Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa
File:                     3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa (raw, json)
Hash identifier:          Fhbk9YQIi5rU81fRX8no8NM61OVPfhOPafYQSBL/HeY=
Subject key identifier:   3C:95:10:F1:78:94:B2:E1:99:A2:D1:00:F3:8C:3A:10:A4:FB:DA:6A
Certificate issuer:       /CN=c9d8d2d7-c780-4688-bbc9-433d4b540641
Certificate serial:       010D0C9F4328584E3FC47764E922E35456CB4940
Authority key identifier: FB:B4:43:43:74:73:89:35:FE:E9:E2:20:7C:C5:22:87:FE:03:31:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     396313
IP address blocks:        23.171.128.0/24 maxlen: 24
                          199.250.60.0/22 maxlen: 24
                          2602:fef2::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:77:64:e9:22:e3:54:56:cb:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d8d2d7-c780-4688-bbc9-433d4b540641
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=29a5552b-90ca-406f-91af-aa3a14cb0bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:ce:71:4a:d7:60:0c:24:41:aa:a7:8a:61:
                    46:86:77:93:45:a0:08:c5:b1:0d:fc:0f:25:3f:df:
                    f3:e7:3c:79:6e:d8:92:12:7b:5b:ce:e4:ec:e9:c9:
                    15:c3:e2:6e:c8:75:63:39:8f:7a:4a:dc:32:c5:84:
                    7e:fd:d9:80:83:c4:a0:e0:1e:7b:ad:e9:41:a5:a9:
                    70:ae:43:0f:82:bb:25:49:d6:e0:ed:e6:e5:49:88:
                    4c:b8:a9:5d:8c:2b:c7:ca:98:0f:a7:a8:87:40:63:
                    9a:67:88:14:17:f4:77:35:d7:c9:cc:cc:49:9e:fe:
                    20:85:72:7c:9c:ab:fb:f5:66:93:c2:ac:2a:8b:62:
                    02:03:10:fb:41:49:58:53:61:40:f2:78:d6:82:7d:
                    3f:4e:8d:0f:89:cd:4f:56:77:24:20:5c:e4:bd:67:
                    f4:c7:ee:68:08:3b:08:e4:5d:50:9a:d4:66:75:3f:
                    d6:3f:4b:70:6f:59:61:9b:49:bd:2e:ef:db:dd:c9:
                    5c:9c:72:f8:49:c4:fd:4f:76:a3:3e:2c:a8:38:72:
                    f1:f6:ab:a4:70:06:4d:39:7d:06:d0:61:50:1a:14:
                    ae:7a:6d:52:2c:6c:dd:07:6c:e8:ef:b9:e6:67:52:
                    67:65:5d:b1:83:b3:bd:ca:c7:03:ad:d6:f1:27:65:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:10:F1:78:94:B2:E1:99:A2:D1:00:F3:8C:3A:10:A4:FB:DA:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.crl

            X509v3 Authority Key Identifier:
                keyid:FB:B4:43:43:74:73:89:35:FE:E9:E2:20:7C:C5:22:87:FE:03:31:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.128.0/24
                  199.250.60.0/22
                IPv6:
                  2602:fef2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c1:83:46:42:0c:dd:1b:f1:ea:e6:0e:e8:81:d3:2f:0f:0b:
         2a:c9:95:84:ce:b8:cd:fd:d3:e2:c7:50:6e:f2:83:af:50:de:
         80:d4:19:73:71:af:12:33:b7:01:36:ef:7c:e2:b7:c8:25:09:
         3e:50:60:25:4c:33:26:7e:55:1b:dd:c3:05:1c:c6:1a:88:ab:
         5b:d4:b8:66:fa:78:64:d8:0d:16:9f:3c:cd:f5:d2:f6:29:1c:
         c7:b3:12:ae:ca:50:22:51:da:74:ce:12:76:32:93:83:4b:64:
         e3:ad:8f:7b:83:c9:59:a8:15:89:75:5e:50:f5:33:8e:b3:01:
         ec:cf:ff:78:4f:72:5d:19:37:1d:73:11:74:90:50:1a:51:ff:
         0e:d4:af:a9:6a:b4:03:06:af:aa:f1:f1:87:b3:fc:9b:19:60:
         8b:cf:4a:0b:c2:86:10:06:6d:9e:b3:ce:6e:6d:24:ab:cd:55:
         22:23:28:3f:a4:a2:be:c5:5c:61:9a:42:7f:79:09:bf:88:8b:
         83:2d:d5:0c:d5:ba:3d:8f:7f:16:da:38:8c:ca:f0:f3:9a:b8:
         2a:8d:c0:b6:24:56:4b:7b:d2:9c:d7:6c:02:ed:03:06:ae:c9:
         f3:71:e8:7a:49:20:25:0d:e5:6c:37:61:1e:5d:2c:4f:08:f1:
         25:2d:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:59 2026 by rpki-client