Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa
File:                     633d00b0-379d-3045-b69f-cbef8b659900.roa (raw, json)
Hash identifier:          AArOnZGvLxv+LSiXecLLoaPlEY3Emd8zfvME2FwcUoY=
Subject key identifier:   CF:A1:34:55:68:EB:9F:73:9E:9F:D1:98:46:27:A7:E3:E6:44:FF:A4
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F4328584E7BCA27100DAF5F4B065D52E4
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     10779
IP address blocks:        23.161.104.0/24 maxlen: 24
                          192.104.136.0/24 maxlen: 24
                          2602:f590::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:27:10:0d:af:5f:4b:06:5d:52:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=56ac343a-acf6-478b-80a6-d0b1de0c83a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:0e:55:4d:31:cb:e9:76:06:a2:39:e9:a7:
                    a9:79:1f:42:b7:f1:2a:80:ad:4d:8b:64:16:69:a9:
                    f0:2b:3e:6c:52:11:d7:80:6f:29:ad:2f:e2:38:a1:
                    62:22:86:9d:5d:2a:26:73:29:66:cb:68:4a:59:b6:
                    f7:07:fe:f3:51:32:c9:ae:16:e5:70:9e:cb:44:8e:
                    13:c9:a7:40:21:1c:f8:e1:12:40:49:77:b7:dc:06:
                    c9:78:67:c1:57:70:d6:73:21:2b:74:92:d7:bb:df:
                    e8:2d:80:c4:5b:02:91:50:f8:0a:f7:d5:0e:bf:a2:
                    b4:d2:40:27:6b:41:a3:f5:0a:c4:51:0c:1e:5b:c2:
                    da:e4:c9:4c:a2:f5:2b:da:f7:de:21:54:9c:20:58:
                    8a:94:85:a6:a1:f0:0d:6e:e7:35:b0:ee:03:9a:dc:
                    c3:e7:ba:e4:0d:ec:f7:9f:76:0c:21:9d:7f:94:73:
                    f4:ca:bc:01:b2:77:d8:77:a1:ff:c2:73:53:7f:d6:
                    62:b9:6d:20:11:fc:7a:51:9f:b5:d5:d5:2f:80:98:
                    0f:a1:1f:1c:57:e5:b8:e0:a1:55:bc:38:f7:b2:e0:
                    34:03:5f:06:15:af:73:9d:28:08:b4:ff:54:bc:8f:
                    e5:2e:3a:26:96:8e:d5:5d:d1:c1:e4:8b:10:58:a3:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A1:34:55:68:EB:9F:73:9E:9F:D1:98:46:27:A7:E3:E6:44:FF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/633d00b0-379d-3045-b69f-cbef8b659900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24
                  192.104.136.0/24
                IPv6:
                  2602:f590::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:27:cb:9f:11:e0:8c:0a:83:99:55:ac:4d:60:76:24:a6:a0:
         2b:9c:e0:9e:d2:a9:7b:24:6c:5e:1d:df:d7:21:a4:8f:3c:2f:
         63:a6:0b:d8:ac:83:99:6b:46:db:cd:d6:8e:11:c1:13:42:ce:
         e0:63:88:10:2a:bd:b7:58:95:13:fe:f8:7a:8b:27:eb:1e:10:
         19:72:19:3c:67:a9:7a:e6:5a:62:cd:c9:05:57:2b:ee:1f:2c:
         98:3f:9a:c0:d8:1f:cf:01:17:f5:96:5e:8f:b7:c7:2d:7e:80:
         3f:8f:72:66:04:1a:4f:17:e4:9a:20:b1:a2:bb:d5:cc:41:82:
         e2:33:1b:af:8f:bd:0e:98:91:5c:04:1f:36:45:47:d1:4f:8e:
         fe:00:aa:90:40:54:55:2f:ac:b2:1d:3b:be:f1:c2:80:d8:3b:
         70:30:81:5e:4e:bb:6f:9e:35:06:5f:78:80:43:c0:af:10:b9:
         bf:f1:13:30:c8:9c:d3:c4:7e:e0:b7:fe:01:c3:9a:23:b5:2b:
         0c:cf:12:88:48:37:6e:f5:a7:22:c7:3e:3e:0a:ff:03:f0:25:
         38:c6:39:40:e4:91:0d:3a:7f:58:4b:5f:4e:30:62:72:76:23:
         97:27:d6:d3:75:f9:5e:c9:b2:f0:c2:51:e3:21:90:21:d8:c6:
         80:8f:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:09 2026 by rpki-client