Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa
File:                     46773a05-ae39-36bd-a950-0d64b5b7e334.roa (raw, json)
Hash identifier:          Soox2L6f0OhjvTiOCRccxbcalhmkYO657zz/hoFX5Nk=
Subject key identifier:   EE:4C:01:5C:14:3B:0B:25:07:3D:E7:9B:A2:CA:16:45:68:4A:7E:4B
Certificate issuer:       /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Certificate serial:       010D0C9F4328584E6F3A20C777E8508412538B80
Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     17017
IP address blocks:        23.247.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:20:c7:77:e8:50:84:12:53:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=9406743a-d559-445f-848e-1c15f5b333bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:b3:3b:d4:a1:86:2b:88:4d:23:d5:fe:57:
                    d3:14:5f:d6:1b:d8:e4:8f:e0:2d:36:fa:78:0c:67:
                    e0:d6:8e:df:6a:a4:2f:25:8a:99:de:32:b1:d4:b3:
                    e9:c5:8b:d2:7f:95:00:4a:34:e8:f8:ee:24:64:bd:
                    84:03:29:51:fc:90:9c:8e:8a:a7:44:9b:f0:9a:d6:
                    c2:19:2e:93:af:01:78:33:cb:bb:84:0c:5c:9d:e5:
                    51:8c:bc:95:29:b7:94:59:5f:90:85:8e:df:ca:af:
                    48:92:94:90:90:07:c7:00:cb:fd:a4:e5:ac:df:30:
                    24:9c:40:f8:43:59:4d:54:00:fe:0f:5d:36:88:f4:
                    22:10:ab:9b:5c:cc:0c:84:de:94:da:ca:e6:b6:b2:
                    71:ba:4b:05:a8:53:c9:67:dd:ed:73:3f:b9:c3:58:
                    aa:17:f0:4c:1c:c2:bf:54:fb:7a:f3:88:22:c8:fa:
                    93:7c:0a:c1:26:e9:3f:4b:85:d7:50:37:d1:2d:9c:
                    ae:54:4b:d9:37:20:4e:1f:b4:9e:89:8e:3a:89:73:
                    0c:ed:3e:10:f0:8a:98:dd:a9:b2:8e:08:5a:7d:86:
                    3f:5c:b3:d7:c6:2d:d9:c5:27:c1:a0:70:86:80:a1:
                    33:59:40:a7:45:34:02:6f:96:af:08:15:25:98:17:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4C:01:5C:14:3B:0B:25:07:3D:E7:9B:A2:CA:16:45:68:4A:7E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:03:73:f9:03:52:a0:c5:04:b7:ef:69:00:85:99:fc:fa:a7:
         48:f5:09:9d:7a:75:f0:8c:17:68:a1:75:9a:66:32:49:e4:46:
         e6:09:9e:ec:0a:83:12:ad:c7:c0:50:0c:ce:55:bf:e9:f3:d4:
         45:e8:40:37:04:c6:30:b5:c4:f3:8d:b5:3d:6b:d6:32:bd:ac:
         03:9a:47:07:1f:8e:5e:27:a2:aa:92:dd:e7:34:51:b7:c0:fe:
         bd:d2:0d:36:36:ab:12:d4:a0:d2:9b:6d:0b:d2:e9:06:47:c0:
         cb:af:9a:eb:c0:f5:78:30:d6:0f:bf:bb:a8:39:03:5e:d4:14:
         87:41:86:05:c0:3c:29:22:33:71:5d:ba:c7:c6:f7:d1:d5:23:
         eb:49:c7:39:de:37:0a:9e:85:41:24:39:3e:13:73:50:6e:4c:
         49:7f:48:67:a5:0a:7e:c5:e8:27:5b:ff:a1:5f:0f:64:31:59:
         a0:05:e4:6b:5d:48:b3:65:8d:8c:17:ae:dc:9a:60:18:48:bf:
         d7:92:3e:87:5e:5b:f4:f4:6f:ea:22:01:32:68:84:08:ba:60:
         7c:77:f3:d9:0e:d0:a0:1f:d3:86:81:5f:51:83:ab:11:5f:b1:
         d4:5d:99:f4:2a:81:0d:f2:43:8a:1b:23:2b:d3:a7:01:a9:64:
         79:40:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:43 2026 by rpki-client