Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/09711301-375b-36c9-9d4c-56f3f600c5ff.roa
File:                     09711301-375b-36c9-9d4c-56f3f600c5ff.roa (raw, json)
Hash identifier:          60G9Tc7GWUVA4iwnS4gbT/hGyzMF3D0sQGQB+r6FV3s=
Subject key identifier:   3E:C8:7E:F9:10:19:32:E5:48:24:41:59:DA:61:0F:8E:F1:85:4C:81
Certificate issuer:       /CN=21880881-3fac-44ff-9432-16f3262c2c4f
Certificate serial:       010D0C9F4328584F98FCE8FD259897EB767E96C0
Authority key identifier: 59:9A:79:9A:21:CC:38:DE:D3:53:D6:31:44:27:F1:3B:B5:BA:5E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/09711301-375b-36c9-9d4c-56f3f600c5ff.roa
Signing time:             Fri 23 Oct 2026 12:47:54 +0000
ROA not before:           Fri 23 Oct 2026 12:47:54 +0000
ROA not after:            Thu 21 Jan 2027 13:47:54 +0000
asID:                     403065
IP address blocks:        23.166.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/21880881-3fac-44ff-9432-16f3262c2c4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/21880881-3fac-44ff-9432-16f3262c2c4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:98:fc:e8:fd:25:98:97:eb:76:7e:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21880881-3fac-44ff-9432-16f3262c2c4f
        Validity
            Not Before: Oct 23 12:47:54 2026 GMT
            Not After : Jan 21 13:47:54 2027 GMT
        Subject: CN=14ad5713-1aa3-4484-9e3e-28c0ece9ebca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:be:2e:57:21:28:75:1d:f5:7d:90:92:bb:
                    af:ab:6a:d7:db:45:fc:26:31:3d:9b:63:a3:0d:69:
                    27:70:e6:c8:e4:e2:89:01:9c:7a:c1:38:ea:57:3c:
                    28:11:79:78:c7:d0:4c:4c:3c:f1:32:5d:86:1b:85:
                    a5:2d:83:51:d2:2c:04:d5:21:84:3f:25:10:8c:b0:
                    20:d6:51:55:f2:d4:a3:a2:60:70:d4:af:14:60:d6:
                    bd:1f:de:b5:55:c4:c4:82:14:ea:f5:0b:6b:0c:a2:
                    88:6f:05:87:73:24:b1:a0:1c:3f:99:0f:d3:30:5f:
                    83:cf:c9:67:98:54:21:aa:13:67:c0:47:c8:34:f0:
                    79:0d:9b:5f:eb:09:9a:43:13:97:21:5d:27:e7:08:
                    79:d5:d1:26:09:9a:65:84:0e:0c:9e:71:dc:33:b8:
                    da:f1:ad:e9:17:d7:2f:7f:b2:76:a7:bd:97:9d:3c:
                    7c:8e:7d:59:97:7e:ee:66:35:86:78:6f:3a:03:dc:
                    1c:83:fc:f9:37:db:43:f4:f0:be:8f:59:3c:af:b4:
                    73:18:4c:a1:7a:fd:7a:47:d7:9a:0b:5a:c5:2d:06:
                    76:35:c8:cd:5f:8a:52:98:61:46:73:54:af:8e:d1:
                    b4:ab:d0:32:f7:97:5a:32:0c:b8:3e:91:2f:69:67:
                    23:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C8:7E:F9:10:19:32:E5:48:24:41:59:DA:61:0F:8E:F1:85:4C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/09711301-375b-36c9-9d4c-56f3f600c5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/21880881-3fac-44ff-9432-16f3262c2c4f.crl

            X509v3 Authority Key Identifier:
                keyid:59:9A:79:9A:21:CC:38:DE:D3:53:D6:31:44:27:F1:3B:B5:BA:5E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:c4:dd:d7:cb:ae:d3:fd:dd:77:85:a5:c3:4c:75:b9:1e:
         dc:7b:6e:ca:55:5a:e1:e0:34:27:f5:af:eb:e9:75:23:86:28:
         ae:21:ac:83:bf:b0:ed:02:9b:db:e5:40:47:e5:35:58:fb:db:
         ea:06:e6:cd:52:32:ca:e1:e2:ee:19:ec:34:19:66:a2:48:4c:
         6a:bb:f8:44:71:c3:3f:8d:ce:53:3f:05:7d:d8:35:68:a8:55:
         3b:0f:f5:1e:3a:84:35:df:f3:30:83:83:58:04:b1:bd:b5:bb:
         68:f2:f3:5f:16:94:64:9b:1a:2b:2f:70:c6:e3:55:8a:b3:1d:
         d9:4b:92:b5:0c:e6:0c:76:1b:e4:01:6f:a1:ac:2a:b9:18:67:
         1a:d7:96:a3:d4:06:cc:04:3b:0f:37:c8:2b:ab:47:83:f1:3a:
         10:83:cc:a9:e3:bd:06:1c:19:92:7c:67:02:17:1f:81:24:16:
         7b:ef:37:b9:b3:5e:5d:2a:5e:f6:a8:d4:c1:a0:42:92:96:0d:
         c8:b4:43:33:34:36:04:9b:22:21:e2:a5:52:f0:35:d5:35:dc:
         06:1d:e0:06:69:7a:19:5b:49:61:80:73:6b:54:89:b5:19:93:
         75:af:61:4e:ab:9d:2f:82:ae:a6:c9:c0:96:f8:53:a7:0b:08:
         2f:a9:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:24:51 2026 by rpki-client