Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa
File:                     7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa (raw, json)
Hash identifier:          SbgmZ7yrEka2EX65U9IOyNK4aFXJ2ZAJ8+hlsSAnn3A=
Subject key identifier:   EF:ED:55:0D:63:04:FE:4F:98:87:33:43:E5:5E:0B:E0:74:E1:C6:D3
Certificate issuer:       /CN=b85c4b41-e743-408d-bbcc-41aa5d4d01c1
Certificate serial:       010D0C9F4328584D5B4F9E8E875E245A42BB8F40
Authority key identifier: 39:9F:D3:90:48:6B:29:16:B3:1E:EC:75:69:82:4F:08:2B:13:CE:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     30162
IP address blocks:        23.149.24.0/24 maxlen: 24
                          23.170.208.0/24 maxlen: 24
                          23.170.209.0/24 maxlen: 24
                          64.250.96.0/20 maxlen: 24
                          208.87.120.0/21 maxlen: 24
                          2605:d780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:9e:8e:87:5e:24:5a:42:bb:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85c4b41-e743-408d-bbcc-41aa5d4d01c1
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=b1c53438-3fc1-4fcf-92e1-8c833dbb3b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:67:cc:e0:9c:55:e8:ed:42:09:c8:08:8c:
                    76:87:cb:46:8e:3e:93:df:a8:1b:19:cd:a1:0b:48:
                    5f:40:60:0e:51:50:fe:aa:96:70:69:07:3c:50:0e:
                    0a:3d:d9:82:f3:26:02:eb:4a:7a:e5:f2:58:4c:b5:
                    66:cc:e9:34:56:7a:d8:5b:c9:62:47:42:42:7e:be:
                    d5:91:bf:91:a4:92:6d:c8:b8:48:92:d5:19:db:9b:
                    1b:a4:0b:fa:c8:2f:52:ed:4a:be:de:27:0c:26:87:
                    bd:18:41:27:d2:f1:05:f1:f8:04:f7:87:36:07:a0:
                    e1:7d:d4:f0:72:bb:6d:bd:b2:bc:87:b5:cc:fd:de:
                    46:12:21:07:ea:2c:58:48:ee:e7:5e:58:be:45:5d:
                    e5:e8:e0:49:bc:0f:94:67:60:ce:9d:45:7f:3f:ba:
                    0b:b6:04:d1:b2:24:b3:32:20:52:d1:4c:e9:66:0c:
                    26:8c:6e:0c:ba:d4:6d:ad:d7:12:1f:29:ab:cc:25:
                    df:26:fe:59:82:17:d5:62:1e:24:84:b8:80:c3:78:
                    11:aa:23:73:c7:09:21:a9:fa:51:72:43:a0:7c:9a:
                    8b:7f:0d:97:cc:58:97:63:d7:94:63:2c:9f:e8:f3:
                    2f:fe:6f:62:11:95:f4:fd:46:b6:58:38:dc:41:1b:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:ED:55:0D:63:04:FE:4F:98:87:33:43:E5:5E:0B:E0:74:E1:C6:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.crl

            X509v3 Authority Key Identifier:
                keyid:39:9F:D3:90:48:6B:29:16:B3:1E:EC:75:69:82:4F:08:2B:13:CE:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.24.0/24
                  23.170.208.0/23
                  64.250.96.0/20
                  208.87.120.0/21
                IPv6:
                  2605:d780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:71:b2:fe:d8:9d:3a:df:6d:dc:2d:5e:45:87:22:cd:c5:
         c6:23:40:0e:a7:22:bd:8a:c4:62:b2:7d:db:f9:46:3e:99:14:
         18:98:c4:53:63:89:b2:0f:28:e9:ba:d5:1b:f3:7c:02:03:16:
         27:ca:21:9c:91:eb:da:8a:ec:db:30:97:da:e4:67:5d:72:e2:
         ff:76:f5:e0:8a:1b:7c:d7:e4:be:52:47:54:5c:f1:bd:03:a3:
         3c:77:89:70:0f:f8:87:2e:7b:e4:41:f0:c9:8a:3f:ba:a0:a8:
         69:17:38:19:63:90:da:e4:58:86:ff:ce:5a:ce:f1:4d:23:5a:
         27:eb:ce:a6:a5:a2:37:45:0a:f2:b5:a9:e8:d7:d3:ec:c5:88:
         f2:9c:f2:fb:ea:84:5a:43:a8:4b:6c:31:64:08:06:a3:40:06:
         79:cc:0d:01:d4:af:99:e6:d8:fc:87:a0:97:89:45:8b:f2:7a:
         54:74:2c:6c:3c:16:7f:a0:a5:c7:13:0a:c7:1d:60:c5:6b:50:
         8f:ee:13:f9:66:6c:88:8e:ef:ac:e6:92:e1:82:db:8a:86:1a:
         14:64:6f:3e:ba:34:8c:9f:c0:44:6f:dd:84:fa:f2:e0:a8:54:
         4a:8d:47:52:38:43:54:21:1e:15:4a:5c:5a:b1:5e:e9:12:72:
         88:80:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:17:48 2026 by rpki-client