Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/0a0939c5-1b59-3d67-9479-9f9bfdfb60a5.roa
File:                     0a0939c5-1b59-3d67-9479-9f9bfdfb60a5.roa (raw, json)
Hash identifier:          kX2GF/fK1HceunQthJKzBYb+0A8Ko8/xFAZ8Aa6I/To=
Subject key identifier:   7E:6C:D7:33:D0:B1:E1:D2:E3:69:9A:73:58:90:08:CC:79:AF:93:02
Certificate issuer:       /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Certificate serial:       010D0C9F4328584E7FFA39D77E48F61A59726380
Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/0a0939c5-1b59-3d67-9479-9f9bfdfb60a5.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     398496
IP address blocks:        23.134.176.0/24 maxlen: 24
                          45.41.208.0/23 maxlen: 23
                          66.248.247.0/24 maxlen: 24
                          2602:fddd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:39:d7:7e:48:f6:1a:59:72:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=6ba3de44-f838-45c0-9da5-55ed984885ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:c2:98:18:8d:b4:b7:d6:6a:8e:72:f6:a1:
                    37:35:38:ec:01:0e:74:cb:c2:90:fe:b8:1e:57:fb:
                    72:91:bc:26:21:5d:03:d9:f6:30:05:2d:8e:a4:84:
                    5e:88:f6:99:62:c9:d7:48:da:ef:90:3a:8c:0d:50:
                    51:3a:99:d1:49:8a:a3:39:47:8a:42:c8:64:e2:16:
                    95:48:36:c3:9a:40:df:ad:d7:69:14:8b:09:b3:41:
                    3f:51:52:4c:2e:95:39:ed:e6:a8:52:03:19:3f:c6:
                    f4:87:1e:95:05:f9:dd:c7:ed:a9:58:2d:db:2a:7e:
                    1d:74:2e:8f:9e:a2:1a:1c:4f:0e:96:1c:45:1b:9b:
                    ec:3f:f8:ea:ea:07:2b:d2:6b:ae:18:fa:43:8e:ed:
                    32:a0:cb:08:32:24:a8:ab:31:d8:86:21:28:d9:d3:
                    72:00:7d:3f:69:cc:ce:c0:24:ec:de:68:6d:d1:9c:
                    30:ed:2b:15:20:f0:e8:3c:16:c5:16:7f:86:37:16:
                    d2:7f:b5:82:c7:31:8d:66:6a:1c:c8:57:35:95:ba:
                    b8:1a:28:25:82:6f:ef:c1:b6:96:76:f4:a2:e8:80:
                    84:0f:f6:a6:a9:cf:be:5e:7a:3a:c2:bd:42:8c:a5:
                    26:c2:76:51:ea:6e:72:fd:a3:8e:aa:b1:c4:bc:a0:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6C:D7:33:D0:B1:E1:D2:E3:69:9A:73:58:90:08:CC:79:AF:93:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/0a0939c5-1b59-3d67-9479-9f9bfdfb60a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl

            X509v3 Authority Key Identifier:
                keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.176.0/24
                  45.41.208.0/23
                  66.248.247.0/24
                IPv6:
                  2602:fddd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:26:34:12:02:97:1a:09:8b:91:fd:16:bf:e7:16:f6:26:14:
         71:7b:7b:6d:94:f5:60:53:72:dc:b8:34:8b:1d:fc:6f:6e:4c:
         8e:91:a3:26:a0:37:7e:3c:3d:14:ba:1e:7e:e3:17:e1:58:f7:
         43:5e:07:e5:3b:6e:4f:b7:3e:ca:97:8d:92:4b:81:63:cd:c9:
         15:b5:16:76:42:7b:3c:09:d3:b0:25:09:c7:e3:ff:ba:23:51:
         40:93:ae:57:4c:e2:e2:d9:69:19:8b:bd:40:7c:82:d3:22:94:
         f3:20:f4:40:73:50:0a:96:3d:18:50:0d:bc:22:3a:b8:71:14:
         e0:b2:fc:96:8c:07:cd:a5:5d:23:37:8c:4d:d1:ec:de:2c:1e:
         3a:d3:f3:ce:82:24:91:20:95:ba:d7:6e:dd:5d:e1:0a:36:a5:
         8f:a7:6c:9b:9a:57:ab:a1:fd:ff:56:fa:b5:08:72:f7:fc:34:
         2b:a1:14:97:a0:15:3a:62:63:4b:b7:5d:1d:5d:50:d3:0e:d5:
         05:a2:59:56:cd:95:dc:6c:f2:a9:9d:5f:96:1b:43:56:3b:59:
         ba:a8:ce:5c:46:ef:f4:da:68:10:cf:73:5d:5b:cd:be:84:ce:
         a5:59:d5:51:9c:f4:3a:ce:a9:ce:8e:bb:67:07:0f:63:52:8f:
         c7:01:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:26 2026 by rpki-client