Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
File:                     74d043bc-e479-3a7a-9a76-aacaabb89db4.roa (raw, json)
Hash identifier:          /ko5HaaSHozjcFQQq0PEjFfrh+Mi6dbJgqLFZ0CP4+8=
Subject key identifier:   67:0C:82:BE:0B:8F:0C:39:39:F0:CE:6C:0B:F0:63:CF:4E:DC:CA:10
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584E815F8B7319F01126DFCA20E6
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     14445
IP address blocks:        23.136.184.0/24 maxlen: 24
                          23.137.136.0/24 maxlen: 24
                          23.137.137.0/24 maxlen: 24
                          23.137.138.0/24 maxlen: 24
                          23.137.139.0/24 maxlen: 24
                          23.170.240.0/24 maxlen: 24
                          23.170.241.0/24 maxlen: 24
                          23.170.242.0/24 maxlen: 24
                          23.170.243.0/24 maxlen: 24
                          23.170.244.0/24 maxlen: 24
                          23.170.245.0/24 maxlen: 24
                          23.170.246.0/24 maxlen: 24
                          23.170.247.0/24 maxlen: 24
                          23.170.248.0/24 maxlen: 24
                          23.170.249.0/24 maxlen: 24
                          23.170.250.0/24 maxlen: 24
                          23.170.251.0/24 maxlen: 24
                          23.170.252.0/24 maxlen: 24
                          23.170.253.0/24 maxlen: 24
                          23.170.254.0/24 maxlen: 24
                          23.170.255.0/24 maxlen: 24
                          45.42.176.0/24 maxlen: 24
                          45.42.177.0/24 maxlen: 24
                          45.42.178.0/24 maxlen: 24
                          45.42.179.0/24 maxlen: 24
                          131.143.36.0/24 maxlen: 24
                          131.143.37.0/24 maxlen: 24
                          131.143.38.0/24 maxlen: 24
                          131.143.39.0/24 maxlen: 24
                          199.127.152.0/24 maxlen: 24
                          199.127.153.0/24 maxlen: 24
                          199.127.154.0/24 maxlen: 24
                          199.127.155.0/24 maxlen: 24
                          216.73.148.0/24 maxlen: 24
                          216.73.149.0/24 maxlen: 24
                          216.73.150.0/24 maxlen: 24
                          216.73.151.0/24 maxlen: 24
                          2606:18c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8b:73:19:f0:11:26:df:ca:20:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=2abf5bd0-6c93-4490-93e7-5280d4d00f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:03:b6:7b:80:36:8c:3e:e4:84:40:8a:c8:
                    24:a4:df:13:cb:b5:32:de:a1:4d:90:a7:0c:be:2d:
                    ec:31:eb:6f:17:58:4c:8f:8d:a0:b0:55:e5:94:c9:
                    0e:d6:64:ba:b6:ee:25:3b:92:57:b7:67:dd:ea:8b:
                    21:6c:bf:92:d8:ad:73:f0:ea:f5:b8:62:bb:a7:fb:
                    55:d6:04:bd:f5:a2:e7:5d:c8:6a:00:a1:1b:16:f3:
                    3c:c6:70:b0:e7:30:e0:ea:da:8d:62:9c:cc:8e:f7:
                    b0:c8:9d:fc:ac:24:7b:0c:82:1c:af:ca:df:61:91:
                    a1:e3:bb:bf:e7:7e:37:83:9f:6d:68:05:8c:f0:d5:
                    3e:70:3a:3f:70:54:2a:3f:b6:23:e4:ad:1c:6a:01:
                    27:43:07:02:1a:33:fe:58:37:be:3d:2b:f6:1a:56:
                    0f:3e:aa:1a:01:a1:c5:19:12:63:2a:eb:91:50:49:
                    56:3f:08:7e:9a:8f:7c:64:cd:2e:54:54:5e:53:69:
                    77:77:7d:bd:59:be:b4:8a:93:3e:30:88:65:45:59:
                    7f:37:b6:05:54:a3:fe:fd:5e:f9:79:76:a4:f6:b2:
                    83:11:62:c8:2a:26:75:d0:af:1b:1b:09:93:8d:63:
                    73:8c:c8:8c:ea:dc:87:73:83:f1:17:aa:d9:f0:d8:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:82:BE:0B:8F:0C:39:39:F0:CE:6C:0B:F0:63:CF:4E:DC:CA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.184.0/24
                  23.137.136.0/22
                  23.170.240.0/20
                  45.42.176.0/22
                  131.143.36.0/22
                  199.127.152.0/22
                  216.73.148.0/22
                IPv6:
                  2606:18c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1d:8f:f3:06:18:49:d6:08:72:00:90:ae:63:5b:dc:45:a6:
         19:12:26:22:02:6c:10:fe:c1:8e:7d:88:6e:97:d8:37:ed:a9:
         9b:bf:81:c9:b0:59:45:53:94:19:62:64:f5:ad:a0:12:c0:1e:
         f9:8a:c5:8c:d2:2e:eb:47:04:0e:6c:1f:49:bb:46:b4:90:b0:
         86:ea:e6:12:92:f2:db:ed:e2:0c:a2:b8:83:b7:be:19:89:13:
         52:97:e2:0a:09:be:57:4c:1b:a5:7f:06:fc:f5:33:c1:ba:5e:
         9a:fc:53:d9:22:fd:bb:24:38:98:dc:b2:70:4d:c4:c0:ea:47:
         4a:62:4e:ef:bf:35:34:66:e7:15:0e:d1:c3:2b:3e:79:21:96:
         77:15:ea:16:24:8e:af:78:70:34:c0:b9:0f:8f:5e:14:8e:2c:
         2d:0b:bc:50:3c:f7:ba:9e:b0:91:0e:42:28:42:a7:94:52:33:
         7d:d7:ac:3e:e0:b5:ad:82:4c:7a:7c:aa:f5:54:2f:55:2d:6e:
         e1:66:03:9f:b2:52:94:6e:a8:24:28:49:89:57:36:46:7a:31:
         91:1e:80:e0:27:8e:ec:03:e6:24:5a:44:38:fc:aa:b0:e4:9b:
         11:14:c4:00:30:e4:d4:6a:cd:46:f8:89:b2:4c:42:0b:68:31:
         5e:30:7f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:29 2026 by rpki-client