Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa
File:                     c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa (raw, json)
Hash identifier:          eR3jDGVLKuAIG5fxhqmsk711BIMseOn57d2kEKXQl1E=
Subject key identifier:   BB:92:88:3A:C8:66:1A:3E:0B:D6:ED:D8:06:6B:96:8C:FA:25:04:54
Certificate issuer:       /CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
Certificate serial:       010D0C9F4328584F49762CDC185434FAC71969B0
Authority key identifier: A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        23.148.128.0/24 maxlen: 24
                          2602:ff0d::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:2c:dc:18:54:34:fa:c7:19:69:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ff53a5c3-1dd5-4a68-a639-46a1354dc7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:8d:07:57:92:7c:00:46:ec:f9:68:71:6f:
                    94:46:5a:2e:e0:09:f5:58:36:b4:d6:b5:58:43:a7:
                    5b:ee:2e:9c:5c:f5:2f:6a:32:ab:69:41:ea:a2:7d:
                    86:7a:1e:1e:1e:57:36:d4:81:61:3d:57:60:68:30:
                    74:be:8a:9e:e7:1d:aa:1b:8c:23:7e:55:d2:ea:84:
                    ed:d1:99:2e:8f:46:c8:46:12:89:d0:de:f9:14:34:
                    46:77:b8:1d:21:bc:f5:14:fe:16:f2:a9:c0:80:91:
                    35:a1:8a:dd:f8:93:ba:80:0d:34:e2:c8:e9:07:e9:
                    d1:10:5b:8f:ca:38:53:d2:70:06:1a:bc:99:e3:02:
                    ca:5c:93:d2:0f:d7:df:c1:97:91:1a:dc:a9:24:e0:
                    a0:2d:2d:41:24:0e:c1:98:35:8a:3e:1f:e1:95:e4:
                    32:d0:8d:bb:05:9d:52:7c:22:4a:e9:c6:e0:27:7c:
                    d0:ea:2b:40:69:95:fc:f1:4e:17:9a:2b:ec:2c:0e:
                    db:b6:c4:ca:ae:f4:1a:8f:55:48:5a:74:8e:4a:ef:
                    b8:f1:6a:87:20:c1:8e:4a:c0:dc:91:af:68:b3:af:
                    cf:44:c3:a4:df:3f:34:ae:2c:94:2e:71:f9:5f:d0:
                    ed:11:f1:6d:17:f3:32:0b:37:83:5e:e4:64:c8:82:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:88:3A:C8:66:1A:3E:0B:D6:ED:D8:06:6B:96:8C:FA:25:04:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.crl

            X509v3 Authority Key Identifier:
                keyid:A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.128.0/24
                IPv6:
                  2602:ff0d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:29:2e:38:ca:75:a6:21:77:e1:6d:c1:9f:21:39:58:13:
         3f:5b:68:ab:55:44:6a:b5:dc:8c:4c:a1:c0:47:08:da:b0:59:
         89:d3:fb:ee:b2:47:a1:65:5e:fc:3e:f9:46:f5:2b:0d:a9:ce:
         4b:99:74:05:06:f1:1e:2b:4e:57:7c:3e:b2:86:5f:09:84:dd:
         72:b0:ab:1e:e5:ca:2b:fe:e5:06:a7:cf:87:49:4f:ca:9f:4b:
         02:7b:c9:e8:48:ff:6a:bc:63:47:a2:12:89:25:64:f0:dc:36:
         0a:eb:a3:8e:5b:df:8f:92:b4:14:e0:0d:b8:74:a3:3f:0d:50:
         5e:04:79:cf:23:56:7d:56:b7:4d:fc:52:a7:be:27:77:65:f3:
         c2:cf:f1:0a:6f:ca:6e:28:17:bd:14:64:49:68:67:66:c1:5d:
         2c:df:b6:7d:f4:c6:86:3a:3c:d7:b2:c6:f8:20:45:c3:77:52:
         fd:8e:db:a5:3e:b5:36:50:c9:d2:9a:42:d5:73:ff:01:cb:6b:
         b3:09:01:cb:a7:09:24:d7:50:4a:4c:ec:87:45:f6:d7:35:3b:
         fa:2b:4d:ed:40:81:5b:05:28:4d:6f:0c:2f:fa:df:80:63:36:
         41:c3:d2:f3:98:45:8a:b7:9a:de:a1:d5:89:23:59:59:2f:6c:
         47:05:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:27:35 2026 by rpki-client