Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/e93cb9cb-b013-35b8-b6b2-638601d638e7.roa
File:                     e93cb9cb-b013-35b8-b6b2-638601d638e7.roa (raw, json)
Hash identifier:          RwZGpa6ULM0E8PhUSnU+YrxTHMpUWkDjzBMPh/S1x8M=
Subject key identifier:   63:34:B7:C4:90:4F:BE:DE:62:C3:6E:45:61:E4:03:59:C1:7A:3A:DF
Certificate issuer:       /CN=2e06fcf2-dda2-4ce0-8a33-46133120abec
Certificate serial:       010D0C9F4328584E3E5F4300AF02FC309F46EF00
Authority key identifier: 41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/e93cb9cb-b013-35b8-b6b2-638601d638e7.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     999
IP address blocks:        23.145.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:43:00:af:02:fc:30:9f:46:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e06fcf2-dda2-4ce0-8a33-46133120abec
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=1e093758-5643-447f-bb10-93d318e30567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:a1:b5:fe:44:95:03:a7:d0:78:2f:78:08:
                    51:1c:6a:19:7b:d0:82:04:45:70:ae:ca:80:9b:59:
                    e5:ce:8e:8d:7e:56:a6:33:47:81:0d:2e:e5:9f:b4:
                    5c:13:17:2e:fe:9c:e5:74:50:43:d0:fd:c5:a7:b2:
                    f8:74:c0:6a:1f:7b:23:35:09:b3:bb:e0:a3:44:e1:
                    96:1d:bc:1d:7c:3c:ea:7f:61:87:49:66:80:eb:72:
                    12:f5:9d:12:44:0c:92:1b:0b:1a:e4:e2:70:e4:b7:
                    fd:09:ec:de:61:df:ac:8c:ad:48:de:ad:a9:3a:a5:
                    96:74:a6:fd:32:9f:31:e9:dc:48:1c:3a:9f:d8:58:
                    78:94:8f:0f:9b:67:81:26:1f:18:c0:92:ab:62:3d:
                    41:0e:8e:c6:f2:01:0c:29:19:25:07:97:5c:a9:e2:
                    95:9c:3c:25:8e:c1:5f:3b:58:b5:fa:06:6e:72:9e:
                    97:0d:cd:0d:d6:25:85:6a:7d:20:6f:66:42:5c:93:
                    0b:92:f4:1c:ee:80:ab:44:81:72:c5:21:36:ab:a0:
                    28:b8:6d:3d:3c:2d:f6:53:d6:cb:60:62:fb:14:ea:
                    c4:76:7c:91:80:7c:45:84:53:74:a7:25:74:3d:c6:
                    d5:e6:bb:76:0b:ff:3e:cc:bf:d7:d5:c2:9d:0b:b3:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:34:B7:C4:90:4F:BE:DE:62:C3:6E:45:61:E4:03:59:C1:7A:3A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/e93cb9cb-b013-35b8-b6b2-638601d638e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl

            X509v3 Authority Key Identifier:
                keyid:41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:89:b5:66:dc:66:d8:57:06:07:17:e3:a1:b3:83:b1:c4:08:
         20:fa:17:2b:51:ff:0d:9f:1f:dc:5f:5b:5b:de:f4:cd:80:95:
         16:f9:eb:78:0e:f5:8a:de:18:77:3e:c3:41:2e:fc:15:d5:b3:
         dd:af:1d:e8:d0:0b:1e:43:ca:ae:8e:76:f5:c4:ee:1e:73:9f:
         4e:15:46:9b:71:11:a7:c3:33:2f:e1:06:90:e9:62:45:3d:f4:
         3e:5e:5c:33:a0:15:e1:14:9b:0f:a7:c9:50:c2:69:ec:f9:12:
         b5:52:63:6d:29:6b:e6:ca:ea:c7:29:d0:ea:0b:04:ae:52:06:
         15:81:f1:2e:63:b9:1d:3f:2c:9e:6c:af:d8:1b:d8:bb:2e:5a:
         df:b5:b8:b5:23:47:64:d6:2b:c8:bf:35:4c:14:d0:7f:80:6e:
         77:92:ea:c3:8e:ba:c8:39:62:5c:72:74:50:b1:4b:65:87:a5:
         56:42:06:af:51:e9:c6:c7:02:bd:5e:5d:b4:e7:a4:76:0a:12:
         e7:84:42:d3:1e:e5:01:1d:06:e5:27:97:94:1a:80:38:59:b8:
         52:c6:ce:e3:2b:ce:f5:a2:70:5e:44:2e:7d:94:b5:a1:06:8b:
         8f:ef:56:da:62:a7:0f:9f:6e:97:8a:4f:1e:61:26:16:68:4b:
         99:c9:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:31 2026 by rpki-client