Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/d247a6c8-267e-3623-be36-ba14a3e05792.roa
File:                     d247a6c8-267e-3623-be36-ba14a3e05792.roa (raw, json)
Hash identifier:          Gtdn5vQqsowbmLL9IkM8LjdGz3JxDZFG4ZvfhKVb5bU=
Subject key identifier:   F7:C0:67:C9:58:24:B4:DF:D8:C5:56:80:73:83:A7:E4:34:32:68:2B
Certificate issuer:       /CN=2c730f6b-a302-4a8a-b301-bcc156169c43
Certificate serial:       010D0C9F4328584E7634DCED76C896B397E1CE00
Authority key identifier: 51:45:1E:9B:3A:B3:29:C7:77:4A:6D:DE:F2:3E:96:71:77:AF:1E:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/d247a6c8-267e-3623-be36-ba14a3e05792.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     894
IP address blocks:        23.137.82.0/24 maxlen: 24
                          2602:fb5d::/40 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/2c730f6b-a302-4a8a-b301-bcc156169c43.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/2c730f6b-a302-4a8a-b301-bcc156169c43.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:dc:ed:76:c8:96:b3:97:e1:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c730f6b-a302-4a8a-b301-bcc156169c43
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=9624c270-6913-4204-b411-487838ffb92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:5b:14:b0:f5:9f:18:18:99:96:fd:3f:43:
                    3f:bf:ce:40:a9:98:92:f8:a2:03:2d:a5:98:0f:f7:
                    7f:20:ee:04:6c:64:5b:3a:48:94:00:ff:bb:03:7b:
                    b1:eb:0a:12:7c:bb:24:a3:93:4a:14:39:dd:a7:72:
                    27:68:9c:da:0e:7c:bf:a4:b9:33:20:29:f5:0a:8c:
                    71:30:49:b2:16:42:f1:c2:d5:50:e7:e7:59:b7:1b:
                    c1:a7:ca:ba:23:47:03:f9:2e:e2:52:3b:86:99:43:
                    9e:da:f0:be:17:e9:1b:0f:30:91:0c:90:71:e0:5e:
                    ec:b3:7a:80:99:ca:41:82:8b:7d:40:d1:f0:ef:b8:
                    20:9a:ee:60:f7:68:07:28:53:ba:98:fa:1c:c9:53:
                    7c:81:82:a0:17:6b:f2:c6:75:69:7b:98:29:bf:87:
                    0d:b5:b4:df:ec:e9:a5:12:ab:38:b4:0d:23:b8:c8:
                    a0:54:88:e3:8d:b4:ab:55:27:fe:de:6b:69:8d:29:
                    8f:80:9d:d0:87:55:36:e8:6b:6c:f7:52:c2:98:43:
                    00:78:76:2f:e9:ad:2e:71:ed:fd:25:7f:3d:30:43:
                    a9:fa:a8:4a:45:58:34:dd:50:cb:86:35:b2:3a:b5:
                    27:42:2a:cf:b4:a0:72:e9:93:0d:76:a8:f6:a0:b9:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C0:67:C9:58:24:B4:DF:D8:C5:56:80:73:83:A7:E4:34:32:68:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/d247a6c8-267e-3623-be36-ba14a3e05792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43/2c730f6b-a302-4a8a-b301-bcc156169c43.crl

            X509v3 Authority Key Identifier:
                keyid:51:45:1E:9B:3A:B3:29:C7:77:4A:6D:DE:F2:3E:96:71:77:AF:1E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c730f6b-a302-4a8a-b301-bcc156169c43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.82.0/24
                IPv6:
                  2602:fb5d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:b9:47:76:5f:5b:90:f0:3f:a5:a5:85:6b:83:cc:12:99:
         5d:ed:fa:b4:92:2b:0b:fe:19:f7:22:52:1a:8d:23:64:8b:9b:
         8b:04:35:bb:9b:59:e5:eb:58:d7:f0:fd:c0:37:61:5f:29:1c:
         fe:05:63:0d:09:3b:e5:5b:90:4f:bd:99:30:95:7c:95:1f:50:
         90:c9:1c:9a:b0:38:18:e4:b8:da:be:57:47:46:37:ca:c8:b3:
         1b:a2:90:55:3c:ae:38:4c:ac:ae:34:34:1f:2e:70:66:05:8e:
         51:b5:cc:7a:a0:03:57:27:40:24:5b:a9:5f:ca:d4:7f:e7:93:
         33:1c:86:f1:87:0f:3b:d8:8e:34:fa:59:d0:a7:e3:05:05:b8:
         f2:a3:0a:4a:fa:d2:bb:64:2e:8d:ea:57:22:1f:13:a3:5e:ad:
         14:e9:95:81:7f:5f:65:94:55:81:22:09:ed:10:3f:43:91:f8:
         27:1c:02:f8:d5:f4:53:9c:8f:95:c8:fb:d9:c5:29:29:38:d8:
         82:81:13:07:f7:da:30:af:39:7a:52:b1:f2:22:a0:ca:b9:ee:
         24:46:0a:0c:36:1a:5a:1f:ad:60:78:50:d1:9b:e4:fe:2b:fd:
         47:a7:d2:a7:9e:4f:d3:0e:d9:25:10:1a:f7:12:f0:e0:fe:78:
         a1:9a:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:39 2026 by rpki-client