Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa
File:                     d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa (raw, json)
Hash identifier:          CpVhtFAcRVFE0aZEtWTnnHOlPdGb4Hq/MsKlDuBgunw=
Subject key identifier:   7A:63:FA:6B:B0:4A:0E:76:3E:23:9D:D2:7A:A1:AD:0C:19:10:A9:53
Certificate issuer:       /CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7
Certificate serial:       010D0C9F4328584E4824B99A6610BE0514B50A00
Authority key identifier: 6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     14691
IP address blocks:        23.135.100.0/24 maxlen: 24
                          2620:d4:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:b9:9a:66:10:be:05:14:b5:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=4836db99-a9ba-4e8d-8ca4-ed838d93068e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:0a:6d:0c:8c:c2:00:0d:c0:ae:f8:a3:fe:a9:
                    8c:28:6a:6e:8f:68:3d:ca:1d:50:8c:30:b7:00:ec:
                    b4:0f:bc:5f:b7:65:c5:a7:08:19:30:cd:87:df:b0:
                    11:c7:e8:0a:5e:4c:8c:80:59:07:79:52:d8:60:43:
                    51:b0:f5:29:15:91:e3:df:9d:be:22:d4:19:4a:ed:
                    d0:b0:c1:c5:48:2c:27:5b:ac:8a:23:9f:66:99:40:
                    62:bc:1b:9b:a8:23:74:fa:31:e1:a4:ba:98:24:73:
                    f3:80:87:bb:a3:42:f9:c0:fd:6e:15:1e:f5:38:ba:
                    8a:c6:00:03:c5:19:7e:32:a2:6d:83:89:e2:22:3a:
                    62:9e:a6:70:36:04:43:f8:00:22:97:b1:6c:a3:a7:
                    f9:ad:d1:30:1f:41:ad:c1:4d:2b:dc:c3:ba:f3:33:
                    97:a3:24:ad:8c:c1:c4:78:86:f3:08:02:4f:31:12:
                    35:eb:fd:76:fe:f8:55:33:fd:84:60:8d:ba:c9:47:
                    72:4b:10:62:b4:6f:5b:56:8a:ae:a4:a1:68:b2:bb:
                    c8:2e:d3:f1:9a:9a:c6:81:93:c5:ce:d3:67:6c:67:
                    15:a7:5b:4f:32:9e:f0:12:2f:72:f7:c8:f9:f5:ad:
                    8e:ed:dd:f9:ab:f5:04:01:1c:27:11:5c:84:e5:da:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:63:FA:6B:B0:4A:0E:76:3E:23:9D:D2:7A:A1:AD:0C:19:10:A9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.crl

            X509v3 Authority Key Identifier:
                keyid:6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.100.0/24
                IPv6:
                  2620:d4:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:4e:b2:4b:e7:35:1d:e4:dd:89:e3:b4:77:65:45:70:c7:
         7d:56:fc:3c:fd:d8:62:e7:ac:7b:76:55:f6:6a:72:c8:b9:59:
         9e:f9:56:ae:5d:b5:90:bd:fc:c5:1b:06:df:39:44:85:6b:0e:
         0d:21:d5:bd:a6:03:ea:3c:ee:db:f3:1b:1d:42:84:e3:e1:cf:
         f7:df:f3:0a:31:a3:ab:25:a8:b6:34:64:41:58:b0:65:84:ff:
         c2:ee:a1:4e:75:9a:b8:ce:ab:34:48:50:3e:df:ad:9d:91:8b:
         d1:f8:16:fc:f0:59:08:87:b5:34:af:8d:f0:27:6e:ff:f8:83:
         d3:78:02:31:27:1c:44:de:37:b5:2c:23:aa:75:24:25:6d:bf:
         db:87:c0:c3:d6:a9:d2:92:8f:3f:80:50:d1:4c:bd:bf:57:76:
         14:5d:fb:ba:3f:59:66:f6:df:ec:30:91:69:a9:c8:2f:0e:6b:
         74:b0:a0:e6:66:01:c7:9e:fa:7b:dd:61:84:e2:6f:58:93:dd:
         2f:17:5d:8a:4a:99:75:46:ba:c9:7d:79:e9:2b:c3:be:0b:98:
         50:8d:04:4c:ac:13:54:97:11:bd:ea:5e:8e:e0:a7:da:07:51:
         2e:4e:c9:61:8d:7c:e2:30:bc:57:3e:a5:d8:a3:f4:99:88:80:
         9f:49:e7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:42 2026 by rpki-client