Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6bc05ad5-2c4a-32f2-b7fc-81c3dc949bed.roa
File:                     6bc05ad5-2c4a-32f2-b7fc-81c3dc949bed.roa (raw, json)
Hash identifier:          9JRbDb7EtFPi/CL8r883RnKeQEvwMkz6X+PLY8Y9Ltk=
Subject key identifier:   E5:EF:A3:31:F3:D2:7E:10:B4:79:9F:1B:B8:C7:E6:4C:8D:0B:48:95
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584E45B57A1180CFA3DEDBA34980
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6bc05ad5-2c4a-32f2-b7fc-81c3dc949bed.roa
Signing time:             Wed 24 Jun 2026 00:04:57 +0000
ROA not before:           Wed 24 Jun 2026 00:04:57 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        176.23.137.0/24 maxlen: 24
                          176.23.138.0/24 maxlen: 24
                          176.23.139.0/24 maxlen: 24
                          176.23.140.0/24 maxlen: 24
                          176.23.141.0/24 maxlen: 24
                          176.23.142.0/24 maxlen: 24
                          176.23.143.0/24 maxlen: 24
                          189.25.65.0/24 maxlen: 24
                          189.25.66.0/24 maxlen: 24
                          189.25.67.0/24 maxlen: 24
                          189.25.68.0/24 maxlen: 24
                          189.25.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:b5:7a:11:80:cf:a3:de:db:a3:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jun 24 00:04:57 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=7ce14bdd-3058-4911-b923-8057bc29266f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:38:1e:ee:64:31:46:dc:df:30:12:66:3b:
                    0b:46:ae:65:eb:08:53:54:56:10:9f:6e:25:40:3b:
                    f6:6f:c1:c2:2c:65:8a:06:26:41:77:9b:14:13:72:
                    85:14:3e:22:3b:7e:ff:9f:02:ce:7a:09:db:f9:4c:
                    b1:30:60:8b:9e:36:28:99:b0:1a:c9:91:87:bb:e8:
                    d6:e7:b0:e8:3f:90:da:3e:67:54:91:e1:f7:7e:ba:
                    45:4d:ec:8e:e1:23:27:62:ce:0b:f8:e5:e5:89:90:
                    7b:a2:5d:51:63:09:e5:86:a6:64:3b:f3:49:3e:b8:
                    70:f1:2f:d9:36:48:81:6c:c5:e6:80:07:5f:e2:f2:
                    46:52:5a:9b:f2:73:f7:00:e5:77:7d:cf:be:f3:22:
                    f9:66:5c:06:c1:83:3f:5b:6a:29:37:f2:df:f9:60:
                    0a:e6:95:61:8d:ea:3d:25:f7:8b:ff:c3:16:b6:68:
                    9f:a7:bd:f5:3f:05:72:87:55:d7:bb:c7:44:f3:9c:
                    e3:b8:1c:57:f2:b4:54:92:cb:ef:bf:59:55:99:b9:
                    f9:6f:24:df:e1:ac:aa:f3:ba:16:c1:92:1f:42:03:
                    28:dd:58:0a:d1:c4:79:41:b2:5d:73:6c:6c:22:97:
                    ed:5a:c2:dd:1d:58:24:06:6e:5c:2e:f8:64:6e:07:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EF:A3:31:F3:D2:7E:10:B4:79:9F:1B:B8:C7:E6:4C:8D:0B:48:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6bc05ad5-2c4a-32f2-b7fc-81c3dc949bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.23.137.0-176.23.143.255
                  189.25.65.0-189.25.69.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3a:93:fd:a1:9f:bc:79:2c:2d:91:4a:e5:80:77:c9:27:a4:
         5c:71:8c:5c:5d:f7:ca:ed:45:95:db:fb:93:bc:ea:be:bd:31:
         c5:47:cf:31:34:31:19:8c:54:ca:0c:bf:c2:46:d5:e9:79:62:
         88:83:19:56:05:b2:ab:a1:5d:b2:3c:48:34:d5:4d:05:96:3f:
         ef:a6:6f:ae:a4:ca:b9:54:82:cf:db:d0:15:e5:ac:2f:3d:30:
         15:31:e2:d6:04:61:5c:55:ad:68:b2:bb:2d:a3:f4:4a:87:ae:
         71:d9:ff:12:b5:de:0f:40:8b:20:b7:8f:35:11:31:d4:38:92:
         af:4a:38:99:46:e8:86:c7:ff:8b:77:56:34:84:ef:c6:48:69:
         7a:19:ba:b5:0b:75:e4:2c:6b:23:74:42:5b:ec:c8:75:26:57:
         f8:5e:ed:91:b0:da:01:ac:24:a7:fe:bb:eb:b9:fe:2c:79:03:
         61:86:d6:20:b1:13:f3:e2:a2:3e:93:47:10:87:7f:56:cd:36:
         9e:17:78:7b:55:42:7f:25:7f:39:c3:e7:39:fe:6b:ac:55:90:
         99:f2:3d:2c:24:ef:3c:fb:fd:2e:28:55:1d:1a:03:c5:09:b3:
         14:98:d9:6b:99:52:30:3d:c2:0c:8d:e3:17:74:7a:4b:0a:f3:
         34:27:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:26 2026 by rpki-client