Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/77db5229-da0e-3369-85b5-9f464ed3c6bc.roa
File:                     77db5229-da0e-3369-85b5-9f464ed3c6bc.roa (raw, json)
Hash identifier:          nzlmQxBfZj60X8E+tpqMMYaLjmpwLLVQVzyShjR5OSg=
Subject key identifier:   4F:34:63:8F:C8:F5:54:42:EF:1D:5C:7F:69:A5:64:C4:1F:D1:CF:3E
Certificate issuer:       /CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
Certificate serial:       010D0C9F4328584DBC4BC6E0B24FFFE268803C50
Authority key identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/77db5229-da0e-3369-85b5-9f464ed3c6bc.roa
Signing time:             Tue 05 May 2026 18:46:14 +0000
ROA not before:           Tue 05 May 2026 18:46:14 +0000
ROA not after:            Wed 29 Jul 2026 20:38:27 +0000
asID:                     394232
IP address blocks:        23.178.0.0/24 maxlen: 24
                          23.178.1.0/24 maxlen: 24
                          23.252.224.0/20 maxlen: 20
                          199.4.190.0/24 maxlen: 24
                          2606:7480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:4b:c6:e0:b2:4f:ff:e2:68:80:3c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
        Validity
            Not Before: May  5 18:46:14 2026 GMT
            Not After : Jul 29 20:38:27 2026 GMT
        Subject: CN=406af2bc-174c-4738-9944-d63dcb538343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:db:60:93:e9:95:43:52:62:12:c5:9f:c9:
                    7d:7c:f0:5e:3d:21:30:e0:23:c7:da:10:7d:e7:49:
                    9d:ef:ae:69:bf:a3:cb:61:4a:0d:70:f3:c6:d8:37:
                    93:5c:43:b5:e0:ed:9d:f3:0e:d1:a9:5d:3e:61:a3:
                    43:07:09:3f:73:1c:fb:29:6d:0f:82:95:61:0d:e5:
                    41:01:14:ff:a9:e5:91:3d:24:b9:b5:ec:05:87:59:
                    e2:b9:f2:78:bc:10:41:7e:18:9c:e7:00:03:26:fc:
                    30:38:ca:f0:4f:17:d1:e1:08:f5:8d:df:ab:9a:fa:
                    0a:c7:66:8a:03:82:af:7d:8f:2c:2e:49:10:97:ef:
                    99:6f:76:ef:29:70:42:78:3f:9e:54:0f:0d:9d:64:
                    18:bd:43:81:94:d2:88:b1:b0:1f:65:32:e0:cc:43:
                    db:58:ee:fc:57:31:50:1c:ec:4e:04:a5:82:53:c5:
                    c3:7d:8a:dd:fc:58:eb:78:1a:f1:74:14:a4:2e:2f:
                    9a:4b:2a:7d:dc:a4:1a:fa:db:ce:a4:ba:90:ae:aa:
                    2b:d8:31:0c:01:f0:11:50:f8:a5:16:59:2a:99:c0:
                    69:20:ac:ed:96:be:1a:19:f4:2b:7d:d7:95:5a:0d:
                    ee:69:7e:e7:fa:93:71:56:8e:17:01:bf:d1:20:9b:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:63:8F:C8:F5:54:42:EF:1D:5C:7F:69:A5:64:C4:1F:D1:CF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/77db5229-da0e-3369-85b5-9f464ed3c6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl

            X509v3 Authority Key Identifier:
                keyid:68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.0.0/23
                  23.252.224.0/20
                  199.4.190.0/24
                IPv6:
                  2606:7480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c8:3b:21:4b:19:62:87:5c:c4:82:f3:76:a9:df:d1:a8:0d:
         3f:12:18:68:a9:94:44:77:02:8a:8d:bc:1e:55:42:a7:d1:ad:
         8c:b1:2f:f5:a8:74:2e:a3:45:44:fd:14:3d:5b:5f:07:c7:1b:
         24:cb:04:b0:f2:0d:e4:27:3a:e1:bc:b0:0c:d4:70:f0:b6:4a:
         07:7a:2d:bd:75:e9:76:04:35:90:8d:3e:e0:0a:51:df:d3:f4:
         aa:e5:26:e7:e9:79:63:f6:5b:87:0b:c5:de:a1:55:50:39:3a:
         0f:0d:5c:04:10:6c:00:df:ed:9b:55:9e:dc:39:de:00:c1:f3:
         0e:b6:82:18:c8:f8:a5:7d:96:19:21:7a:83:e4:64:fc:a8:f8:
         c4:19:3e:c1:23:90:63:6d:69:77:46:77:29:23:c1:31:77:39:
         24:d0:af:82:d8:45:90:ce:cb:3a:20:2c:21:b9:00:98:af:3a:
         82:58:67:ff:34:70:e6:fe:fc:12:6d:bb:aa:fd:1e:bc:c3:f1:
         47:e4:fd:87:59:3d:52:cc:6c:7e:b7:09:c4:ba:99:28:4f:4a:
         69:bf:c7:be:74:36:f1:79:b4:b2:94:8b:3a:5b:25:ff:ac:47:
         e0:14:e3:e4:7f:f0:62:a2:99:86:1e:0a:86:d1:51:d5:e4:9b:
         29:58:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 00:52:13 2026 by rpki-client