Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/de447ebf-c29e-3677-9b51-cccde69f8823.roa
File:                     de447ebf-c29e-3677-9b51-cccde69f8823.roa (raw, json)
Hash identifier:          rrXYdnsT2yrofHUxEGMuYIVeTc7XHWRjRicX9Jf3AFg=
Subject key identifier:   D6:55:E2:37:9C:EF:98:AA:43:07:F9:98:AE:D9:7E:67:3E:E4:2F:B4
Certificate issuer:       /CN=d489668a-f993-4f95-90e5-c584eabef64b
Certificate serial:       010D0C9F4328584E9BE5028B77C28ADDD209E5C0
Authority key identifier: 34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/de447ebf-c29e-3677-9b51-cccde69f8823.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     402026
IP address blocks:        23.146.60.0/24 maxlen: 24
                          2602:f549::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:02:8b:77:c2:8a:dd:d2:09:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d489668a-f993-4f95-90e5-c584eabef64b
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=f6f7cf24-55eb-47f1-a41a-42a377e2206b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:52:2d:97:bc:97:40:f2:9a:eb:bb:da:67:1a:
                    2e:ac:c3:20:bf:8c:08:ba:35:24:82:84:ae:1d:16:
                    87:ef:1a:6d:dd:82:51:be:f5:98:db:6b:57:60:ae:
                    e2:3f:7f:98:1b:5f:d1:fb:5e:59:a9:f0:9d:d7:33:
                    eb:c3:6e:45:6e:d9:20:10:47:5b:0d:ab:32:88:5c:
                    fd:ea:64:db:2c:f3:c5:1f:27:f2:81:80:b8:bb:bf:
                    0c:6a:68:38:1f:9a:42:d2:00:ba:2f:e5:52:ac:a2:
                    33:ce:9a:1b:a9:ba:7d:3b:85:4f:f9:04:84:8d:87:
                    ec:35:96:b4:36:4c:02:e2:c7:e2:68:25:a3:14:5f:
                    0a:dc:cd:08:8c:f0:d6:36:12:23:61:2a:02:81:f1:
                    45:8c:6e:7c:8b:28:1a:da:18:7f:1f:f0:07:4f:e6:
                    ad:8a:9a:8c:87:28:57:6e:3c:29:6d:04:c1:59:70:
                    43:92:a9:b3:db:0c:90:23:47:93:94:a8:54:01:90:
                    58:7e:11:c0:15:3b:ae:96:ad:77:a5:51:71:83:2d:
                    99:d8:6d:d7:a1:82:4a:ed:b7:2d:b9:02:cd:23:61:
                    43:d3:e0:3c:80:f2:3e:d4:0e:b8:30:0e:47:45:4d:
                    e5:3d:af:82:f2:0a:e6:f0:8c:28:06:aa:dd:9f:55:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:55:E2:37:9C:EF:98:AA:43:07:F9:98:AE:D9:7E:67:3E:E4:2F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/de447ebf-c29e-3677-9b51-cccde69f8823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.crl

            X509v3 Authority Key Identifier:
                keyid:34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.60.0/24
                IPv6:
                  2602:f549::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:64:1f:9a:68:9b:3d:57:a8:e1:1a:56:dd:c0:b3:e0:65:e0:
         6d:18:07:91:79:70:98:d7:7e:00:1e:da:a3:ee:16:b8:f5:1d:
         6a:2b:1d:cc:97:62:7e:b1:ff:ad:4c:c5:cf:a7:c1:e6:7f:2d:
         cd:86:4b:bc:fc:78:ea:db:8c:4b:32:2a:ba:cd:e7:3e:58:48:
         33:8a:3d:b6:56:30:d8:43:26:3a:25:15:5a:eb:68:17:1a:5c:
         c2:9a:45:6e:40:73:18:ff:10:a2:7d:0f:60:34:01:b4:5a:e5:
         c0:37:f3:51:65:20:40:96:cd:19:da:bc:0f:d6:d7:b4:e0:db:
         5d:22:5b:07:22:0d:df:8c:f4:31:9d:ec:85:32:05:1d:76:dd:
         e0:9a:fd:a9:67:12:7a:57:53:5b:dc:79:bf:bf:61:ab:62:93:
         6b:8b:e9:3d:b5:2c:13:95:32:89:db:f2:5d:bb:35:d8:f2:2a:
         10:e1:4d:a8:3b:20:e6:8c:8f:74:29:80:d3:b5:90:fb:b8:34:
         5f:55:fa:2d:9f:81:08:98:dd:2f:72:99:73:71:33:32:9d:cf:
         a8:b1:b4:de:8e:c2:59:28:16:25:ad:93:16:de:a5:60:f3:92:
         4c:b5:8b:01:92:54:fe:83:1f:08:b4:dc:66:d7:0f:c0:d4:5c:
         40:88:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:31 2026 by rpki-client