Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
File:                     4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa (raw, json)
Hash identifier:          JeVIJmhcWHAwh/NoN8LFbQtbrixvL3YuEegTsCRSz8Y=
Subject key identifier:   DF:52:FF:D0:AE:0D:B5:95:D6:84:EC:FC:A2:E2:58:DE:CE:A5:0E:59
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F4328584F655D74BCB2AFF88EBB30C280
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     46489
IP address blocks:        23.160.0.0/24 maxlen: 24
                          99.181.64.0/18 maxlen: 24
                          192.16.64.0/21 maxlen: 24
                          192.108.239.0/24 maxlen: 24
                          199.9.248.0/21 maxlen: 24
                          2620:f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:74:bc:b2:af:f8:8e:bb:30:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=5a77566e-023e-4727-b08a-6e78aa54ffbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:32:d2:92:56:c1:a3:c1:2f:69:fe:9b:2d:
                    48:f6:25:4d:ac:3b:02:7a:36:6e:e3:af:fd:c4:85:
                    d6:de:b8:af:4f:3c:a5:c4:62:80:46:fa:97:e7:08:
                    59:64:88:e8:8c:f9:6c:67:03:e8:b6:79:44:7c:7a:
                    c4:5a:08:c2:98:2f:47:98:0f:b0:3d:23:9c:ff:94:
                    db:ea:62:8e:e4:ed:12:8c:ec:35:7e:d1:14:fe:b9:
                    87:5b:76:2d:25:83:12:87:1e:e8:29:84:a3:8d:88:
                    9d:46:e4:d6:ef:67:04:0a:e6:f5:6a:bf:82:6d:a9:
                    46:32:b6:7e:90:4a:e0:9a:0e:08:e9:e6:26:13:dc:
                    5d:49:75:9c:7e:d2:cd:92:89:17:ec:67:d4:b1:19:
                    c5:de:f2:a8:3e:8f:04:1d:08:09:c3:e0:8a:35:f7:
                    8d:47:ad:61:6f:64:24:86:0b:96:ab:60:18:e1:b3:
                    73:c3:84:2e:bb:1c:6f:75:d2:88:b5:85:00:7f:c0:
                    fd:f4:ca:3c:4b:c7:b4:18:26:c7:1a:4c:61:ff:76:
                    f5:8f:8d:41:cf:cf:b3:6b:cd:f4:30:55:6c:b3:ee:
                    30:a7:bc:03:6d:72:75:97:37:5c:af:87:f2:92:7d:
                    3d:28:8a:1e:c9:d9:30:8f:47:06:aa:a7:84:e7:4d:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:52:FF:D0:AE:0D:B5:95:D6:84:EC:FC:A2:E2:58:DE:CE:A5:0E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.0.0/24
                  99.181.64.0/18
                  192.16.64.0/21
                  192.108.239.0/24
                  199.9.248.0/21
                IPv6:
                  2620:f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:18:0f:8a:4b:b0:98:3a:1d:03:e0:4f:10:89:bd:f2:70:58:
         ef:53:34:64:44:69:59:e3:5c:05:c5:37:c5:cf:71:72:bd:2b:
         09:a7:c7:2a:37:6a:e8:6d:8f:d3:f5:cc:ed:86:4e:86:c9:49:
         bb:2c:aa:52:46:16:5b:61:1b:0c:9e:76:ff:39:bb:d6:c4:49:
         52:ec:22:20:24:2d:48:3d:64:40:e5:92:1e:d6:af:86:2d:c8:
         3a:91:9f:cc:b5:37:51:14:35:c1:4c:c5:25:1e:7c:8a:8d:f8:
         2d:84:6f:58:c3:d3:96:89:73:c4:64:03:3c:97:10:8e:65:84:
         ae:2d:bf:59:ac:a0:b4:49:ca:bc:22:3b:0b:1c:6d:aa:00:7a:
         20:e3:84:5e:29:55:e0:28:3c:53:d9:27:f6:3a:8a:46:61:36:
         6d:cd:e9:a7:38:18:3d:3c:e2:b4:bf:55:d6:61:02:56:9a:b2:
         ad:a2:20:51:b3:a4:39:ee:1e:a7:a0:21:62:cd:01:67:0e:a0:
         81:0f:86:59:ce:d3:fb:c7:aa:c5:5a:bf:a5:89:3e:3b:09:76:
         34:b5:41:ec:c7:63:45:16:79:21:72:4f:51:28:3b:26:c6:56:
         30:57:2b:79:55:40:eb:94:08:da:3a:11:80:fe:01:7a:d0:09:
         79:9e:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:26:46 2026 by rpki-client