Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b36b153d-587e-347a-bac9-f214ccecd1c3.roa
File:                     b36b153d-587e-347a-bac9-f214ccecd1c3.roa (raw, json)
Hash identifier:          /kBnXjUAYZ7gGrwu/WqUKw60L2PCRdiHlzApp2sIDhs=
Subject key identifier:   03:0C:49:C1:DA:58:A3:B6:16:70:3B:02:A5:0A:22:75:EA:5B:BC:29
Certificate issuer:       /CN=b741a525-1b5e-4308-93b6-815fed38e182
Certificate serial:       010D0C9F4328584E7A64D87BA83E9A7BAFFBF100
Authority key identifier: B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b36b153d-587e-347a-bac9-f214ccecd1c3.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     26253
IP address blocks:        23.180.192.0/24 maxlen: 24
                          72.12.240.0/20 maxlen: 20
                          198.71.119.0/24 maxlen: 24
                          198.71.120.0/21 maxlen: 21
                          199.167.88.0/22 maxlen: 22
                          205.201.32.0/21 maxlen: 21
                          206.188.218.0/24 maxlen: 24
                          208.92.184.0/22 maxlen: 22
                          208.93.176.0/21 maxlen: 21
                          216.169.64.0/19 maxlen: 19
                          216.241.192.0/20 maxlen: 20
                          2605:5480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d8:7b:a8:3e:9a:7b:af:fb:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b741a525-1b5e-4308-93b6-815fed38e182
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=104550ae-7344-4ccf-8a26-86852cf0be00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:da:f0:72:17:d9:a8:ce:73:96:62:3e:50:
                    b2:eb:ff:77:e9:39:e0:99:4d:91:d2:64:0a:c4:6b:
                    ad:24:60:8b:a3:89:a6:4c:e3:1d:75:4d:8f:01:e6:
                    7d:d0:55:58:a4:70:10:e7:1c:08:35:90:c9:7d:0d:
                    0a:02:a5:0b:f0:67:5c:ec:e4:c1:74:4d:05:aa:ba:
                    e7:67:8c:15:63:6b:85:ac:5e:32:58:19:84:5f:08:
                    be:98:8f:8d:8a:1f:89:86:cb:65:75:1e:82:46:3b:
                    47:fa:1d:48:fd:b4:4f:22:b6:82:4c:c6:88:03:27:
                    8e:b5:56:5a:53:74:be:9d:ba:eb:9f:ec:58:e2:dc:
                    8f:96:7f:6c:5a:c1:a4:48:ab:ef:47:74:6d:a1:80:
                    d2:af:c8:e4:5f:b4:db:42:6b:0b:81:22:d7:a1:4a:
                    28:b1:65:62:a6:27:d2:2a:42:ab:e5:ff:d0:9a:33:
                    11:c9:c3:bf:0a:60:f4:19:4b:89:a3:7d:40:1c:ba:
                    9d:97:f9:e5:94:06:32:50:b1:8d:6f:4f:d4:98:d1:
                    85:84:68:96:74:e0:88:77:05:bd:80:77:53:5f:a2:
                    d5:3b:78:a2:87:d6:39:1d:56:96:89:bb:e0:bb:cb:
                    7f:76:4a:e1:cf:40:92:09:ca:8a:31:41:07:67:eb:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0C:49:C1:DA:58:A3:B6:16:70:3B:02:A5:0A:22:75:EA:5B:BC:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b36b153d-587e-347a-bac9-f214ccecd1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.192.0/24
                  72.12.240.0/20
                  198.71.119.0-198.71.127.255
                  199.167.88.0/22
                  205.201.32.0/21
                  206.188.218.0/24
                  208.92.184.0/22
                  208.93.176.0/21
                  216.169.64.0/19
                  216.241.192.0/20
                IPv6:
                  2605:5480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4e:d9:20:51:12:c3:ed:01:1e:a3:02:08:25:f3:92:82:46:
         ed:b1:c0:b4:51:4e:54:cd:9d:bf:10:85:9d:90:0c:17:cc:00:
         6c:f8:ff:90:d7:4c:6d:59:bd:14:2d:c8:4a:3c:80:f0:47:60:
         19:ee:b1:79:1e:f5:49:42:a0:23:87:69:ac:94:9c:40:f3:4b:
         da:12:51:d8:3c:12:6c:54:1f:8f:94:5e:6d:4f:74:9d:98:ba:
         28:4f:4f:59:9b:81:33:01:24:e1:ef:22:b3:6c:14:09:03:98:
         de:22:08:d3:7b:9a:dd:3d:99:bb:9d:c6:b1:9c:ad:9b:c3:74:
         74:8f:59:23:69:9f:5a:51:16:6e:d9:ef:25:f5:da:fe:02:a5:
         1c:e1:73:aa:ba:68:0b:78:dd:56:ab:b5:3f:31:dc:2b:ce:6b:
         0e:ff:39:bb:62:c1:9b:6f:47:d1:25:1a:52:8a:04:9a:19:3f:
         ba:ef:be:69:e5:79:dd:04:ea:8d:0a:4d:29:a2:8c:60:73:9c:
         d7:90:5c:66:26:b7:2a:d7:f7:26:d6:37:f4:0f:0a:4f:da:03:
         5e:ab:64:48:c6:2a:81:5d:e6:80:bd:e9:a9:b1:00:67:1c:ae:
         dd:eb:cf:d0:c1:83:02:3a:53:cd:74:5c:2c:6c:0e:32:74:97:
         b6:f1:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:12:33 2026 by rpki-client