Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/94ea91c5-ac80-3547-b476-b01ece5d19dc.roa
File:                     94ea91c5-ac80-3547-b476-b01ece5d19dc.roa (raw, json)
Hash identifier:          MDV2SBzDUgjsVBW3jgxBRELP+LGctwG/jkaW3DZJSEc=
Subject key identifier:   7B:A4:11:1D:78:5D:41:FE:5C:E3:F6:57:81:DF:DC:55:D6:21:25:99
Certificate issuer:       /CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
Certificate serial:       010D0C9F4328584E5FDF744DEE6C916E5DA94A80
Authority key identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/94ea91c5-ac80-3547-b476-b01ece5d19dc.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     398862
IP address blocks:        23.135.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:74:4d:ee:6c:91:6e:5d:a9:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=608d388b-d17b-450e-8946-af2c430512f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:92:45:90:ec:fa:16:85:c7:78:90:44:2c:
                    94:17:17:95:33:52:a5:62:d6:38:10:dd:54:e8:0a:
                    5b:a8:9a:d1:50:24:0f:0a:12:06:d5:89:0a:fd:84:
                    63:14:bd:95:67:2d:83:69:f5:53:2c:c0:3e:c7:f7:
                    1a:f5:60:a2:e4:f3:fc:d1:9a:0c:f8:d2:33:7a:bb:
                    07:3a:05:1d:3d:02:18:17:16:21:59:61:0f:e9:f3:
                    7c:e3:c4:c1:99:66:24:0f:93:08:fe:df:64:32:9c:
                    5b:51:0a:9a:59:9a:f0:9b:27:dd:b2:c1:1e:24:22:
                    0f:4a:b4:77:31:83:44:70:a6:a3:0a:41:85:a5:ab:
                    7a:e2:7b:97:2a:cf:d0:fc:36:6a:42:be:64:a8:59:
                    bd:a6:6f:00:7f:db:c4:67:a6:57:60:f7:19:d4:32:
                    c3:2c:c3:63:2e:19:21:7b:ce:18:d2:66:e1:a3:89:
                    9f:1b:6d:c3:a1:60:8e:53:d6:36:90:05:0c:9f:30:
                    f2:35:34:c4:40:84:8d:02:ac:f7:f9:ae:2d:de:52:
                    aa:7f:60:dd:a7:80:48:da:20:8b:3e:8a:d7:85:f3:
                    cb:8f:95:75:1b:bb:c8:01:a6:08:3b:89:5d:b6:45:
                    b0:33:4a:26:ec:b9:5d:c5:53:ef:1d:55:e7:c2:50:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:11:1D:78:5D:41:FE:5C:E3:F6:57:81:DF:DC:55:D6:21:25:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/94ea91c5-ac80-3547-b476-b01ece5d19dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl

            X509v3 Authority Key Identifier:
                keyid:C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:8c:b1:56:df:ee:af:87:8c:a2:4e:5b:7e:22:c1:51:5b:
         30:b9:04:57:f7:a9:10:2d:63:1c:8b:1e:e3:36:2d:f2:3f:a7:
         94:ad:90:cb:81:03:fd:25:30:56:55:dc:5e:c5:df:c5:5f:80:
         9a:a8:63:19:35:cb:fa:8a:82:0f:bc:f4:bc:41:4f:4b:b2:19:
         f9:54:0c:19:79:bf:87:16:04:c0:9b:71:aa:f8:24:76:c7:4c:
         80:16:0f:94:38:6e:0e:0f:81:92:2b:38:fd:99:47:b0:7e:b1:
         93:2b:14:0d:8c:00:8d:8c:3a:7e:fe:d5:0e:dd:64:68:5d:41:
         91:f4:44:35:b9:78:2d:77:03:02:7c:ca:9d:c6:44:e8:67:a5:
         bb:fe:f7:2d:99:0a:d2:73:de:5f:d6:ab:cf:23:50:6d:d3:44:
         69:99:91:1f:be:f8:49:73:d5:95:3c:d4:02:eb:95:63:c7:c6:
         1c:9d:11:80:04:4c:e4:f5:96:30:ba:16:7b:f5:d0:a3:86:5e:
         db:8b:18:83:99:fb:d2:2c:ad:93:cc:dd:17:4c:6b:7b:90:48:
         81:06:ae:de:41:c7:3f:bf:24:fa:12:06:7b:03:74:5c:a3:94:
         f9:9e:3e:a9:84:de:70:f2:69:f2:9d:7a:c4:4c:8a:d9:08:2a:
         6f:59:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:03:25 2026 by rpki-client