Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/171e7b26-08b7-3917-bc99-2f6f975c77a6.roa
File:                     171e7b26-08b7-3917-bc99-2f6f975c77a6.roa (raw, json)
Hash identifier:          mPPbWhz/3iUHWQhxB0CuF6EgLPrk8W9AsD1kvVk0wio=
Subject key identifier:   C9:45:EE:3A:8A:C2:BF:8A:17:99:14:50:3D:61:4F:A6:B1:EB:D3:7B
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584E978B7278F2360DF05DD3C480
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/171e7b26-08b7-3917-bc99-2f6f975c77a6.roa
Signing time:             Thu 23 Jul 2026 07:36:33 +0000
ROA not before:           Thu 23 Jul 2026 07:36:33 +0000
ROA not after:            Wed 21 Oct 2026 07:36:33 +0000
asID:                     2914
IP address blocks:        68.64.134.0/24 maxlen: 24
                          70.39.132.0/24 maxlen: 24
                          70.39.136.0/24 maxlen: 24
                          70.39.141.0/24 maxlen: 24
                          70.39.158.0/24 maxlen: 24
                          70.39.164.0/24 maxlen: 24
                          70.39.241.0/24 maxlen: 24
                          70.39.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:8b:72:78:f2:36:0d:f0:5d:d3:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Jul 23 07:36:33 2026 GMT
            Not After : Oct 21 07:36:33 2026 GMT
        Subject: CN=95c8699e-66f7-48dc-83bd-c4ea75a55a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:5d:fb:e7:5a:06:86:d6:1a:52:7d:b8:3b:
                    2a:c5:78:fe:b4:16:f2:39:16:b2:33:08:b0:2b:89:
                    11:45:6c:89:ad:6a:5f:a9:2e:cd:73:01:f1:b5:16:
                    b2:76:ab:30:b7:a2:67:b2:55:6b:03:f0:6b:1c:4c:
                    a7:b8:a4:68:ec:33:20:de:bc:40:9d:3e:4c:fd:49:
                    e2:cf:43:fd:52:50:fc:74:b5:60:b5:51:54:8b:94:
                    d8:ed:36:4a:4b:0b:7f:93:76:6b:13:58:9b:d3:35:
                    d3:6e:5c:39:3d:4a:f7:f5:bb:20:81:38:f7:03:13:
                    36:43:27:c8:18:8f:b5:3f:74:04:5b:7e:52:17:42:
                    8e:29:1e:49:8b:3b:44:2b:0f:bf:96:fe:2f:b8:b6:
                    5b:71:44:ea:c5:0d:63:c7:cd:88:27:85:11:63:f1:
                    93:b7:f5:70:ac:6e:38:34:3f:35:67:bb:16:bb:23:
                    3a:c0:55:4b:03:83:3a:f0:10:f4:20:73:5d:94:a1:
                    00:7d:3d:df:3a:2e:27:87:b3:30:99:57:83:21:23:
                    13:6a:c3:23:22:a5:11:c9:ba:93:84:ae:6d:5c:1c:
                    af:7b:ac:67:74:0b:10:0d:4b:b3:4d:f4:63:ff:5e:
                    64:3d:ce:b2:93:ef:fa:97:57:8f:f6:5f:12:b5:81:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:45:EE:3A:8A:C2:BF:8A:17:99:14:50:3D:61:4F:A6:B1:EB:D3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/171e7b26-08b7-3917-bc99-2f6f975c77a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.134.0/24
                  70.39.132.0/24
                  70.39.136.0/24
                  70.39.141.0/24
                  70.39.158.0/24
                  70.39.164.0/24
                  70.39.241.0/24
                  70.39.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:90:46:f2:2c:f6:79:78:58:4f:1c:a4:7b:14:2f:8e:a2:fe:
         2e:9e:ad:52:e5:ad:f5:96:a6:ce:d6:51:98:4b:dd:b7:8e:e9:
         c6:b3:21:bf:0a:6b:7a:06:84:29:c2:64:65:f1:ef:35:f6:60:
         f3:2d:e8:36:81:08:14:76:f5:1a:0e:df:b3:48:05:d6:fb:54:
         98:df:c0:0c:b6:3b:a1:2f:49:10:50:43:35:c8:82:42:31:f4:
         6f:c1:23:55:59:f4:b9:15:6a:a2:7f:1d:07:d2:e6:64:6f:57:
         77:30:fb:6e:99:11:32:67:6b:be:e2:a7:1f:10:dd:18:c7:81:
         52:cc:19:39:95:44:fd:10:db:5b:72:03:dc:75:03:3b:41:aa:
         be:41:4f:63:b3:98:55:7e:87:de:ef:3e:f7:cf:9d:f6:61:fd:
         88:a3:76:11:42:48:8c:a5:60:0c:23:7c:08:05:31:bc:f0:d5:
         8c:f7:db:29:eb:27:2c:2e:66:d2:89:1a:a9:37:12:d6:92:38:
         7a:43:83:ff:31:6b:4e:d3:d7:49:e2:d0:e9:3f:09:24:c0:be:
         7e:e1:84:e3:ee:99:75:4f:54:ec:3f:7e:8a:9c:67:df:58:c4:
         d8:34:bf:a4:16:7a:26:3a:f9:70:44:11:63:56:b1:bf:ad:2d:
         76:01:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:08 2026 by rpki-client