Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa
File:                     9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa (raw, json)
Hash identifier:          9MkobwP0U/djh/XKG8jYIBYDkXw6BHSABVwFoXmTdPc=
Subject key identifier:   EE:C3:26:48:A8:3B:7D:BB:EF:FB:6F:75:E3:70:18:09:97:76:E0:A3
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328584E6F3A231E792EAD067EEDC500
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     13780
IP address blocks:        23.128.88.0/24 maxlen: 24
                          2602:fc09::/36 maxlen: 36
                          2602:fc09::/40 maxlen: 40
                          2602:fc09:800::/40 maxlen: 40
                          2602:fc09:805::/48 maxlen: 48
                          2602:fc09:818::/48 maxlen: 48
                          2602:fc09:a00::/40 maxlen: 40
                          2602:fc09:d2f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:23:1e:79:2e:ad:06:7e:ed:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=0bf63cd6-a8be-4073-a1cb-d8f865ec301e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:04:45:7b:de:f4:60:4b:5b:34:91:f3:d7:
                    9e:60:f7:1a:3b:e9:38:48:5c:da:8b:05:e5:51:7d:
                    30:59:4b:79:66:89:1f:f4:51:02:05:ff:12:d4:ca:
                    2b:95:b2:72:2f:0b:74:4a:cf:81:1f:9a:48:48:fd:
                    63:d9:93:5a:49:b2:12:8d:57:23:1c:3d:11:03:2e:
                    82:2d:72:16:16:4a:bc:58:2f:61:5f:b9:53:75:21:
                    18:fa:9f:a2:84:14:38:8d:72:13:38:fc:50:b1:29:
                    95:9c:f8:a0:a0:af:ff:bd:61:cd:98:ef:f4:8f:7b:
                    13:3f:01:bf:6d:2c:23:48:44:8f:ab:e6:e9:c3:11:
                    fe:a8:0d:59:ef:5d:92:aa:93:ac:95:b6:72:aa:31:
                    d8:4d:8e:46:fa:0e:96:3d:97:70:08:b3:82:56:69:
                    8b:08:ac:a3:38:56:8b:1a:7c:1b:2d:23:bc:37:32:
                    26:20:14:3e:bc:0c:2d:87:f0:cb:33:20:fd:01:bf:
                    bf:2d:82:b8:40:92:56:68:46:ec:be:d7:a2:09:9a:
                    9e:66:62:18:d1:7b:e6:1e:5b:40:c5:1e:75:77:d8:
                    4a:6d:9c:0e:f7:59:53:7d:ab:84:de:27:c2:3e:b4:
                    d9:e3:c4:59:bd:89:66:b5:2b:66:28:f2:7b:f6:39:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:26:48:A8:3B:7D:BB:EF:FB:6F:75:E3:70:18:09:97:76:E0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.88.0/24
                IPv6:
                  2602:fc09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:c6:70:f8:3d:65:56:3c:15:71:d6:5a:44:fc:91:e4:d9:
         e5:25:1e:b0:e2:07:98:c3:00:15:ee:ad:cd:72:13:fe:be:5e:
         0d:d8:ff:40:c0:e7:74:25:7c:2e:ce:ef:14:2a:1e:2a:bf:a7:
         32:61:f1:05:a5:34:2e:dc:90:9c:e7:fc:58:96:2e:e8:bf:5e:
         5e:5c:14:6f:2a:26:f2:d9:96:5e:6a:09:8f:40:c8:12:79:bd:
         a6:56:6b:5d:e7:ba:ca:39:98:d0:7e:87:82:7b:c9:4d:55:1a:
         fd:cf:d1:c4:1a:ea:19:87:5d:26:c6:ac:45:e7:e1:b8:a3:c6:
         b9:92:02:6d:ab:29:08:05:35:82:95:3f:95:13:d7:44:de:e7:
         d8:3a:28:49:bb:3e:9a:51:d7:65:89:17:24:ea:98:49:72:ae:
         7b:59:f1:a5:45:a1:f3:a2:15:47:7a:c8:4a:36:e8:82:03:01:
         0c:81:4c:51:57:93:5e:21:be:7f:ad:43:4a:ae:91:4e:61:e9:
         40:d0:84:3f:ba:8f:64:66:ac:f0:04:0d:1b:84:b4:68:07:88:
         c0:c8:6b:06:ab:7e:fc:25:7a:43:55:41:f3:56:29:c5:f1:56:
         a5:75:c8:43:dc:58:1f:c8:3b:f9:87:c3:5b:38:5c:4a:d3:d9:
         03:e0:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:18 2026 by rpki-client