Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306/9dabe52b-08ff-3cd2-807d-6b356fa24ac3.roa
File:                     9dabe52b-08ff-3cd2-807d-6b356fa24ac3.roa (raw, json)
Hash identifier:          hkm5S8IOVweBiuZf0u/5jDU90FIesu/e67FgzAM/rpk=
Subject key identifier:   28:C1:FE:79:09:95:83:68:8C:78:98:22:04:B0:41:51:B0:98:75:09
Certificate issuer:       /CN=9b6451da-84cb-4dc2-99f1-cf8558329306
Certificate serial:       010D0C9F4328584F9D3315EF13F4E9A2A490BB80
Authority key identifier: DF:0B:FF:8F:1E:A8:77:7B:A1:EA:92:2B:F8:62:E5:20:DF:41:01:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306/9dabe52b-08ff-3cd2-807d-6b356fa24ac3.roa
Signing time:             Sun 25 Oct 2026 01:00:13 +0000
ROA not before:           Sun 25 Oct 2026 01:00:13 +0000
ROA not after:            Sat 23 Jan 2027 02:00:13 +0000
asID:                     33296
IP address blocks:        23.174.248.0/24 maxlen: 24
                          64.187.103.0/24 maxlen: 24
                          2602:f933::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306/9b6451da-84cb-4dc2-99f1-cf8558329306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306/9b6451da-84cb-4dc2-99f1-cf8558329306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9d:33:15:ef:13:f4:e9:a2:a4:90:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6451da-84cb-4dc2-99f1-cf8558329306
        Validity
            Not Before: Oct 25 01:00:13 2026 GMT
            Not After : Jan 23 02:00:13 2027 GMT
        Subject: CN=73c35ef6-c939-49e1-a20e-ae0ddca740df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:0d:b8:c5:0d:9d:7d:29:48:ef:7c:a4:ee:
                    39:a9:d4:93:7b:e1:dd:94:95:ef:4d:d3:08:e0:6b:
                    49:1e:02:06:e3:99:7d:bc:95:f5:ce:23:85:bc:e3:
                    be:ea:0b:40:42:9b:21:1f:c8:c7:bf:4c:12:dd:36:
                    32:dc:f6:1b:4b:3b:be:40:97:ce:93:8a:01:3c:c0:
                    44:c4:e0:5a:05:48:d0:7b:02:4e:c4:6d:e0:61:39:
                    f5:d9:67:44:29:29:bd:3b:22:ee:a7:50:9f:89:e2:
                    c4:e1:00:cf:0a:6a:9f:46:8f:f2:2e:e9:f9:ae:94:
                    2b:ec:09:26:29:ea:fe:a7:58:25:62:01:9e:3a:7b:
                    52:44:2f:33:24:7d:4c:31:33:f9:77:2b:bc:e8:ab:
                    f2:f0:46:4e:b2:83:8d:f7:0b:d0:f4:f5:8d:ed:ea:
                    77:7b:7e:59:5f:64:7e:b8:34:4c:5d:c7:e3:54:6c:
                    91:e9:61:a3:ab:d3:ff:cb:7c:99:94:b4:07:12:f5:
                    ee:8a:bb:44:d8:e9:8c:65:8c:ee:3d:0d:75:73:46:
                    d2:54:2c:44:28:dd:0e:81:42:8b:22:eb:a8:f8:ea:
                    7e:bc:6b:b3:ab:1a:94:4b:bb:73:f9:aa:d5:8b:af:
                    0e:32:6f:d2:b5:ab:ec:89:c1:aa:89:d3:82:db:0a:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C1:FE:79:09:95:83:68:8C:78:98:22:04:B0:41:51:B0:98:75:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306/9dabe52b-08ff-3cd2-807d-6b356fa24ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306/9b6451da-84cb-4dc2-99f1-cf8558329306.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:FF:8F:1E:A8:77:7B:A1:EA:92:2B:F8:62:E5:20:DF:41:01:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b6451da-84cb-4dc2-99f1-cf8558329306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.248.0/24
                  64.187.103.0/24
                IPv6:
                  2602:f933::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:06:6d:d2:3d:22:e6:e1:ef:e9:58:4a:b4:38:7a:62:40:4e:
         4a:f5:ce:9f:06:c9:b8:84:01:9e:2f:0b:5f:1a:e9:4f:1e:cd:
         95:08:f8:cf:33:5f:64:bb:3c:96:32:b7:ff:6b:7b:70:bc:eb:
         2f:cf:94:c9:aa:c1:46:7a:33:c8:be:89:93:c8:de:42:c2:ad:
         65:a5:3a:cd:b9:75:da:82:71:15:74:98:3b:41:56:3e:22:20:
         ea:be:86:4e:f9:f1:50:3d:06:31:af:9c:cd:a6:87:8a:45:ed:
         76:07:ec:07:4e:40:4e:dc:12:4c:9b:96:0a:15:d9:9a:57:b2:
         56:49:88:4b:4c:c8:cd:8e:66:7f:c9:10:82:10:54:dd:f7:c9:
         8f:3b:f5:65:82:b3:58:fc:ba:ae:11:82:af:8d:fb:22:5b:3f:
         20:81:31:f3:5d:3d:0b:02:85:72:17:dd:d8:43:70:0f:4a:01:
         35:7f:8d:d3:fe:da:4b:62:c5:4f:ec:cd:65:14:1f:76:d7:6b:
         54:65:f5:be:17:87:0f:48:d0:2b:b6:73:cd:e9:0e:29:59:b6:
         45:3a:9e:05:84:bc:b8:5f:2e:76:6d:14:d8:7a:c3:57:dc:8b:
         66:77:b9:3b:b0:6d:0d:25:78:9e:38:b0:5a:f3:76:aa:bc:f7:
         f8:37:e4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:00:41 2026 by rpki-client