Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/fc23e4c7-95a8-3935-94d1-c8487b502173.roa
File:                     fc23e4c7-95a8-3935-94d1-c8487b502173.roa (raw, json)
Hash identifier:          j4mgyMMl1Jlx6T6Cetw+r1tYxHAVaK7CM2C4ckn6+lc=
Subject key identifier:   63:72:E3:CE:C8:00:C9:9E:15:5D:71:56:6B:8F:6C:E8:C6:1D:07:1C
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584E7204DF2010B3B01B20A3B500
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/fc23e4c7-95a8-3935-94d1-c8487b502173.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     31857
IP address blocks:        23.157.48.0/24 maxlen: 24
                          69.28.32.0/20 maxlen: 20
                          141.193.60.0/22 maxlen: 22
                          162.213.180.0/22 maxlen: 22
                          199.127.112.0/22 maxlen: 22
                          2604:3b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:df:20:10:b3:b0:1b:20:a3:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=b8f76147-e910-4cfe-90e8-dcc0dbd58f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:ee:67:ae:d0:04:79:c9:c0:b8:31:e1:a4:
                    27:46:d1:24:50:23:ec:bb:95:c5:c5:24:19:aa:bc:
                    bd:32:7c:eb:af:3e:bc:ae:ec:1e:cd:64:aa:e8:83:
                    3e:40:c1:36:8b:1b:03:45:0a:ab:86:55:85:ed:63:
                    db:e4:3e:90:36:9b:71:94:ec:12:b4:e0:06:46:71:
                    25:76:c4:d8:06:59:57:19:75:27:f7:fd:08:e5:54:
                    0b:be:0f:f7:cb:57:e3:a6:5f:4f:0c:6a:20:6a:4a:
                    33:8a:94:57:8d:1d:04:d4:0a:ae:af:ef:e9:3e:cf:
                    a8:ee:3c:a8:f6:60:77:59:71:ca:26:30:e3:3a:e3:
                    cf:e0:71:2e:0f:70:b6:9d:0e:ed:2d:d2:c4:6e:bf:
                    16:7b:ed:f8:65:eb:e2:b2:e4:31:dd:36:dc:72:2c:
                    8b:16:79:d3:d2:ed:c5:76:51:03:1f:57:c3:e6:ca:
                    49:85:16:93:37:fe:4a:5e:0f:f5:0b:30:4e:ca:02:
                    28:b3:1c:58:2a:75:c4:f9:18:03:5c:45:74:ba:4d:
                    6e:14:56:12:a8:7c:5f:f6:bf:3e:c9:d9:e9:8f:aa:
                    1a:a1:63:8e:6d:b8:c7:08:e3:75:8e:1d:f6:a0:9b:
                    a8:26:d5:c7:8d:a6:fb:ad:3f:eb:8c:4f:3e:71:6b:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:72:E3:CE:C8:00:C9:9E:15:5D:71:56:6B:8F:6C:E8:C6:1D:07:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/fc23e4c7-95a8-3935-94d1-c8487b502173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.48.0/24
                  69.28.32.0/20
                  141.193.60.0/22
                  162.213.180.0/22
                  199.127.112.0/22
                IPv6:
                  2604:3b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:18:87:2c:bb:21:13:9f:b7:86:57:cd:e5:00:21:46:98:e5:
         d5:6d:c3:22:dd:1f:12:95:19:9b:c9:b6:fc:5f:58:41:87:b5:
         38:d6:16:61:c6:92:01:e4:52:49:9a:78:d2:12:4e:77:e9:1f:
         72:78:14:0e:01:ba:ef:2e:cf:3c:3d:4a:20:f8:71:06:ac:28:
         0a:52:ae:37:1b:e6:c3:bb:18:69:72:47:8f:a8:81:09:98:61:
         4b:93:ef:44:aa:1a:81:30:e1:20:0d:9e:aa:17:0e:9d:c7:9f:
         b9:f5:a4:75:96:ae:ba:83:52:87:c1:cd:c4:10:39:68:ca:ef:
         cc:78:ee:e6:6f:30:22:c1:9d:d1:9f:60:6e:a0:e1:84:2b:35:
         15:a4:d1:1c:ef:d8:1a:fa:9e:1b:86:7a:59:f1:ee:cc:78:51:
         3b:8f:22:11:e5:8b:50:0d:9f:07:60:04:13:23:4e:a1:38:05:
         b2:56:f0:94:4b:9b:55:00:33:5b:8c:5b:67:30:92:e7:9f:51:
         ca:7d:26:89:4a:7a:5a:54:c0:a4:e1:dd:b7:cb:8f:df:a0:80:
         2e:dc:2d:8d:54:0a:d0:a0:4e:d3:3b:5a:61:3e:11:5c:c4:bf:
         7a:7b:0c:c8:4f:0b:52:f8:1a:20:0b:c2:92:ca:89:ab:90:f9:
         c9:5d:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:27 2026 by rpki-client