Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
File:                     11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa (raw, json)
Hash identifier:          25aZ3bYg6TEqzaIY4XkS8Pi09BUP+d550aqciEkp1vg=
Subject key identifier:   B5:F2:B3:56:A8:4C:FE:0B:4F:6E:63:6C:C9:BD:6B:3B:44:FD:C0:A6
Certificate issuer:       /CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Certificate serial:       010D0C9F4328584F6F2310E269EBB20B3B2AA200
Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     394144
IP address blocks:        23.143.8.0/24 maxlen: 24
                          130.51.127.0/24 maxlen: 24
                          2602:27c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:10:e2:69:eb:b2:0b:3b:2a:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=52137e5e-f2c4-4f12-9ac1-754020d7fe24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:fe:fc:fd:a0:f3:ab:ab:02:5b:22:02:ae:
                    54:58:99:bc:d7:c8:70:8b:f4:3c:1e:d7:bd:f7:47:
                    28:21:7f:c8:c7:4f:30:9a:80:bc:f4:3a:3f:44:96:
                    8e:30:fa:98:35:cc:aa:68:fa:d5:72:33:70:3b:ae:
                    a1:fc:f8:39:29:00:25:88:0e:3f:ad:6d:77:33:54:
                    0e:73:ae:78:0a:7b:3d:d1:6c:83:ea:0d:3e:64:bc:
                    54:ac:dd:2d:90:f0:b1:a9:a4:eb:23:2d:b5:44:32:
                    0f:9e:29:6e:8b:db:42:fc:5f:83:fc:0b:15:ee:41:
                    b0:03:d8:e3:e6:1d:67:a1:19:d3:1f:72:99:68:f6:
                    d0:4e:52:b8:a9:52:91:9a:73:a5:2d:9b:a3:2a:cd:
                    32:8e:d1:1d:f7:22:e7:09:be:4c:ce:8b:40:6c:50:
                    fd:60:11:a5:5e:73:c1:c9:84:f9:ad:00:19:ad:a4:
                    46:b5:9a:67:11:3d:de:0c:e0:ae:20:76:fb:0f:68:
                    f8:6e:87:76:36:50:86:a0:6d:50:a1:41:07:c3:79:
                    79:9d:58:c5:65:a0:41:3d:39:c4:86:76:05:17:49:
                    fb:98:07:04:a6:0c:61:9c:e6:12:86:00:54:1b:17:
                    c7:77:d8:30:53:41:c1:43:7b:66:db:d6:4d:bf:67:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:B3:56:A8:4C:FE:0B:4F:6E:63:6C:C9:BD:6B:3B:44:FD:C0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl

            X509v3 Authority Key Identifier:
                keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.8.0/24
                  130.51.127.0/24
                IPv6:
                  2602:27c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ec:8c:b6:88:5c:ab:2b:a2:51:b8:c3:03:43:48:cb:51:e2:
         70:84:9b:02:b0:62:a2:ea:58:24:ca:60:04:64:29:e7:92:88:
         c7:1b:4e:40:c6:6a:77:86:88:c0:cf:ca:5e:a6:82:10:41:77:
         f7:45:2d:8e:5a:93:2f:0a:45:9d:06:9b:65:54:b5:fb:1d:0d:
         d6:c1:aa:d4:bf:8a:30:df:3a:4d:94:8c:99:7f:26:64:b9:8e:
         ff:fa:90:fb:96:02:77:c6:f6:2f:c6:d9:dd:44:19:1a:36:7a:
         ec:31:bb:47:3f:63:3e:62:ef:c2:cc:91:a9:43:dc:ce:58:19:
         3a:12:eb:52:8c:0f:7f:6f:1c:c1:ca:45:11:b6:ea:c4:5c:48:
         d3:b7:78:30:af:46:34:39:18:51:33:02:aa:99:11:d1:01:fe:
         ce:26:63:ce:80:37:0e:c8:54:28:7c:b9:ef:7b:1f:f7:3d:62:
         01:00:7c:83:69:e3:54:c5:19:95:a4:10:3d:dc:ff:83:c9:5b:
         93:c8:b6:bd:19:e8:7b:6f:61:ca:48:09:44:3f:4b:1c:3a:78:
         c1:f2:ab:09:5c:e8:62:61:bb:77:51:ff:2b:c9:4b:38:b9:bb:
         3e:23:84:88:c6:aa:ad:b6:f4:0c:7f:36:be:55:ad:39:4c:04:
         dd:00:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 23:25:56 2026 by rpki-client