Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa
File:                     4f62ed94-cb56-3676-93b3-049015d9490b.roa (raw, json)
Hash identifier:          MpukrTbHCK/gU5slxFxI1j8muZDjU4V5WodB4l/xEDc=
Subject key identifier:   88:7D:AC:72:F0:0A:11:3C:DB:02:44:C8:FE:3E:84:7D:8C:25:A6:B1
Certificate issuer:       /CN=0b35d1e4-863f-4e5d-8b1e-cda81c416971
Certificate serial:       010D0C9F4328584D237A1593A1EBF7CC72C574C0
Authority key identifier: E0:31:9F:31:68:22:28:34:85:A0:F3:9E:85:A7:6F:AA:E7:D9:28:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     6939
IP address blocks:        23.171.48.0/24 maxlen: 24
                          172.111.40.0/22 maxlen: 22
                          2602:fcd7::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:15:93:a1:eb:f7:cc:72:c5:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b35d1e4-863f-4e5d-8b1e-cda81c416971
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=7732b117-550b-4c27-a22f-a0a4a97a7970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:29:2b:e6:a4:99:f3:29:86:dd:be:56:ae:29:
                    76:83:dd:a4:57:a7:91:af:d7:58:1e:dc:f6:a1:9a:
                    3a:92:6b:b6:d5:32:3d:03:8c:19:cf:35:a2:51:53:
                    eb:b3:11:13:b8:51:a4:15:ee:ae:c6:cf:a2:64:4e:
                    af:9d:6c:91:f7:7f:6f:91:dd:33:c0:34:eb:c0:25:
                    b5:6b:ae:9f:c8:5a:30:5b:6a:c3:02:43:99:f2:df:
                    3e:72:d2:73:db:18:e6:70:82:fb:19:ae:fc:ab:7a:
                    8f:fc:92:be:39:42:fc:85:57:3e:4e:cd:c8:52:f1:
                    d0:db:32:32:fb:a1:26:bf:11:fa:c0:31:b9:26:61:
                    0d:1e:18:36:cc:69:45:24:9b:88:1f:89:e2:c0:ef:
                    1b:c4:fa:41:a6:e3:82:6c:66:ef:3f:7f:53:6e:7d:
                    da:61:fb:e1:82:ae:13:c4:b5:18:6f:ca:b0:3e:04:
                    55:4d:85:7d:61:04:05:9b:68:52:dd:ec:28:b2:dd:
                    0a:e5:02:ab:fe:94:d7:f0:e1:20:5c:61:13:f3:e0:
                    df:e4:f1:8b:24:1e:a0:fe:42:08:80:2f:67:9f:16:
                    96:c2:41:5f:bb:21:0a:aa:cc:4d:25:81:6c:7b:77:
                    c7:a6:b9:92:f7:a5:46:58:20:e0:b8:71:ca:3e:58:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7D:AC:72:F0:0A:11:3C:DB:02:44:C8:FE:3E:84:7D:8C:25:A6:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.crl

            X509v3 Authority Key Identifier:
                keyid:E0:31:9F:31:68:22:28:34:85:A0:F3:9E:85:A7:6F:AA:E7:D9:28:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.48.0/24
                  172.111.40.0/22
                IPv6:
                  2602:fcd7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0c:3e:a3:cf:cc:6d:2e:67:30:0f:7f:71:14:34:19:1d:45:
         cf:5f:7e:d7:28:76:11:27:76:85:66:86:e6:2c:ef:1a:a9:43:
         ad:0b:00:ce:e3:43:bf:c1:c1:a2:8e:f4:4b:38:1b:21:87:a6:
         86:2a:74:88:94:bb:67:c2:8d:e1:9c:d4:f1:13:59:5a:e1:87:
         d9:2a:27:bd:bb:ad:d5:12:72:ef:51:49:cb:22:9c:12:58:c6:
         d7:9b:7f:ee:44:0b:38:19:cb:ad:3e:10:67:57:e0:ef:89:9d:
         f1:f3:32:5e:de:e8:e7:51:c9:59:b5:1f:8c:fe:81:e3:dc:de:
         a7:46:d0:f1:90:7b:6c:15:54:ad:bb:65:b7:18:3e:f6:93:db:
         5a:ce:7e:3c:7d:3f:d5:28:dc:4b:e1:d6:f2:36:5d:00:fd:48:
         a2:53:cc:51:86:b8:d3:03:99:4c:fb:5c:85:dd:0f:12:a5:8d:
         7b:33:30:6f:bf:8f:5c:42:c4:9b:2f:51:3e:15:15:ff:ef:e9:
         95:c7:ee:5a:e4:a1:0f:58:70:ff:1b:c0:ca:43:b0:36:da:eb:
         84:79:96:04:63:01:e3:08:eb:d0:11:b3:dc:22:27:8d:43:da:
         f3:c3:ad:b2:6a:5d:de:c7:3d:de:00:de:2d:1e:72:0e:4e:17:
         57:95:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:57 2026 by rpki-client