Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa
File:                     afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa (raw, json)
Hash identifier:          +oJQEX2m7mO/XhGEqfeGGNeT1rUemHJ+eG1mDYoIHI4=
Subject key identifier:   7F:68:91:5F:B4:C0:04:78:1D:B6:CA:98:53:CB:11:EE:6F:52:8F:A4
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584EC907110F0AA43B94466CA600
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        23.154.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:11:0f:0a:a4:3b:94:46:6c:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=ae1155d1-da41-4aec-8d6b-29292ed284c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:aa:95:33:b5:35:53:04:37:9d:8b:ef:ef:
                    b9:ac:58:17:c3:e0:51:de:47:cc:e6:31:12:88:36:
                    76:e9:9b:b4:36:d2:21:a8:e1:13:70:5e:d5:3f:3e:
                    91:12:5b:43:35:86:9c:8e:d3:55:c2:30:34:c7:3e:
                    b1:c7:a9:5b:de:df:2d:a1:77:28:73:f4:4c:77:21:
                    f7:90:72:a5:d4:58:9f:10:5a:35:4a:18:e8:e1:b5:
                    b8:31:0d:06:66:bf:2b:97:6e:11:99:85:e0:3b:9f:
                    ea:9a:68:8a:3e:17:e5:9f:c8:db:38:15:b8:31:19:
                    a1:3c:95:8e:33:99:d2:44:ff:f9:01:1b:34:87:c7:
                    a6:32:bb:82:a3:07:55:30:84:93:99:12:8d:d8:bf:
                    8a:ce:69:65:e7:7f:31:a1:a8:7e:38:d2:0a:d4:94:
                    8c:58:93:a1:b3:af:05:b9:fb:b8:df:0f:79:0d:c0:
                    52:00:f9:1e:cd:20:9e:5f:77:ab:9e:a6:87:00:a4:
                    40:1e:e4:b6:0b:6c:73:98:0f:2f:71:85:08:d0:93:
                    c4:66:00:d3:84:07:67:b7:4f:2b:0c:ab:ec:6e:9b:
                    ab:f9:f2:33:f6:a0:b8:17:b7:d7:08:21:b9:9c:8d:
                    74:6a:7b:2a:a4:37:35:ef:7e:3d:5b:2a:18:21:23:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:91:5F:B4:C0:04:78:1D:B6:CA:98:53:CB:11:EE:6F:52:8F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:ce:ba:ec:38:bc:97:a7:54:5c:ae:e3:03:c4:9b:df:71:
         17:17:2f:17:67:48:e1:72:08:65:4e:1f:79:92:f9:ae:53:d1:
         db:67:a7:a6:81:e6:db:57:58:91:32:e1:b8:e2:b4:24:a6:a8:
         45:8d:09:07:4a:cd:2c:6d:8b:84:03:68:26:fc:f2:64:17:4c:
         07:fd:9e:f7:0f:66:ec:db:ff:6f:d9:1a:92:7a:0f:47:38:3a:
         bd:c8:13:57:30:42:80:99:73:9d:62:0b:79:8d:76:e4:74:43:
         f4:00:73:e4:fa:a7:25:d9:2d:85:52:ff:5d:74:82:2b:3a:bf:
         6d:f0:64:7c:e4:4e:4c:f5:3b:d2:f2:4e:74:37:98:e0:47:59:
         66:67:d4:b1:15:35:64:b7:04:bd:dd:b6:94:c3:d1:9c:40:c9:
         9b:58:6a:b9:b5:66:7a:b6:41:e1:42:5a:4f:28:ab:3e:0a:7d:
         e1:07:5b:28:fa:bf:f3:19:22:85:8a:0d:65:bf:38:8f:09:75:
         3f:e8:53:cc:c6:58:1a:3e:d5:dc:26:48:24:03:17:cb:22:57:
         fb:bb:ae:46:ea:9c:ff:44:36:67:6a:57:ce:a6:98:a0:a7:fc:
         53:e2:50:9d:08:39:bf:ed:37:27:ba:c8:3d:2d:fc:76:9e:70:
         32:3b:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:21 2026 by rpki-client