Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58/a8d02c35-4cc0-3fef-9e6e-9fc9f2a3a4a9.roa
File:                     a8d02c35-4cc0-3fef-9e6e-9fc9f2a3a4a9.roa (raw, json)
Hash identifier:          yYVX0X+l89LZTQbkyRC3On4RG2WwGp8x8GW3IxNDwP4=
Subject key identifier:   A6:04:98:C9:DB:55:B5:E9:5B:5C:69:12:3A:94:A3:78:B2:D3:C9:26
Certificate issuer:       /CN=1e908182-44a1-459a-866f-350dae032f58
Certificate serial:       010D0C9F4328584E98B9294302658C31C33E2A80
Authority key identifier: 34:8D:46:AB:D7:08:AF:70:7B:47:33:98:29:60:29:29:54:2F:75:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58/a8d02c35-4cc0-3fef-9e6e-9fc9f2a3a4a9.roa
Signing time:             Thu 23 Jul 2026 17:44:27 +0000
ROA not before:           Thu 23 Jul 2026 17:44:27 +0000
ROA not after:            Wed 21 Oct 2026 17:44:27 +0000
asID:                     400846
IP address blocks:        23.149.104.0/24 maxlen: 24
                          23.152.24.0/24 maxlen: 24
                          198.153.212.0/24 maxlen: 24
                          2602:2af::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58/1e908182-44a1-459a-866f-350dae032f58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58/1e908182-44a1-459a-866f-350dae032f58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:b9:29:43:02:65:8c:31:c3:3e:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e908182-44a1-459a-866f-350dae032f58
        Validity
            Not Before: Jul 23 17:44:27 2026 GMT
            Not After : Oct 21 17:44:27 2026 GMT
        Subject: CN=d8728ee1-41b6-431d-9b66-27c412ee51b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:9a:e6:ac:c6:8d:3c:e9:f6:52:8f:29:5b:
                    0c:87:ff:cf:39:78:36:a9:c5:55:e2:b5:03:61:0d:
                    86:12:28:6d:50:7e:3d:dc:f7:6c:6d:1b:e2:33:cd:
                    96:92:0d:95:d9:8c:e9:97:66:eb:0a:3d:f5:6b:c5:
                    2b:c5:73:2d:bc:76:40:6c:72:8a:d9:1a:79:9d:21:
                    4d:d0:4e:12:1b:56:1b:c0:ef:aa:12:40:20:19:18:
                    7a:73:9d:5d:6a:f4:2a:16:2b:e3:61:a8:d1:00:9f:
                    72:95:a7:d0:3a:13:af:71:39:40:e4:71:00:94:01:
                    16:25:8c:a3:a2:52:6f:df:02:8f:2a:5d:ae:e2:2d:
                    06:9c:1e:62:43:68:f0:65:fe:20:01:01:53:46:aa:
                    86:79:04:cd:0b:9d:4a:18:84:71:4e:22:f7:b3:13:
                    3e:b6:c6:63:2e:87:63:06:42:d6:b8:6c:ca:3a:ba:
                    8e:91:ce:ec:fe:e0:d1:88:a7:22:a3:b9:0c:6f:ce:
                    61:79:4a:32:9a:64:5a:da:a5:39:f0:8f:68:8c:b7:
                    b9:0d:63:64:52:ee:7e:ab:b8:f9:03:96:e7:d4:ce:
                    fd:71:ee:ca:50:75:be:4a:56:0f:26:4f:76:1d:2d:
                    73:f3:ec:71:10:4e:87:5a:6a:0d:11:58:c4:b6:0d:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:04:98:C9:DB:55:B5:E9:5B:5C:69:12:3A:94:A3:78:B2:D3:C9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58/a8d02c35-4cc0-3fef-9e6e-9fc9f2a3a4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58/1e908182-44a1-459a-866f-350dae032f58.crl

            X509v3 Authority Key Identifier:
                keyid:34:8D:46:AB:D7:08:AF:70:7B:47:33:98:29:60:29:29:54:2F:75:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e908182-44a1-459a-866f-350dae032f58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.104.0/24
                  23.152.24.0/24
                  198.153.212.0/24
                IPv6:
                  2602:2af::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:64:58:0f:bb:10:e0:78:3e:19:18:30:96:93:2f:fd:08:
         71:3a:8a:81:43:f2:2a:85:0a:ee:3c:a8:ef:03:91:0b:16:14:
         a5:8d:dc:2c:c9:7e:15:b4:ec:6d:20:99:a3:42:fa:21:b8:85:
         34:2e:6c:76:ba:68:9b:bf:ef:96:ec:9a:a7:22:39:01:c5:6a:
         7f:ae:ca:36:ee:c3:f1:7d:3c:8d:81:44:19:19:22:5a:fd:41:
         cc:e1:ba:fb:39:9b:4a:32:15:75:63:86:80:74:de:89:33:f3:
         5b:12:32:16:9f:0a:0b:95:0b:a6:24:da:f8:9d:99:d9:89:e3:
         1c:38:ff:6e:04:e7:b6:17:de:df:ba:79:e0:02:37:85:0a:44:
         2b:3c:9f:84:45:f8:0d:c1:2b:d4:58:56:1e:ee:73:7d:dd:7a:
         7f:5b:b1:98:13:4e:87:11:03:61:a3:28:d6:40:f2:6b:8f:97:
         a9:a9:9e:7e:02:bd:86:44:a5:8b:f6:38:ab:e1:01:ec:f7:bd:
         a8:1b:b7:92:1a:7a:ef:bc:02:c1:40:4e:02:6d:05:0e:ab:aa:
         c0:be:9a:88:b2:bc:b5:7c:8f:c1:ff:96:55:14:d6:13:6b:63:
         75:37:a7:e7:37:91:94:8d:ba:b2:64:81:6a:93:51:39:92:f8:
         fb:e2:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:40 2026 by rpki-client