Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa
File:                     97da6b9d-b639-35c4-87be-d3b486d7c07b.roa (raw, json)
Hash identifier:          zuB4rlKlOAetw/mnbHue1qKA/BpsTq7lk2EmyJmjXto=
Subject key identifier:   86:58:12:28:87:9A:D8:FE:8C:85:77:4F:F8:CC:09:8E:4E:6E:8A:49
Certificate issuer:       /CN=a54e265f-d361-4245-843e-1e7cf61c9644
Certificate serial:       010D0C9F4328584EA2DFC91CA024F93B53400600
Authority key identifier: CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     401580
IP address blocks:        23.132.36.0/24 maxlen: 24
                          2602:f740::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c9:1c:a0:24:f9:3b:53:40:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a54e265f-d361-4245-843e-1e7cf61c9644
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=9f88887f-f189-4603-baa7-6704f0113464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e5:8d:26:e9:1d:9c:50:e4:5c:df:72:3b:b9:
                    2e:7f:f1:92:df:1c:e1:ad:77:75:4a:b6:fa:94:22:
                    06:cf:63:78:0b:6a:9d:f6:d5:b1:34:ba:a7:6c:a9:
                    83:a9:ba:4f:5b:2d:46:fd:b8:aa:ca:42:af:fb:23:
                    5b:3b:2f:73:58:54:6e:c6:a0:74:12:45:50:4d:4e:
                    91:e2:d0:4c:d0:fb:62:93:3b:0d:2e:01:be:30:fd:
                    2c:e3:4a:e6:bc:d3:e2:4f:f2:62:19:af:b8:9f:b4:
                    b5:ef:f7:1f:65:94:7f:52:05:38:1d:e8:0f:7a:07:
                    6b:2d:05:1d:51:3b:2c:75:9d:01:05:b0:d1:1b:42:
                    bf:3b:b9:67:4c:e3:e5:7a:c2:63:52:13:af:56:e1:
                    10:a5:79:63:94:dc:8f:46:90:f3:e6:9b:d5:35:20:
                    10:2a:dd:55:4a:05:bf:19:ef:f0:e9:8d:cc:e8:e2:
                    5a:61:33:d9:f9:92:28:1f:4b:ce:cc:d6:1e:ce:51:
                    f0:e5:ab:0d:39:0b:8b:f5:11:45:f4:70:a7:38:cd:
                    f7:76:6d:11:8f:3c:4f:1a:63:b2:eb:33:80:8c:35:
                    f3:bc:49:96:a6:e9:73:f2:82:03:68:ea:f9:30:14:
                    e2:24:b2:d3:b1:fa:5c:6b:a7:48:c3:40:e7:ef:3f:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:58:12:28:87:9A:D8:FE:8C:85:77:4F:F8:CC:09:8E:4E:6E:8A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl

            X509v3 Authority Key Identifier:
                keyid:CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.36.0/24
                IPv6:
                  2602:f740::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:71:46:0d:66:86:01:7c:15:4a:bc:b9:c7:b4:d5:0f:a9:4c:
         68:b5:e0:68:99:a9:28:f0:65:fc:d5:06:26:cb:2d:44:52:ee:
         3a:62:ee:5c:f6:1d:fc:59:fd:33:d9:3c:85:f8:f5:aa:ae:57:
         3a:61:1e:5c:1e:d3:4e:14:cd:ae:f9:8f:39:7b:59:b9:2d:19:
         24:22:32:04:1e:ab:20:af:b9:0a:6b:1c:11:2d:07:75:82:c2:
         a8:a8:d5:0b:0d:d5:e4:25:70:c5:2e:db:41:50:18:8b:5b:1f:
         90:5b:8c:09:8e:70:6f:e5:9c:32:cd:e4:36:70:9d:eb:36:ff:
         90:00:20:6d:41:99:31:c9:b7:32:99:96:0c:06:6b:38:60:85:
         2b:2e:0a:7c:54:28:14:63:8f:58:1e:f3:11:66:6d:00:65:f4:
         b5:54:de:d4:9a:02:30:43:fc:85:99:95:78:cb:ba:22:bf:ea:
         88:dd:51:c7:61:ed:06:ff:b6:08:e7:cc:dc:01:8b:5c:67:78:
         3f:b5:78:e9:39:33:20:f0:84:0b:71:78:af:cb:65:66:14:93:
         22:a9:78:9c:ae:9e:9e:ab:58:7c:0a:40:b1:d8:36:63:3f:f4:
         9a:80:dd:1e:7d:f2:52:0f:47:37:1d:6a:41:63:27:ea:63:94:
         79:57:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:23:27 2026 by rpki-client