Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa
File:                     db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa (raw, json)
Hash identifier:          r683QpisekuWLx3GSoYgrmNf3ietKdSA/V5tiXyRt7I=
Subject key identifier:   12:7B:95:F5:06:D4:DE:B1:D2:55:FF:32:89:6B:F8:FF:DE:31:8A:DD
Certificate issuer:       /CN=750824e4-669c-4a78-911c-087bf64a7f4a
Certificate serial:       010D0C9F4328584E7FFA2F033A461F4B02EE0980
Authority key identifier: 38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     62809
IP address blocks:        23.148.176.0/24 maxlen: 24
                          23.148.177.0/24 maxlen: 24
                          104.250.224.0/22 maxlen: 24
                          136.175.232.0/22 maxlen: 24
                          139.64.128.0/22 maxlen: 24
                          206.28.180.0/22 maxlen: 24
                          2605:8c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:2f:03:3a:46:1f:4b:02:ee:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750824e4-669c-4a78-911c-087bf64a7f4a
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=6fa69a07-367e-4e9f-93a4-bc97f728f41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:8f:d0:43:a8:55:a0:12:34:63:48:f9:6e:
                    63:8b:38:00:09:db:90:76:d1:52:6e:d9:ea:9f:6d:
                    7c:46:c7:5c:eb:71:90:82:50:25:f1:fa:4a:f4:82:
                    fa:79:38:8d:b5:76:53:90:45:b9:dd:e5:35:e2:10:
                    6e:46:6e:1c:30:5a:55:d2:c1:d2:c1:8e:9f:d8:ce:
                    65:24:b5:89:f6:2f:1b:1b:f0:f3:4c:74:d1:da:ef:
                    fb:cc:25:9c:15:56:98:3c:69:30:ab:24:37:ae:5c:
                    73:52:07:f1:d4:dd:2c:91:14:a7:e2:49:9d:40:8a:
                    84:86:bd:d2:1e:c0:d7:62:d2:3b:66:80:1e:72:50:
                    09:9b:73:a4:13:5d:5b:8b:ff:10:3e:71:dc:68:7c:
                    13:77:d5:39:bc:ed:a3:c0:3d:8a:ee:2b:81:28:23:
                    9a:54:ca:c2:25:74:0a:9e:f7:2f:6b:30:ca:97:da:
                    1e:2b:56:4e:cd:16:9d:fe:79:5c:da:5e:8e:e7:aa:
                    46:a1:61:5f:94:b1:01:40:b3:40:ad:8e:43:6d:a2:
                    cd:5d:af:58:f5:e6:ff:a2:67:ad:8c:06:65:35:2c:
                    95:19:26:4f:45:12:79:0b:5b:37:95:7d:c8:a2:6c:
                    a6:e8:c6:d8:5b:bb:35:64:7e:c8:2e:89:af:57:fb:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7B:95:F5:06:D4:DE:B1:D2:55:FF:32:89:6B:F8:FF:DE:31:8A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.crl

            X509v3 Authority Key Identifier:
                keyid:38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.176.0/23
                  104.250.224.0/22
                  136.175.232.0/22
                  139.64.128.0/22
                  206.28.180.0/22
                IPv6:
                  2605:8c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:14:4e:bd:1d:04:75:3d:f0:f5:39:f7:c6:c8:e6:c6:00:
         b7:92:b0:ea:a9:56:7e:fc:e6:9b:0b:3f:a8:01:c4:cf:8c:82:
         51:a8:f1:13:25:97:e8:5f:a3:61:77:bf:25:66:09:ca:fc:48:
         1a:7a:c5:4f:cf:ef:04:78:9f:b2:fd:d9:4f:13:51:18:83:17:
         28:45:a2:0a:63:1c:bd:22:8b:a1:ff:1b:19:c1:9e:d9:10:59:
         78:a7:2a:83:95:2d:29:80:83:d0:6b:c7:49:41:81:8f:a9:51:
         e5:31:53:8b:91:25:c6:54:32:a5:51:6f:9b:80:4d:d1:ca:28:
         d3:46:b4:85:84:71:47:f4:6c:8c:db:ed:36:ef:81:de:32:82:
         d7:fe:93:91:61:9e:22:5e:f1:4b:b6:95:7d:06:1c:05:8a:1b:
         68:6f:4a:7d:ed:08:00:c2:03:57:cb:4f:0a:21:1f:04:67:62:
         25:ce:f2:94:8f:79:fd:9c:a6:14:1b:b8:4a:a7:96:5e:9b:29:
         b6:b7:f0:1a:80:5d:18:ef:d8:18:bf:0a:10:61:00:6b:0a:69:
         82:69:a6:20:cf:b3:2d:4c:5b:59:34:43:01:66:7f:b1:e5:8e:
         8c:15:df:a7:56:6c:7b:be:54:35:16:04:ff:55:90:c8:38:20:
         23:34:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:09:18 2026 by rpki-client