Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46/84624bfe-7236-3cd6-80e0-fad02f752cbf.roa
File:                     84624bfe-7236-3cd6-80e0-fad02f752cbf.roa (raw, json)
Hash identifier:          yzM4Op4ofwbQKw+zPABWyC/+gEkGbATkcFvjo2PZNTU=
Subject key identifier:   86:7C:05:83:0A:F7:EC:38:3F:FE:63:CA:ED:F9:4A:0F:4C:F9:4A:02
Certificate issuer:       /CN=23175577-d60e-46cd-90f9-e67df314ab46
Certificate serial:       010D0C9F4328584E842A34CDEA3B9FB590C8ACC0
Authority key identifier: 85:57:10:5C:C1:7E:58:EF:66:33:F7:4C:36:1C:4E:DE:CD:A5:78:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46/84624bfe-7236-3cd6-80e0-fad02f752cbf.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     32000
IP address blocks:        23.159.184.0/24 maxlen: 24
                          148.59.244.0/22 maxlen: 24
                          2607:31c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46/23175577-d60e-46cd-90f9-e67df314ab46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46/23175577-d60e-46cd-90f9-e67df314ab46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:34:cd:ea:3b:9f:b5:90:c8:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23175577-d60e-46cd-90f9-e67df314ab46
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=98696603-064c-4e7a-83b6-00520acb63dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:64:fe:1a:ec:8e:a1:91:2e:1e:70:bc:0d:
                    a5:1e:71:f0:09:b7:94:d8:7c:26:9b:3e:83:d8:88:
                    b8:2f:d2:1b:7d:6b:b8:b2:17:86:01:fa:be:7e:53:
                    f2:6f:cb:d5:cf:d7:f6:08:0f:3e:27:c0:96:9a:15:
                    63:05:c5:e2:41:84:79:50:ef:f9:2a:b5:ec:ed:13:
                    c5:a2:0c:1b:16:4f:0f:58:99:39:44:a4:33:7f:40:
                    05:74:58:9b:13:0f:3a:cf:05:a5:28:58:be:b1:60:
                    d6:2e:ed:8b:2a:23:c2:5c:7f:2b:f3:90:61:0c:48:
                    66:c8:37:d2:e0:69:d7:4d:2c:8e:b4:58:ea:d6:0e:
                    d6:98:80:05:c5:6c:0c:c6:66:a3:30:d0:0c:77:7f:
                    25:0c:a1:4a:92:7e:3d:b2:76:75:be:e5:eb:fb:29:
                    1a:a6:96:42:ee:d3:9b:77:b7:0d:92:9f:e4:b9:9f:
                    d0:7d:b9:72:37:4a:ce:97:14:11:51:4b:73:66:32:
                    41:47:d8:b4:cc:75:a4:28:02:fe:84:1d:13:7b:16:
                    3c:36:a0:e2:fc:88:8c:54:cf:1d:d9:0f:74:7d:8a:
                    24:88:0b:76:ea:30:d5:38:b3:99:37:66:4b:5f:6b:
                    c4:7f:ab:0b:71:21:fe:79:92:87:a5:89:b9:d0:30:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7C:05:83:0A:F7:EC:38:3F:FE:63:CA:ED:F9:4A:0F:4C:F9:4A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46/84624bfe-7236-3cd6-80e0-fad02f752cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46/23175577-d60e-46cd-90f9-e67df314ab46.crl

            X509v3 Authority Key Identifier:
                keyid:85:57:10:5C:C1:7E:58:EF:66:33:F7:4C:36:1C:4E:DE:CD:A5:78:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/23175577-d60e-46cd-90f9-e67df314ab46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.184.0/24
                  148.59.244.0/22
                IPv6:
                  2607:31c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:5b:29:c1:a5:e7:4b:12:23:3d:ab:a7:a8:0f:95:e1:f3:
         e1:d7:74:5b:10:01:3f:de:0f:8e:2a:30:db:42:5f:ef:5c:4c:
         e7:df:e1:05:c8:5e:c8:01:1b:e0:c7:68:0a:9e:a5:82:7d:9e:
         9e:e9:97:56:2c:d7:c4:db:89:16:5f:f2:c3:4a:47:95:10:84:
         48:4c:2e:bd:aa:7a:64:d1:c4:0f:77:f6:cb:5c:8f:87:59:86:
         bd:17:4d:fa:39:f3:ff:2e:0f:c8:2e:ce:6a:21:ae:46:cf:c0:
         97:c0:e2:2c:dc:72:30:25:79:69:a9:9e:0e:d7:d3:ee:78:82:
         23:7c:e4:e4:5e:c2:fb:2f:43:94:ea:bf:3c:72:00:d7:24:c1:
         2e:9d:77:24:a0:31:ec:8b:82:a6:f8:0c:2e:8d:4d:01:b7:e0:
         e9:6c:54:b1:4a:8d:20:e4:08:ca:36:7d:15:72:51:2e:d1:24:
         92:83:31:72:79:ff:b7:ee:91:2e:33:09:9f:5a:b3:b3:f5:45:
         6b:66:c4:67:2b:23:12:60:bf:f3:f4:24:97:38:f9:de:10:05:
         ab:e3:3a:95:21:d9:bd:f8:2e:da:d3:b9:c9:63:71:56:95:0f:
         0b:83:a4:86:7a:44:f9:3d:8a:f2:95:cd:1d:78:1f:55:4f:33:
         26:3b:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:14:22 2026 by rpki-client