Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/b1547ffa-734c-34e5-812b-60675d959099.roa
File:                     b1547ffa-734c-34e5-812b-60675d959099.roa (raw, json)
Hash identifier:          tYmHy66K3YlzyENGH/K5xd/RehkOsnjADMKft6xtS7U=
Subject key identifier:   72:9C:1B:C1:B3:09:C3:32:41:30:FC:8C:E3:07:B9:61:5E:9D:AC:80
Certificate issuer:       /CN=ea689b24-e9a5-4734-a9cb-40111905098c
Certificate serial:       010D0C9F4328584E50848AA579AEA0A9BAB3A500
Authority key identifier: 41:6E:84:73:EB:0A:C9:C1:0E:A7:FC:15:71:DB:48:E7:04:8C:2A:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/b1547ffa-734c-34e5-812b-60675d959099.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     27239
IP address blocks:        24.235.1.0/24 maxlen: 24
                          45.74.254.0/23 maxlen: 23
                          45.74.254.0/24 maxlen: 24
                          45.74.255.0/24 maxlen: 24
                          68.67.114.0/24 maxlen: 24
                          168.245.138.0/23 maxlen: 23
                          168.245.138.0/24 maxlen: 24
                          168.245.139.0/24 maxlen: 24
                          199.247.86.0/23 maxlen: 23
                          199.247.86.0/24 maxlen: 24
                          199.247.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/ea689b24-e9a5-4734-a9cb-40111905098c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/ea689b24-e9a5-4734-a9cb-40111905098c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:8a:a5:79:ae:a0:a9:ba:b3:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea689b24-e9a5-4734-a9cb-40111905098c
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=c6ec15dd-db69-4b54-97b0-68de3c622e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5d:aa:40:7f:80:ce:f9:af:9c:b5:03:50:30:
                    cb:75:ab:98:a9:c1:8e:18:d1:2b:41:f5:67:0e:36:
                    97:c4:f5:54:bc:1e:0a:df:ba:2e:e9:7f:22:76:c2:
                    c5:9f:65:f6:35:4d:7f:0f:ed:cd:6c:15:2b:04:40:
                    32:a6:7a:f4:11:0e:10:6a:5f:03:e3:8f:6c:9d:c6:
                    f6:8a:18:c7:b2:8d:c7:a7:a0:46:93:5c:8a:a8:2c:
                    79:52:47:1a:3e:9b:ed:f9:0c:3a:54:fb:53:b0:a4:
                    49:21:ca:78:1b:94:ea:83:6a:12:5e:c7:20:8f:dd:
                    7c:2b:e2:5f:0f:bd:6d:23:54:f8:e6:68:96:c2:a4:
                    a3:17:00:09:92:a2:61:f0:ed:4f:f8:8b:a2:58:c0:
                    6d:e0:fc:12:e1:5c:7f:13:d6:27:40:fa:6f:35:ef:
                    6c:e9:64:79:3a:35:0e:32:9f:5b:aa:bd:b0:d5:1b:
                    9d:f6:a6:7b:03:6c:e8:97:36:ba:88:f9:fb:2f:a6:
                    b9:8b:50:d8:65:b8:f2:77:a6:7b:dc:0a:1f:27:c8:
                    23:d1:61:95:44:2e:a9:84:1b:87:08:08:2f:bb:90:
                    94:b2:61:12:cf:c9:ec:6f:4b:41:da:c3:46:a9:32:
                    8c:57:36:82:36:8d:65:36:90:c9:86:ac:09:38:ba:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9C:1B:C1:B3:09:C3:32:41:30:FC:8C:E3:07:B9:61:5E:9D:AC:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/b1547ffa-734c-34e5-812b-60675d959099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/ea689b24-e9a5-4734-a9cb-40111905098c.crl

            X509v3 Authority Key Identifier:
                keyid:41:6E:84:73:EB:0A:C9:C1:0E:A7:FC:15:71:DB:48:E7:04:8C:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.235.1.0/24
                  45.74.254.0/23
                  68.67.114.0/24
                  168.245.138.0/23
                  199.247.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:6d:95:a4:67:7c:f1:ba:b6:a7:be:5c:71:ac:aa:64:b9:
         26:fe:f7:33:4b:5d:c8:fb:41:82:a3:b9:10:f7:53:db:10:cf:
         cf:43:63:95:68:ca:1e:57:78:da:e0:5a:59:35:f6:31:75:a9:
         9d:73:03:cb:fc:7c:32:62:62:ea:77:06:dd:fe:70:79:0e:85:
         72:dd:af:aa:74:03:34:14:8d:91:f0:ca:a0:8c:19:aa:da:3f:
         09:54:ba:c6:ed:6a:bf:97:d3:a2:92:49:89:35:05:58:69:17:
         1c:bc:76:1a:38:37:ce:2d:04:08:13:af:a6:37:b3:21:c2:8c:
         5e:1d:6c:5b:9d:5b:ca:1f:cb:d5:a2:13:89:5e:d8:96:c5:c8:
         15:ab:d7:ea:09:69:4b:57:15:f0:44:e3:05:f9:98:a2:f8:02:
         d9:c1:d0:5f:2e:70:44:24:42:b9:34:a6:35:8e:49:d4:43:98:
         2b:d0:56:fc:88:58:15:56:74:05:2e:c4:86:cf:57:1e:db:f3:
         47:54:9b:26:52:f4:d0:94:e4:30:0d:f5:62:50:4a:22:20:77:
         2f:41:d0:a2:03:32:ff:e6:10:07:3d:90:f9:39:cd:00:9e:13:
         17:6b:ca:cb:72:ce:bf:45:93:d3:17:53:d0:09:62:7d:1e:e0:
         34:2f:4f:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:32:57 2026 by rpki-client