Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa
File:                     6aa460fd-e42f-3608-9335-77aaae092d13.roa (raw, json)
Hash identifier:          nlKbrpXiVbPUrFFacaSdxJcvE8hpL9Ir6/4ADRy2tPo=
Subject key identifier:   32:6F:FB:3C:39:5E:FD:7B:8C:9B:E1:F1:F0:DF:12:CE:F9:ED:B0:CF
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F698D9D685E829E6066550380
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     23013
IP address blocks:        128.241.1.0/29 maxlen: 29
                          128.242.180.112/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:9d:68:5e:82:9e:60:66:55:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=b235beaf-091f-41e1-a7c2-aa0b76cb120c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:25:d8:4a:8d:7b:4d:a0:94:ae:9f:a0:a3:97:
                    77:b2:c5:bf:25:3f:6e:f2:17:41:c1:c5:99:7b:4a:
                    26:f4:92:d1:e3:63:1d:0e:f1:68:f2:e1:b9:4d:59:
                    3d:95:9c:5d:12:61:e9:d6:45:8f:b5:44:1c:16:af:
                    00:9f:2a:a7:0b:dc:dd:d8:64:64:38:c0:5d:89:92:
                    90:d6:77:e6:66:bf:c2:6b:b1:9b:6f:32:db:ff:f4:
                    40:2a:b2:7e:2c:16:da:6a:41:62:61:2c:bd:ab:43:
                    f0:45:18:c8:d8:a2:cf:6b:96:8a:28:a5:c1:3e:6a:
                    bc:94:ea:07:a9:16:68:46:26:d4:75:cc:28:e6:2c:
                    1e:7e:82:f3:89:d5:ab:14:78:26:de:fb:80:b9:d5:
                    c8:c5:25:cc:86:11:e4:21:6c:a9:63:13:09:10:91:
                    b0:3e:c3:17:2c:37:da:1a:d7:7f:ed:27:44:56:50:
                    21:87:61:ab:61:f7:17:c5:79:ad:7f:1d:c0:51:e3:
                    57:b0:a1:92:9f:6c:26:7d:b8:5c:da:e9:4d:d6:81:
                    5b:2b:25:01:26:4a:86:e6:e9:6d:31:0d:41:b4:6b:
                    39:43:67:a9:74:53:fb:30:70:83:3c:9c:e5:60:0f:
                    69:ae:78:d3:68:89:d9:12:45:9d:ef:97:c2:ee:08:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:FB:3C:39:5E:FD:7B:8C:9B:E1:F1:F0:DF:12:CE:F9:ED:B0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.1.0/29
                  128.242.180.112/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:2c:f1:e6:3a:54:f6:fa:7d:5e:20:73:90:48:c3:4d:e0:51:
         49:61:84:7a:1a:04:50:5c:de:79:5e:e3:95:6f:1e:00:21:39:
         af:1c:95:a8:3e:d7:a8:e9:b0:74:6c:ce:37:05:e5:23:f7:b8:
         ff:22:4e:f9:75:62:34:45:72:ee:4a:25:74:79:56:5b:b1:f1:
         9e:a2:11:3d:ba:0e:75:a0:2d:87:be:d2:4f:a6:78:f6:f9:f9:
         38:cb:f3:fd:46:6a:93:19:ca:5c:40:b0:ce:82:99:22:b0:9e:
         41:81:d5:08:79:aa:74:61:ec:89:e2:92:e1:ce:f6:39:f1:4f:
         b5:92:4f:a0:81:97:0e:6a:fb:9d:95:e2:f3:a2:66:c7:cf:9d:
         61:d7:0a:58:86:3a:b1:ed:d5:dd:5f:d0:03:9c:5e:65:b0:0e:
         1a:5f:ee:9a:dd:d9:ca:d0:68:26:9e:d1:9a:88:66:58:10:80:
         65:c9:45:77:b8:69:e4:c2:17:44:72:95:d5:63:35:a7:90:1b:
         91:ab:b5:a4:ce:7f:23:b2:60:33:1d:29:73:f1:79:9c:fa:10:
         24:61:d0:dd:43:c7:16:0b:90:2c:b9:28:dc:9f:f3:b6:e1:77:
         f1:59:36:b1:ce:3e:a3:5c:56:cf:64:60:0c:88:82:0c:d7:c6:
         62:4f:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:13 2026 by rpki-client