Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/bc11f7d0-02b0-38d3-b9ed-0bc35107ae1f.roa
File:                     bc11f7d0-02b0-38d3-b9ed-0bc35107ae1f.roa (raw, json)
Hash identifier:          PRaBi67X+N2ae+ojj8QEUixZ9gf3RFdMg1vyPSa7LUc=
Subject key identifier:   8F:97:98:ED:96:C6:09:B7:7E:CF:63:48:68:8B:C8:07:D6:CD:62:36
Certificate issuer:       /CN=13880c00-8cd5-4204-95fb-7c54c6eab2d9
Certificate serial:       010D0C9F4328584E4F1F3ACA2302C73B66757E80
Authority key identifier: FD:81:75:48:C6:60:C7:EE:C5:71:1D:D2:E0:52:4F:13:F0:CA:50:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/bc11f7d0-02b0-38d3-b9ed-0bc35107ae1f.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     18783
IP address blocks:        23.130.172.0/24 maxlen: 24
                          142.248.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/13880c00-8cd5-4204-95fb-7c54c6eab2d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/13880c00-8cd5-4204-95fb-7c54c6eab2d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3a:ca:23:02:c7:3b:66:75:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13880c00-8cd5-4204-95fb-7c54c6eab2d9
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=1e0608de-d056-43c3-b303-5ee5aa0bbd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:14:db:1f:9d:17:3f:26:2b:09:f8:04:01:ca:
                    10:29:82:c9:e7:5f:b0:0e:bb:7f:e1:ce:21:81:55:
                    dd:fd:28:a7:32:3f:85:04:d5:0d:89:fa:dc:ae:e6:
                    8b:51:16:90:89:0a:9e:a5:9e:84:aa:8a:ad:11:21:
                    26:e0:27:d7:d6:c3:62:c8:0b:ba:d7:f4:43:55:fc:
                    a0:6c:95:61:e6:63:21:8d:3a:3c:61:2a:7f:67:f4:
                    c9:f7:01:6a:cf:4e:4c:12:82:ec:ba:5f:d9:90:61:
                    e3:a0:00:80:06:60:98:6f:2c:ac:da:9c:a0:b8:30:
                    65:c6:5f:af:01:b4:93:94:53:a2:b8:6a:8a:b1:80:
                    a1:4b:e0:0b:f5:e8:f7:c8:78:77:c3:5b:18:03:ee:
                    b1:25:82:e3:f1:13:7e:3f:e5:a7:0f:25:fe:6c:67:
                    1e:e2:b1:0c:f0:d2:a1:97:5b:a7:d4:05:aa:8d:38:
                    c5:bb:7d:1d:0a:3c:ce:8f:58:4a:f8:3e:47:ff:3f:
                    01:f1:cc:0f:f1:0d:f3:69:86:53:04:84:5f:f7:80:
                    16:5c:87:e7:3c:43:f4:51:6c:55:0c:3f:1f:3b:53:
                    de:ed:85:65:c2:c5:4a:e9:10:39:98:11:62:6a:7b:
                    2f:a1:da:9a:06:a5:e0:3d:38:df:ae:a0:bd:bd:e2:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:97:98:ED:96:C6:09:B7:7E:CF:63:48:68:8B:C8:07:D6:CD:62:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/bc11f7d0-02b0-38d3-b9ed-0bc35107ae1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9/13880c00-8cd5-4204-95fb-7c54c6eab2d9.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:75:48:C6:60:C7:EE:C5:71:1D:D2:E0:52:4F:13:F0:CA:50:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13880c00-8cd5-4204-95fb-7c54c6eab2d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.172.0/24
                  142.248.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d0:75:61:68:6b:7f:49:af:8f:fb:1b:9b:1b:ed:9d:e6:f2:
         56:bc:d5:74:99:84:6c:78:13:2c:37:3b:7b:a1:8c:b6:93:41:
         f0:e3:6f:04:e9:80:30:25:35:70:23:3c:86:e5:d4:7e:8b:99:
         82:bd:94:75:2c:ed:e8:ed:07:75:72:cf:7f:83:ab:02:13:29:
         c2:b9:30:e5:e2:08:27:47:e4:8d:82:ac:72:e4:cb:e7:cb:3f:
         6d:18:fc:22:9e:e8:70:d1:31:cd:93:fd:8e:24:af:b0:5a:06:
         dc:19:87:31:1a:bc:94:e5:15:af:57:bd:75:01:7c:ac:d5:58:
         92:47:6b:5f:58:34:f5:66:9b:b9:a4:8b:ad:86:bc:23:16:cc:
         7d:74:7c:9d:cb:6e:60:b5:2f:99:55:e8:75:54:50:a6:ac:fb:
         f7:06:48:d8:05:f9:a0:88:9b:26:2a:43:1d:81:80:aa:05:f8:
         27:e0:c0:5e:23:ab:18:44:ab:82:a3:bf:9a:ca:23:c7:b0:50:
         86:d8:28:a8:79:b7:fb:62:43:43:02:03:a8:82:9d:6f:7d:80:
         cd:4e:ea:e6:df:34:06:41:79:a2:3b:73:b3:fe:6b:c2:38:9b:
         67:2e:2e:8f:35:bf:74:d1:67:4f:39:84:d0:b3:9d:d6:db:6a:
         99:6b:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:05:50 2026 by rpki-client