Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa
File:                     4775f2f1-0661-3006-a1eb-a486c369f840.roa (raw, json)
Hash identifier:          40SnMbLqxCQ5NtBcJF+68gvkhsY5doisiHtpNPw0pvE=
Subject key identifier:   6C:08:40:A4:CC:A8:7E:C9:A6:F7:3E:D2:BA:6B:05:25:8A:DC:2E:5E
Certificate issuer:       /CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a
Certificate serial:       010D0C9F4328584E90BA53C76EB52DCCC9538244
Authority key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     203939
IP address blocks:        23.136.116.0/24 maxlen: 24
                          2602:f6a7::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:53:c7:6e:b5:2d:cc:c9:53:82:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=a79bc6f9-9fdd-4137-b5f0-0173d3f4f468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:17:64:3b:ec:67:36:c9:d6:70:10:02:f2:a7:
                    13:25:d7:c3:23:e3:05:01:90:fd:91:d8:8c:36:b1:
                    6b:1a:04:40:82:9d:af:63:06:3c:bb:13:68:48:c1:
                    ae:27:47:28:ec:5b:56:36:1a:34:79:4a:91:f0:dd:
                    dd:17:cd:24:54:64:89:0b:f7:eb:db:43:87:15:85:
                    5b:7f:75:92:bd:50:27:95:20:3a:b8:0e:bb:86:20:
                    e3:c2:fe:3e:55:3a:3d:33:db:f4:03:bf:69:9c:ea:
                    fa:d6:de:5b:74:29:d8:67:93:91:5a:44:0e:45:2b:
                    8e:95:ae:ac:63:6d:6c:fa:75:d9:8e:7d:fc:3f:5c:
                    83:62:56:7a:83:ab:89:17:b9:45:bc:09:1b:c2:7b:
                    2a:da:1c:ca:9b:de:f2:77:db:19:98:41:6a:53:0c:
                    18:96:46:c7:75:f0:d1:eb:7e:a5:81:93:24:14:10:
                    67:ab:7a:b0:04:3d:46:06:5c:33:e6:b0:05:96:d0:
                    df:d1:c3:28:3e:b8:a5:1a:ad:ac:9e:e8:0f:c8:f4:
                    38:c5:3a:05:dd:06:56:7e:60:77:f6:ba:a0:40:17:
                    b7:05:c0:97:c5:1f:c6:62:64:f0:32:71:f1:3b:77:
                    72:1d:25:c9:63:eb:dc:b1:30:37:92:3a:59:ea:55:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:08:40:A4:CC:A8:7E:C9:A6:F7:3E:D2:BA:6B:05:25:8A:DC:2E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl

            X509v3 Authority Key Identifier:
                keyid:45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.116.0/24
                IPv6:
                  2602:f6a7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:2d:35:23:10:5e:2b:8f:14:87:04:9e:54:24:64:83:a8:
         ff:a4:2b:3b:9d:ff:f2:31:09:82:af:2d:c0:6f:ee:9d:00:2d:
         24:5f:a0:be:e8:78:6d:45:1b:59:ee:64:0a:cc:09:cf:c2:e8:
         3e:ad:fb:2b:8f:9c:5f:ba:d1:3f:11:78:e9:29:cf:c7:db:62:
         05:69:ef:71:8b:bb:31:fe:2b:82:90:37:61:0d:be:9d:d3:03:
         92:d3:2c:26:fe:d6:a5:10:58:8e:b9:0b:d0:fd:18:61:11:24:
         01:43:d9:26:15:be:83:28:53:dd:15:b1:de:c6:81:37:22:e2:
         a7:d8:d6:56:81:1c:50:0a:f4:20:31:0d:cd:cd:24:e7:65:dc:
         f8:f8:86:79:78:f0:e1:78:e2:be:b0:e1:96:20:17:37:a2:13:
         7d:bc:2f:1a:38:61:df:91:82:ba:47:a5:f7:11:29:a2:9b:79:
         66:37:d7:84:d8:8f:be:3c:e8:a1:da:13:e0:64:72:32:b4:df:
         7a:e8:67:20:e3:57:5b:ea:46:77:6a:bb:d4:95:95:a8:3d:71:
         0c:21:46:22:04:74:ed:fe:eb:57:27:b1:87:85:10:ed:5c:39:
         83:d2:37:71:c9:1c:f8:00:6a:74:3f:52:88:c4:8a:5e:98:ed:
         12:9d:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:44 2026 by rpki-client