Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa
File:                     ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa (raw, json)
Hash identifier:          dBadnjPZomeQTebAV4wI+etrm2e4UThiSrTOpFoKLUQ=
Subject key identifier:   52:AF:C3:59:71:16:D2:CF:FF:B3:31:2A:7C:68:31:BB:04:AD:0F:0B
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F4328584EA7927F69D407311C049741C0
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30114
IP address blocks:        23.146.88.0/24 maxlen: 24
                          2602:fab0:20::/44 maxlen: 48
                          2602:fab0:30::/44 maxlen: 48
                          2602:fab0:40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:7f:69:d4:07:31:1c:04:97:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c6cb9da1-33fc-411c-a92c-29ce5c966f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:ee:44:90:5d:ac:3e:cc:a7:d8:30:25:6c:
                    79:11:74:ae:ee:13:ea:b9:99:03:b0:65:01:bc:62:
                    5c:e8:bc:86:48:6b:c9:6a:55:94:53:d1:b8:31:c0:
                    e7:7a:55:78:cb:4c:11:30:a5:ca:03:d7:76:2f:41:
                    93:3b:3f:c7:6f:bc:7f:1b:a7:9a:d1:bf:8a:dc:8f:
                    82:f3:91:86:46:4f:3e:9f:b0:4a:80:08:3c:ca:88:
                    17:18:8c:a6:eb:a3:56:72:ca:d4:2a:83:90:1f:67:
                    a0:77:c0:3f:e2:1e:a7:70:9b:d2:ae:43:d5:9f:54:
                    d2:86:fe:24:4c:f8:ce:a6:be:66:8e:ae:3d:9c:36:
                    e9:16:13:26:88:e3:ed:f6:d4:f0:d2:fe:fa:ee:93:
                    2e:0a:7c:b3:bb:82:9e:6b:cd:54:82:69:5c:24:7d:
                    66:07:cb:d7:1f:2f:53:6d:2c:96:e6:f1:40:2d:cb:
                    ae:6d:92:21:c0:04:6a:6f:0e:4e:dc:c4:44:a2:01:
                    0d:05:e1:64:9e:32:9a:97:1d:91:d4:10:4b:3f:7b:
                    99:fa:10:e2:08:ba:83:9e:7b:72:0f:dc:dc:a6:78:
                    08:f6:00:d3:c7:19:f9:ab:fb:82:89:75:64:81:c4:
                    03:74:00:47:ef:c5:e4:8a:c3:91:84:64:15:32:4c:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AF:C3:59:71:16:D2:CF:FF:B3:31:2A:7C:68:31:BB:04:AD:0F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.88.0/24
                IPv6:
                  2602:fab0:20::-2602:fab0:4f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:d6:40:7b:94:a2:66:a5:9b:49:e9:b4:f1:38:ac:ce:09:
         27:b7:c7:82:c4:18:9c:73:43:29:c0:ed:bd:dd:3a:9d:4c:b3:
         cd:27:5a:41:c3:ed:98:48:0e:df:13:70:c8:01:7c:36:ed:37:
         44:82:ef:32:f2:6e:41:9a:b0:8a:5e:8c:a6:64:88:c7:f7:84:
         13:bf:ca:c4:88:2a:62:de:52:8d:c6:2e:9d:92:a4:87:95:98:
         1f:4b:ae:e4:ad:d1:ca:4c:7f:0a:61:b2:80:c1:88:24:04:52:
         17:79:d6:28:68:8a:ad:4a:f1:f5:ef:53:8d:1d:bd:94:73:ff:
         74:79:5f:74:05:9f:4b:ed:a8:28:38:ee:b4:3a:9c:9e:2a:09:
         2a:71:bb:d0:1e:a4:13:c7:5a:ac:8c:8f:29:dc:ba:7b:b8:77:
         3f:0f:28:3f:64:cd:45:17:7d:a6:a7:75:94:6b:70:18:fa:4f:
         d1:b6:c9:ad:01:1e:b0:14:9b:b5:67:ad:90:6d:7b:8e:5a:51:
         4d:28:8c:6a:7d:da:9c:f1:85:c0:6f:32:c7:a1:63:98:59:dd:
         09:cd:66:5c:3b:e8:2f:bb:e3:e2:24:56:72:5a:21:a8:94:36:
         89:5e:7d:68:dd:41:2b:c9:95:ed:66:c5:23:23:29:75:f7:de:
         19:84:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:59 2026 by rpki-client