Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/623a347b-0487-3c42-88a8-0190b961ea30.roa
File:                     623a347b-0487-3c42-88a8-0190b961ea30.roa (raw, json)
Hash identifier:          P3HB1loYt6OV3voyfxfa4wVYqU3ZKPhF7lB4fGRzR9Y=
Subject key identifier:   2A:34:AD:3A:C3:FD:5A:B6:0A:C6:FB:D5:E6:AB:73:A4:FD:69:C4:63
Certificate issuer:       /CN=9206a173-a090-480c-96c4-8eb781fd02a7
Certificate serial:       010D0C9F4328584E78FF7D36683635C7F31C4664
Authority key identifier: 30:1F:D4:18:B3:BB:23:2F:A2:07:D4:1C:D9:59:D6:CD:4D:C0:6F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/623a347b-0487-3c42-88a8-0190b961ea30.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     397972
IP address blocks:        216.181.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7d:36:68:36:35:c7:f3:1c:46:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9206a173-a090-480c-96c4-8eb781fd02a7
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=183cac8d-43f3-406c-bdcf-55d976cc927a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:46:f5:d1:c4:9f:d5:73:8c:d4:18:c1:2d:
                    51:02:c2:61:db:b7:30:ee:2c:4a:be:ec:8b:d0:5b:
                    72:34:ec:46:a1:e9:fe:36:d9:ed:e2:79:7e:c9:74:
                    bc:e3:eb:db:1e:46:30:d0:71:df:df:53:f3:e7:fd:
                    9f:a8:9c:06:d0:72:61:5f:44:68:a4:13:73:33:6f:
                    fc:4d:27:27:0e:f4:d6:37:56:da:98:8c:d1:67:31:
                    5b:67:19:5e:c7:2b:90:e5:f0:e5:7b:f7:57:d1:30:
                    c1:d3:c8:ef:6d:40:b7:c1:c2:96:45:b1:fc:55:80:
                    9c:25:44:23:94:8c:3c:c7:8f:05:80:0c:d6:19:54:
                    af:16:ab:86:8e:4d:5f:a9:65:fb:9c:a5:7a:0b:63:
                    1b:56:df:0c:c6:88:67:bb:c9:8b:ed:1f:70:5d:88:
                    24:e7:68:15:f4:27:97:b5:c0:1f:08:01:a1:3f:81:
                    7d:6a:98:4a:66:d4:30:e6:a4:50:77:44:1d:5d:2f:
                    9a:95:9c:9b:01:6f:bc:7d:85:90:b8:05:92:5c:4b:
                    78:7d:2c:e8:69:13:4b:0a:93:1e:0f:1f:6d:21:0c:
                    9d:03:a1:5d:8d:72:18:53:33:7d:41:2f:2b:c0:8f:
                    45:b4:94:c5:ff:5b:6d:3d:ed:74:3b:99:4a:f9:9c:
                    b3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:34:AD:3A:C3:FD:5A:B6:0A:C6:FB:D5:E6:AB:73:A4:FD:69:C4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/623a347b-0487-3c42-88a8-0190b961ea30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.crl

            X509v3 Authority Key Identifier:
                keyid:30:1F:D4:18:B3:BB:23:2F:A2:07:D4:1C:D9:59:D6:CD:4D:C0:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:01:3b:28:be:2c:51:d4:be:b3:d4:10:1c:38:f2:8a:09:fe:
         42:29:4a:31:70:38:ca:64:24:87:42:99:6a:c1:77:9b:b8:fe:
         02:36:27:5a:13:8b:74:a7:6c:e1:d5:cf:32:aa:4d:47:94:33:
         63:85:9f:c2:52:74:4d:61:84:f7:36:ad:52:c3:df:e5:dd:4e:
         96:9a:40:e5:aa:26:cf:e5:d2:f4:d3:a4:2f:5a:ab:02:98:cf:
         8f:10:58:f1:de:1b:b2:ee:3f:a1:29:c0:c8:2f:9d:08:15:a9:
         05:b7:37:2d:fb:c9:df:57:03:16:f0:01:ce:c8:eb:2e:7d:ee:
         5a:51:fa:23:6c:56:ee:4e:33:25:a2:12:dc:14:7d:1a:c9:da:
         2b:71:e1:3f:a0:41:cd:37:3d:da:5c:e6:72:87:a0:77:dd:1b:
         26:92:6d:72:11:13:d6:28:35:b8:71:d0:9c:c2:54:ed:3d:cc:
         59:5f:c2:b4:a8:89:53:41:f2:3c:bc:b5:ef:ca:d9:0f:0d:40:
         b9:44:b4:1a:62:68:de:65:6b:46:3e:dd:89:2e:60:87:93:67:
         d5:c3:6c:0b:4c:26:78:84:0f:fa:63:33:95:0b:f0:0f:dd:5f:
         02:e5:92:14:6c:82:96:4f:7d:f2:da:ce:ee:30:d5:50:e1:ff:
         9c:8c:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:43 2026 by rpki-client