Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa
File:                     03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa (raw, json)
Hash identifier:          B9gNONk0K6aLIl6fqsrgsr62WEUVIAS1C/rPduGq3JM=
Subject key identifier:   52:A0:35:AB:1B:D5:93:F8:9B:CA:BF:70:79:75:FB:EC:08:27:18:48
Certificate issuer:       /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial:       010D0C9F4328584F03A77D9A04C5C0E074E67E40
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16970
IP address blocks:        23.169.240.0/24 maxlen: 24
                          23.169.241.0/24 maxlen: 24
                          23.169.242.0/24 maxlen: 24
                          23.169.243.0/24 maxlen: 24
                          23.169.244.0/24 maxlen: 24
                          23.169.245.0/24 maxlen: 24
                          64.40.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7d:9a:04:c5:c0:e0:74:e6:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=bed0236d-d378-47e6-a808-195a580f59d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:61:4f:d2:1c:98:58:49:26:b1:ef:62:91:
                    bb:72:52:6b:69:85:d5:c1:69:f6:1a:e6:c7:a0:04:
                    98:de:1e:1f:31:b7:3a:64:59:37:15:9c:1d:0c:4a:
                    08:34:a0:2c:d3:94:b6:98:06:dc:e2:82:b6:96:71:
                    d7:c3:a0:68:cb:7f:ac:33:a9:8d:7d:5f:e3:88:fa:
                    43:9a:a1:76:3b:c9:40:1d:03:89:89:3a:4b:3b:0f:
                    a3:1f:cc:bf:19:a7:32:bc:b4:cd:5a:bc:64:f4:29:
                    65:49:f3:9f:60:49:2f:31:06:f7:ca:71:be:03:21:
                    20:b3:b6:45:d9:a0:c1:a4:e4:68:c4:84:91:d3:9f:
                    98:64:f2:23:cb:9a:bb:95:32:c6:09:82:82:03:48:
                    83:8a:44:53:b4:b4:ba:35:98:97:fc:7c:5b:ff:cd:
                    e0:c3:1e:83:25:8f:eb:04:94:cf:68:6e:b8:9f:57:
                    44:19:ac:b7:45:51:4a:89:21:63:57:65:71:d8:68:
                    e1:8c:53:e6:d4:51:8e:0e:3d:5f:4e:66:32:50:dc:
                    8a:3c:3f:3f:5b:2c:25:90:70:d5:84:ae:d9:8d:b1:
                    8a:3c:d7:c4:cf:59:b3:26:13:33:ef:56:7f:56:ab:
                    68:e5:21:64:f5:53:f1:1d:93:bb:33:48:b0:09:9f:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A0:35:AB:1B:D5:93:F8:9B:CA:BF:70:79:75:FB:EC:08:27:18:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl

            X509v3 Authority Key Identifier:
                keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.240.0-23.169.245.255
                  64.40.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0c:36:db:ca:b9:bc:48:9a:c5:5f:42:d6:34:5d:65:24:d6:
         f1:9c:43:2c:8d:67:5e:b6:ba:0a:e1:97:0f:80:b9:02:a2:dc:
         9b:ad:98:4e:9f:a9:de:44:62:d8:0b:0a:97:3b:85:79:45:7c:
         50:e3:c8:02:68:41:7b:84:16:fe:e2:d6:4f:a9:d1:47:b9:b0:
         7f:71:bc:7f:49:9b:ce:9c:82:d1:42:de:e7:3d:a2:5e:2c:5f:
         22:86:0f:30:e0:4c:37:1c:d8:7f:11:d3:bb:6e:47:14:35:38:
         56:d4:dd:60:58:11:8d:11:72:11:17:9a:65:65:1d:52:af:0c:
         0d:5b:40:59:75:13:86:76:e3:81:ba:69:80:f1:aa:0f:6b:84:
         53:bc:65:03:e3:9d:8d:89:89:1d:a2:aa:a7:50:65:a4:58:b8:
         89:d8:d8:91:9a:6f:84:1d:fe:21:9c:63:75:e7:0a:f2:fc:cd:
         62:0f:0d:49:95:0a:c3:d4:74:fb:55:83:a6:d7:79:e7:f2:2f:
         ef:c3:d4:89:ae:ca:54:69:ff:1b:1d:c0:32:a9:69:0b:31:fd:
         44:3a:b9:ee:f6:24:8e:58:aa:5a:8a:55:f9:b0:17:51:99:9a:
         26:ad:0b:e8:6c:9f:7b:49:56:fa:f4:15:ff:f7:94:03:dc:96:
         d8:68:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:08:11 2026 by rpki-client