Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/87ae1fc7-d42b-3b2a-a12c-ca1b0ab03c06.roa
File:                     87ae1fc7-d42b-3b2a-a12c-ca1b0ab03c06.roa (raw, json)
Hash identifier:          lDtO8udjEK0kmwfd8vsOvd9HhQnRbN2bRVu2tBs+AsM=
Subject key identifier:   77:5B:12:FB:68:14:93:3F:22:D7:CD:D2:02:34:82:0E:BB:35:86:F6
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584EC4D7194769F69AB8AE229580
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/87ae1fc7-d42b-3b2a-a12c-ca1b0ab03c06.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     11776
IP address blocks:        23.244.176.0/24 maxlen: 24
                          23.244.188.0/24 maxlen: 24
                          23.244.189.0/24 maxlen: 24
                          23.244.190.0/23 maxlen: 23
                          23.244.224.0/23 maxlen: 23
                          23.244.226.0/23 maxlen: 23
                          23.244.228.0/23 maxlen: 23
                          23.244.230.0/23 maxlen: 23
                          23.244.232.0/23 maxlen: 23
                          23.244.234.0/23 maxlen: 23
                          23.244.236.0/23 maxlen: 23
                          23.244.238.0/23 maxlen: 23
                          23.245.54.0/23 maxlen: 23
                          66.232.248.0/23 maxlen: 23
                          159.250.80.0/23 maxlen: 23
                          159.250.82.0/23 maxlen: 23
                          159.250.84.0/23 maxlen: 23
                          159.250.86.0/23 maxlen: 23
                          159.250.88.0/23 maxlen: 23
                          159.250.90.0/23 maxlen: 23
                          165.188.160.0/23 maxlen: 23
                          165.188.164.0/23 maxlen: 23
                          165.188.172.0/23 maxlen: 23
                          207.255.20.0/23 maxlen: 23
                          207.255.22.0/23 maxlen: 23
                          207.255.52.0/23 maxlen: 23
                          207.255.110.0/23 maxlen: 23
                          207.255.112.0/23 maxlen: 23
                          207.255.119.0/24 maxlen: 24
                          207.255.128.0/23 maxlen: 23
                          207.255.224.0/22 maxlen: 22
                          207.255.224.0/23 maxlen: 23
                          207.255.226.0/23 maxlen: 23
                          207.255.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:19:47:69:f6:9a:b8:ae:22:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=3a15cf0d-1f37-4dc2-94f8-47f0cb9b3513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:61:b6:24:ab:20:55:a0:82:d4:7d:e5:f8:
                    98:9e:31:8f:d6:e7:dc:94:1d:25:58:de:5a:7c:f1:
                    fe:f0:78:e7:72:98:a8:57:52:0d:91:2c:ba:e6:37:
                    10:d0:a1:9b:7c:01:6d:74:ed:bc:1d:ac:1b:97:1b:
                    36:89:71:eb:87:b9:eb:74:fb:00:58:2e:43:dc:34:
                    eb:4b:ba:8e:68:b6:eb:82:74:13:64:dd:53:96:89:
                    a9:69:f2:a9:b8:e1:ff:e3:1f:de:24:15:7b:ac:54:
                    f4:fd:d8:85:8e:6f:2d:09:ca:ef:66:30:f1:77:af:
                    9e:01:cc:5b:d6:c9:0e:39:a2:0e:52:20:18:18:aa:
                    95:cc:68:bf:0d:c0:ee:43:da:7a:ef:ce:00:b5:b7:
                    ce:21:6d:a5:55:a7:c3:07:31:a7:d1:76:4d:c3:51:
                    3b:8b:34:f9:e1:42:97:80:58:63:5d:21:47:86:93:
                    e0:a9:bf:8a:8c:6b:9b:f7:cb:e7:ea:46:bb:57:4e:
                    3b:c4:63:3f:ef:1e:b4:a2:de:f6:91:0d:ce:1c:9e:
                    99:83:33:22:94:8f:e9:9d:ee:1a:40:dd:1f:50:22:
                    64:ab:20:07:cf:73:e8:90:08:39:33:7e:a9:32:cd:
                    a9:30:78:c0:07:53:8d:94:4a:54:cd:07:b7:c9:ce:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5B:12:FB:68:14:93:3F:22:D7:CD:D2:02:34:82:0E:BB:35:86:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/87ae1fc7-d42b-3b2a-a12c-ca1b0ab03c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.244.176.0/24
                  23.244.188.0/22
                  23.244.224.0/20
                  23.245.54.0/23
                  66.232.248.0/23
                  159.250.80.0-159.250.91.255
                  165.188.160.0/23
                  165.188.164.0/23
                  165.188.172.0/23
                  207.255.20.0/22
                  207.255.52.0/23
                  207.255.110.0-207.255.113.255
                  207.255.119.0/24
                  207.255.128.0/23
                  207.255.224.0/22
                  207.255.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:91:01:1b:c4:6e:a3:f3:86:4d:a6:d5:da:f2:b7:0d:9e:a6:
         5f:08:48:ba:1c:d2:48:d9:6e:06:e1:e0:e3:58:00:8a:63:44:
         a0:28:e4:e2:16:1e:cf:59:f5:35:5e:9a:e4:47:d3:cc:a5:e0:
         81:05:74:52:49:00:59:60:36:36:a0:3b:eb:84:b1:d7:81:34:
         b5:99:76:83:ef:b4:70:ad:1b:6a:5e:1e:5f:75:52:0e:46:bc:
         e7:6d:7e:89:02:6c:d1:6d:68:d8:e6:70:c3:44:d6:01:3b:cf:
         e6:ae:dd:0d:91:71:20:4a:05:e3:25:99:97:a4:4d:85:3a:76:
         62:bf:0f:f3:88:29:dc:06:87:8e:75:a3:d3:4f:74:22:b1:6e:
         9c:28:85:b1:41:4c:42:8f:72:fc:bf:e5:3d:b3:dc:64:17:b4:
         df:a6:8b:42:66:09:6f:93:93:d9:12:be:a2:5a:a5:e6:b0:9a:
         49:2d:c2:3b:7f:47:7d:61:c1:2b:78:ea:3d:92:27:e8:81:ca:
         54:3e:63:96:05:6b:86:34:ca:06:51:7a:56:38:16:d6:fb:10:
         59:d3:ca:21:63:aa:33:ea:eb:fc:8f:d7:25:34:ac:b5:2b:fa:
         73:a7:99:41:23:97:88:02:58:41:c9:f4:5f:fc:df:4e:46:5e:
         59:e9:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:23:53 2026 by rpki-client