Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa
File:                     7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa (raw, json)
Hash identifier:          O3i/5RaTDJM4eJJ/o2OLBqPkQgpm3iBBJlMfqfvbh94=
Subject key identifier:   FA:4F:2F:53:BE:F1:72:16:A8:1C:E5:12:93:AD:A2:EF:80:B3:57:9D
Certificate issuer:       /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f
Certificate serial:       010D0C9F4328584D773A6D17FCEDCC5AD8FE6A00
Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     401731
IP address blocks:        23.139.60.0/24 maxlen: 24
                          23.139.61.0/24 maxlen: 24
                          64.32.50.0/24 maxlen: 24
                          2620:d7:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:6d:17:fc:ed:cc:5a:d8:fe:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=971ae083-b707-4908-aa05-15a72a5abb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:08:b6:2a:05:f9:e5:2c:47:bb:55:df:ea:
                    22:a0:62:b1:e2:f4:36:f7:cc:4c:aa:f1:e3:23:e4:
                    66:d4:fa:3d:ea:f6:6a:3c:a6:ef:72:90:38:40:cc:
                    f6:f3:e7:98:c4:15:00:ab:19:5b:d5:11:59:30:2f:
                    83:93:9b:08:6f:2e:6f:78:7f:ee:ab:9a:3b:6b:84:
                    d5:cb:41:50:46:92:ce:7c:3e:1f:21:30:12:ef:ab:
                    b6:df:80:60:2e:df:56:c9:0e:64:f9:36:60:f1:52:
                    9e:28:13:8b:8d:12:58:ea:95:93:b8:50:3c:93:81:
                    44:55:f9:92:31:58:96:c1:c4:36:3e:58:0f:c4:d0:
                    80:89:11:d2:96:2b:39:ff:7e:9b:31:16:95:e2:c6:
                    d7:3b:a9:fa:fc:06:2b:35:57:d6:f0:c5:f7:1e:ae:
                    67:45:43:35:d5:9c:94:17:6f:25:57:c2:ed:f3:83:
                    4e:7e:17:5d:c3:b2:fb:59:e4:16:78:8a:c9:f5:84:
                    47:11:68:55:39:d5:aa:e2:10:07:d6:68:e0:1b:7c:
                    24:ae:6e:37:da:17:26:2d:76:d4:80:b4:e2:59:f5:
                    44:2c:11:fb:0a:ee:e9:c9:f7:3d:f3:4f:58:c0:b1:
                    c4:a8:7d:b3:37:98:1b:4e:2c:48:3f:10:64:5f:5a:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4F:2F:53:BE:F1:72:16:A8:1C:E5:12:93:AD:A2:EF:80:B3:57:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl

            X509v3 Authority Key Identifier:
                keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.60.0/23
                  64.32.50.0/24
                IPv6:
                  2620:d7:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:11:14:88:6c:26:16:b7:ed:13:14:0f:47:d4:c4:63:a9:
         31:01:39:5c:b0:83:78:b5:75:d1:6d:1f:39:f8:13:6e:7a:c3:
         74:77:de:75:11:76:8d:25:82:74:35:8a:24:06:5c:93:c8:74:
         09:ff:59:0d:96:10:b1:23:0d:e9:fd:42:8a:bf:70:ad:2d:40:
         57:58:ec:a8:39:9e:b7:b5:51:13:6d:1a:2d:41:66:fc:12:0f:
         e5:2a:af:13:5c:2f:5b:71:4c:16:14:4c:98:d2:c1:77:68:eb:
         de:80:02:41:bd:2f:26:ca:ac:d0:6b:3e:87:5d:2a:f2:dd:b7:
         36:97:d4:24:ea:39:04:80:73:a6:bd:78:eb:e6:6c:3e:0b:b1:
         67:a7:60:a4:d0:7f:c8:8e:fe:a2:91:89:06:42:19:ae:17:ce:
         6c:de:ea:bd:1c:ab:4b:52:a0:89:c0:0f:9b:35:3e:83:48:46:
         c5:f8:64:28:69:b3:3c:ce:c2:a0:bf:d7:8e:f1:3f:b8:c6:a6:
         2e:0a:d7:2d:8b:d5:53:ed:49:f4:05:55:c9:37:70:ad:9e:69:
         39:bc:55:51:06:c6:c5:12:6b:52:7a:27:d3:f7:8c:f3:49:2c:
         10:a9:d4:d7:27:82:e2:aa:af:e9:d8:a3:a9:45:7e:17:06:bb:
         a9:45:6d:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 15 16:12:03 2026 by rpki-client