Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb/9f1b61bc-f5fe-3b9b-a433-c2de4e59d620.roa
File:                     9f1b61bc-f5fe-3b9b-a433-c2de4e59d620.roa (raw, json)
Hash identifier:          lC/ul/XoMT2x2VdPWmRTW5kmXrc96u/I2OnhcjNXJE0=
Subject key identifier:   27:36:2A:98:CF:49:ED:2A:07:B9:86:17:0C:C3:23:2D:A5:5C:AB:28
Certificate issuer:       /CN=d246df5f-f365-402b-870b-dc71ab3f55fb
Certificate serial:       010D0C9F4328584F8353B5F9F0BC2B04EB5CCD00
Authority key identifier: EF:3B:07:CA:80:AB:7F:9C:37:75:34:49:31:47:BD:0E:9D:B9:3A:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb/9f1b61bc-f5fe-3b9b-a433-c2de4e59d620.roa
Signing time:             Thu 15 Oct 2026 18:35:01 +0000
ROA not before:           Thu 15 Oct 2026 18:35:01 +0000
ROA not after:            Wed 13 Jan 2027 19:35:01 +0000
asID:                     19502
IP address blocks:        23.189.16.0/24 maxlen: 24
                          2606:7cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb/d246df5f-f365-402b-870b-dc71ab3f55fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb/d246df5f-f365-402b-870b-dc71ab3f55fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:83:53:b5:f9:f0:bc:2b:04:eb:5c:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d246df5f-f365-402b-870b-dc71ab3f55fb
        Validity
            Not Before: Oct 15 18:35:01 2026 GMT
            Not After : Jan 13 19:35:01 2027 GMT
        Subject: CN=dd9abbb0-8edb-4fa1-8d64-c68aad7d4b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:6a:4d:eb:15:5e:c0:4c:45:18:f3:d1:bf:
                    8d:94:3e:c3:e3:d1:af:c8:06:74:ca:b5:8b:81:09:
                    d9:e7:96:92:23:a1:12:8b:57:8b:93:55:1a:a7:f6:
                    e1:3e:88:da:3d:53:e4:38:7f:83:8c:2a:f1:65:4d:
                    14:a9:4b:53:97:f4:52:ef:ab:26:53:81:df:9d:b6:
                    cc:0b:2d:c3:5a:f0:e4:3c:a3:8a:06:37:98:a6:c5:
                    b3:83:77:0c:8e:4a:db:52:56:78:d9:5c:61:be:e3:
                    df:65:c9:14:54:6d:70:37:db:6b:8e:07:bd:76:03:
                    56:c4:fe:3e:44:a9:ef:c6:18:65:11:f4:88:e2:97:
                    63:17:01:b4:df:f7:77:2d:6f:32:30:97:1c:67:a2:
                    9d:b1:d8:b3:93:ea:81:29:ad:74:34:99:b7:ad:5b:
                    4f:31:d6:9f:8d:9c:f9:1c:c4:2c:06:67:18:10:bf:
                    2d:9c:f9:38:09:fd:94:f1:8a:43:5c:f5:7d:bc:1c:
                    e6:93:2c:42:95:55:9f:24:b8:57:12:1a:b6:36:1a:
                    8b:f7:85:9a:88:fd:8f:99:ed:61:71:a2:49:1b:e1:
                    70:01:b3:8f:67:f2:8f:23:8b:3e:3c:0b:98:ea:8d:
                    91:9f:a4:0f:d2:2c:d5:47:49:06:23:e9:0a:5c:7e:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:2A:98:CF:49:ED:2A:07:B9:86:17:0C:C3:23:2D:A5:5C:AB:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb/9f1b61bc-f5fe-3b9b-a433-c2de4e59d620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb/d246df5f-f365-402b-870b-dc71ab3f55fb.crl

            X509v3 Authority Key Identifier:
                keyid:EF:3B:07:CA:80:AB:7F:9C:37:75:34:49:31:47:BD:0E:9D:B9:3A:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d246df5f-f365-402b-870b-dc71ab3f55fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.16.0/24
                IPv6:
                  2606:7cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:20:ba:8f:7d:94:8d:97:ab:c7:bd:e1:b6:6e:00:6d:2b:c0:
         a0:cc:a6:1e:be:fd:51:50:e8:24:b3:88:09:81:81:a6:c2:45:
         ed:9b:49:0c:ab:ae:9b:62:70:b9:fc:53:8e:f1:37:a6:fb:ef:
         18:7a:17:1d:1e:84:5d:35:27:f8:1a:44:15:ef:56:9b:35:b9:
         65:3f:3a:1a:b9:24:b3:eb:2f:a7:f5:75:03:3a:ee:90:1b:27:
         a2:7b:e1:ef:12:1e:e8:f7:d9:76:d4:55:67:2f:cf:c5:0d:77:
         a6:d0:2a:a6:78:d1:05:35:84:37:10:a9:a7:1b:d8:2f:f4:53:
         46:85:ff:22:3b:d7:10:db:59:67:6e:5e:c2:fb:9f:b4:8c:7d:
         b0:3f:5a:b5:d4:18:0b:f7:11:01:5a:54:e1:58:76:f9:05:79:
         7d:4d:ad:65:dc:00:79:6f:87:5f:b4:cd:c4:55:bd:d3:fb:d2:
         56:23:b0:6f:44:ac:1a:4f:78:ca:77:5b:ea:2e:36:32:68:f1:
         3c:c1:12:18:e3:2e:0f:c4:8c:d1:dc:4e:06:c7:39:17:d5:df:
         2c:6f:42:f0:d5:2e:a5:08:04:27:bf:14:a0:8e:e2:73:a5:6e:
         75:ad:98:54:b8:35:3c:a8:f7:f5:ab:3a:ba:b1:dd:85:4f:26:
         ad:f1:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:33:42 2026 by rpki-client