Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983/a70a5693-0ea4-3c9d-a8c2-954997a73b5c.roa
File:                     a70a5693-0ea4-3c9d-a8c2-954997a73b5c.roa (raw, json)
Hash identifier:          epms72LnpdtDGt25NUddBY4rHDJ/vJl4ecwBWKy6Juw=
Subject key identifier:   8A:A3:96:FE:3C:E4:15:9C:2A:2A:F8:58:C5:F7:A6:CF:8F:33:C0:61
Certificate issuer:       /CN=7f62e981-4965-451e-b87a-44eaf4e22983
Certificate serial:       010D0C9F4328584E534F392020AB6F8DFE484940
Authority key identifier: 17:BE:1B:72:BC:B0:12:90:02:A1:B3:97:42:E2:EF:0C:38:4A:E8:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983/a70a5693-0ea4-3c9d-a8c2-954997a73b5c.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     17217
IP address blocks:        23.140.92.0/24 maxlen: 24
                          2602:f62a::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983/7f62e981-4965-451e-b87a-44eaf4e22983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983/7f62e981-4965-451e-b87a-44eaf4e22983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:39:20:20:ab:6f:8d:fe:48:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f62e981-4965-451e-b87a-44eaf4e22983
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=be648e24-61fa-488f-b678-ceb81bfe5922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:e8:a0:2e:da:42:10:c8:3d:29:21:54:9e:
                    5d:57:0d:91:f1:f2:c6:da:54:b2:43:a7:e7:b0:81:
                    4c:40:a0:89:32:53:5a:8f:1d:ad:2a:1e:55:8d:b2:
                    8b:ff:38:cf:ce:54:9a:2d:d4:93:ad:e5:36:b5:a5:
                    6a:fa:4f:a0:47:f4:67:4c:53:2d:66:81:4d:ce:82:
                    eb:3b:50:25:fd:79:3d:eb:a5:58:e3:3a:13:f9:94:
                    a5:71:68:ae:3b:09:7a:b6:4b:19:1b:3e:f2:97:0c:
                    25:b2:7c:66:60:1c:19:5b:be:0c:ab:ce:bd:8b:6e:
                    8e:3f:57:cd:d7:c0:73:25:1a:0a:f5:eb:89:75:c5:
                    0c:0e:17:f5:62:8d:a5:ce:2f:64:93:26:b7:cd:8b:
                    a0:e8:99:88:2b:d0:0e:fd:4c:9a:99:4d:92:3f:b3:
                    06:36:3f:58:ff:dc:5a:0e:51:bc:d3:32:d6:ce:f0:
                    4b:85:97:de:e9:a0:ab:77:ae:61:a9:af:2c:66:63:
                    a2:1f:ed:e1:43:e3:f1:d5:ad:c4:5b:69:2d:4e:ae:
                    7d:83:75:f5:83:b8:a5:e9:14:f1:0b:11:05:d2:a0:
                    da:1c:af:64:3d:67:29:ec:28:56:4b:00:d6:23:2b:
                    94:3d:97:a5:00:4a:61:6a:3d:24:22:cc:fc:40:91:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A3:96:FE:3C:E4:15:9C:2A:2A:F8:58:C5:F7:A6:CF:8F:33:C0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983/a70a5693-0ea4-3c9d-a8c2-954997a73b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983/7f62e981-4965-451e-b87a-44eaf4e22983.crl

            X509v3 Authority Key Identifier:
                keyid:17:BE:1B:72:BC:B0:12:90:02:A1:B3:97:42:E2:EF:0C:38:4A:E8:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7f62e981-4965-451e-b87a-44eaf4e22983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.92.0/24
                IPv6:
                  2602:f62a::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:25:7c:c0:82:c0:f7:f4:7f:bf:13:49:b4:7a:ae:39:79:
         51:d8:10:77:23:d8:6e:59:7c:90:4a:d8:ca:60:2a:6b:96:67:
         e3:58:1c:e5:0b:e7:bf:2a:3e:03:6c:b9:d8:e5:64:d2:fd:b4:
         4e:a8:73:22:9a:30:a6:32:1e:e5:28:bd:35:16:e8:09:3a:82:
         eb:f0:7b:1a:5a:c3:8a:d5:b9:2b:3b:e0:9f:d1:5a:0d:5f:74:
         0b:92:08:c8:bf:16:e1:da:45:b0:a2:04:76:85:77:4f:98:48:
         e2:74:73:51:b8:73:cc:43:9d:91:ce:08:8a:53:38:6c:e3:9a:
         2a:24:af:09:5d:77:c2:7f:ed:52:64:11:e7:0b:de:7c:78:0b:
         f6:37:96:b0:b1:0e:c5:63:a4:f9:54:8b:b3:1a:58:05:c0:ea:
         07:dd:34:27:a0:b1:ed:e4:c2:68:06:f9:16:c7:f7:f5:13:f9:
         18:1c:1b:e4:cb:47:54:26:f9:73:a7:7f:88:8b:d3:e6:82:c8:
         6b:c3:69:3f:5d:72:89:65:5d:ae:d2:69:de:a6:6d:32:02:01:
         c3:55:b9:56:1c:be:ec:20:59:96:e2:5a:12:f2:d1:00:62:fb:
         64:09:5c:99:b8:51:6a:9e:8e:40:3e:ff:2b:ff:9b:63:36:a7:
         9b:e0:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:48 2026 by rpki-client