5:f0:9e:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc946cf-a3d1-4e7f-9e58-7052b2deac6b
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=50c08e12-1e93-44da-9129-7d32fc7b43c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:83:f8:ca:73:42:d5:67:32:6a:a5:3e:e0:
                    49:e3:5c:fa:03:b2:89:dd:9a:d6:b7:95:be:23:f1:
                    eb:d1:af:d6:b8:58:89:c6:3e:83:f6:3b:58:43:c8:
                    a2:ec:7c:09:f5:a1:b4:73:ae:4b:2b:7a:f0:75:73:
                    0d:cc:ae:92:5b:27:d6:29:82:82:f5:86:03:6b:63:
                    50:d4:04:de:93:4d:49:c4:2b:08:c5:41:47:45:28:
                    53:7c:b7:0e:62:2a:de:12:23:b7:0f:f6:db:49:49:
                    70:60:db:29:79:2d:67:0b:f8:5c:e5:1a:a7:52:8d:
                    ee:aa:ca:59:45:0f:00:2e:84:d0:0c:83:ef:eb:07:
                    bd:60:7d:2f:b1:a0:6c:f9:2b:0f:fd:5e:59:2f:c2:
                    e7:bf:18:c0:29:0a:37:63:83:62:60:36:fb:ff:cc:
                    ff:6b:4a:e2:53:84:32:e8:fc:1b:13:86:98:f0:91:
                    f5:f0:c0:17:40:34:db:50:c1:32:01:8d:0d:d1:bd:
                    a9:64:f6:fd:29:35:f0:12:4e:d7:f5:ac:8d:bf:7c:
                    9f:54:ce:df:db:68:3e:d3:4a:de:0d:c9:34:51:9f:
                    e2:8d:b5:47:b3:dd:e9:16:08:69:bf:e8:6e:11:7e:
                    df:34:16:28:25:6f:60:19:60:2f:8b:f0:76:1e:aa:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:05:09:F0:ED:A3:4F:E3:3D:5D:B1:A2:35:9F:72:BD:7A:FB:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/74e2a30e-7aaa-39e0-850a-24c3d00054a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.crl

            X509v3 Authority Key Identifier:
                keyid:3A:7D:6E:94:22:BE:7D:5F:01:25:C2:7C:EA:76:02:93:AF:E6:62:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dc946cf-a3d1-4e7f-9e58-7052b2deac6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.144.0/24
                  23.164.16.0/23
                  104.160.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ff:1d:78:11:d8:d2:fe:1f:70:2f:64:6b:ad:ce:84:55:51:
         77:93:9a:3b:5a:8b:71:00:c2:9d:72:56:5e:3c:92:16:e7:25:
         01:ce:76:98:60:66:0f:58:d4:0a:ed:8e:0f:fc:10:4b:98:3f:
         23:37:3a:ac:36:18:7b:4e:75:6d:e1:d4:d1:ff:38:d3:df:e6:
         55:95:48:fc:70:82:a3:eb:d7:4f:c2:d3:06:cf:83:55:3d:93:
         64:c6:1a:f2:35:89:8c:5a:1d:11:07:e0:17:5d:bf:a2:a9:a0:
         dc:a3:e0:c1:ad:43:0a:13:ca:df:76:9e:69:78:de:93:58:f4:
         2d:ac:07:bc:87:cf:8c:5b:94:ba:50:b0:7b:f4:7c:83:9c:16:
         45:c6:bc:ed:0a:62:bf:81:c2:08:c2:51:31:0b:95:64:4c:63:
         4b:cd:23:d1:a6:d2:7c:f8:f8:11:f0:7b:3c:7d:bd:4a:ab:d5:
         30:6a:10:4e:a1:6e:88:46:e0:ad:d9:2f:b9:1d:27:60:b4:39:
         ff:d0:b9:73:ab:1d:b8:24:a5:40:5d:3e:38:fc:c4:3e:33:c1:
         28:54:03:74:41:b4:11:79:c7:4e:a9:f9:b8:b6:6a:95:f7:69:
         5a:dc:cf:47:b8:a5:aa:a1:eb:2a:65:ac:f5:aa:0c:15:40:72:
         27:2a:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:57:08 2026 by rpki-client