Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
File:                     b9390863-5768-389d-9641-597ee1febed8.roa (raw, json)
Hash identifier:          UXblMS4bmlD2OkVmkJj9lIUqvSQBWRQhRSO10+LIU2A=
Subject key identifier:   9D:92:AD:1C:33:CF:E3:38:C5:FD:F6:E9:92:94:9D:AF:21:22:3E:0F
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F4328584E885A46D1200E56EDC56AF600
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     31998
IP address blocks:        23.164.80.0/24 maxlen: 32
                          104.224.60.0/22 maxlen: 32
                          206.168.176.0/22 maxlen: 32
                          208.70.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:46:d1:20:0e:56:ed:c5:6a:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=d41dd6a4-607f-4ca9-be50-d876ff336a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:f3:4b:d3:d7:6d:cd:72:cd:83:70:63:6a:
                    b8:73:e5:e1:b3:7c:86:4f:fd:54:7b:85:cc:90:dd:
                    b3:20:05:e3:9d:8f:a4:ae:d2:62:f8:e0:d7:26:c0:
                    9d:3e:e1:65:c2:1c:49:ee:f3:53:6d:d0:ca:33:a2:
                    d7:04:aa:e3:e6:ba:7e:e0:22:80:c8:f5:08:73:ad:
                    1d:ce:fa:8e:12:e2:fb:78:aa:8d:74:88:43:5b:e1:
                    3f:96:37:e5:ac:39:68:e0:65:4f:ae:39:4b:f5:c2:
                    8c:eb:7d:4e:8a:58:16:cb:ed:d1:34:c7:e1:af:8c:
                    53:01:d1:9e:85:20:f2:d3:60:e4:2b:80:51:2a:d8:
                    5b:fb:4f:73:ee:11:3d:82:b8:fb:70:6b:48:a8:38:
                    7a:33:57:f6:53:96:f8:72:10:6a:cd:cd:fb:39:bc:
                    41:c4:86:ef:72:e8:5c:51:da:81:40:35:cf:e2:85:
                    b4:c9:87:c6:46:ef:d6:35:0a:ec:cc:d5:cb:9b:29:
                    b2:57:63:6d:1b:da:19:4e:73:b6:2b:32:1f:25:b4:
                    46:89:59:e5:70:a8:45:88:03:f9:e3:09:6b:43:fa:
                    c7:ef:cd:d6:e0:08:d1:60:17:0f:1a:df:f8:b0:d1:
                    ec:42:a7:f0:d1:28:ff:18:6e:36:88:23:d5:36:6b:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:92:AD:1C:33:CF:E3:38:C5:FD:F6:E9:92:94:9D:AF:21:22:3E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.80.0/24
                  104.224.60.0/22
                  206.168.176.0/22
                  208.70.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a2:e8:a3:e2:e2:c7:8c:0d:be:4d:f0:5b:f9:f5:5c:54:29:
         41:4c:e1:04:15:de:a5:ad:db:d7:33:78:7d:48:98:b0:74:8f:
         6f:f8:d3:b9:68:db:4b:1b:46:cf:d7:c8:a8:9a:8e:b6:ca:04:
         14:44:62:b9:65:3a:be:62:df:29:fe:25:7c:7c:cb:51:7a:4e:
         b4:1c:8c:f4:64:b4:8d:a7:df:d5:be:96:85:02:aa:b6:0f:33:
         1a:02:ee:66:93:a5:0a:bb:9d:bc:71:07:78:3b:16:ec:06:10:
         c5:78:d0:1a:29:59:1f:64:36:fe:78:6f:dd:5e:97:83:05:25:
         3f:ed:17:74:cf:23:68:40:3e:a1:c1:17:87:2f:34:10:17:93:
         f8:2f:bf:5d:92:38:7c:20:08:11:c7:6e:dd:db:a4:44:e1:7b:
         3e:b7:cf:2e:e2:a1:1c:52:b4:b6:22:3b:19:8e:ae:ee:b8:2f:
         cd:7e:a5:e3:9c:a1:88:1f:9f:54:47:86:7e:48:1c:b3:17:e9:
         8c:79:96:a4:3d:cf:da:cc:3f:aa:1e:83:52:5c:2b:36:58:bd:
         dc:27:39:05:c9:15:e5:94:fd:16:48:3d:72:3d:21:5c:e1:31:
         75:f1:8d:20:27:cf:b6:22:01:75:e1:0c:70:68:81:bc:b5:03:
         e6:f0:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:37 2026 by rpki-client