Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173/6e9eb522-ee87-355c-8fe6-44880e530fd7.roa
File:                     6e9eb522-ee87-355c-8fe6-44880e530fd7.roa (raw, json)
Hash identifier:          Z4uFHlRPsn+Mf+jp8zs706knvZl2V/qhDhFJqijcQ3Q=
Subject key identifier:   0F:7E:4E:5D:96:C7:4B:D5:D6:42:34:5A:3E:90:28:CE:96:23:4A:34
Certificate issuer:       /CN=a7094fec-ed9f-458d-a28d-f87277cfc173
Certificate serial:       010D0C9F4328584FA6F87408B4343CA8715D8000
Authority key identifier: 41:64:A7:F1:20:5D:5C:D7:B7:7A:82:1F:A0:94:0B:6E:99:3E:33:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173/6e9eb522-ee87-355c-8fe6-44880e530fd7.roa
Signing time:             Wed 28 Oct 2026 13:00:13 +0000
ROA not before:           Wed 28 Oct 2026 13:00:13 +0000
ROA not after:            Tue 26 Jan 2027 14:00:13 +0000
asID:                     400468
IP address blocks:        23.142.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173/a7094fec-ed9f-458d-a28d-f87277cfc173.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173/a7094fec-ed9f-458d-a28d-f87277cfc173.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a6:f8:74:08:b4:34:3c:a8:71:5d:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7094fec-ed9f-458d-a28d-f87277cfc173
        Validity
            Not Before: Oct 28 13:00:13 2026 GMT
            Not After : Jan 26 14:00:13 2027 GMT
        Subject: CN=e67f0c68-4ee4-436e-bfc0-9bac607ba273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:64:4e:27:ee:e9:78:0a:96:91:53:04:13:
                    fa:73:a7:db:de:21:c5:ed:3a:28:97:2c:27:9e:14:
                    14:73:bd:1a:1e:7d:36:84:70:cd:23:41:5c:ca:14:
                    ab:77:38:be:4b:10:ee:87:20:10:38:b5:4e:cb:80:
                    61:ba:cf:3a:87:45:4e:0f:43:b7:e5:13:99:03:76:
                    15:ae:c2:2a:98:da:12:7d:14:de:47:87:80:5d:2f:
                    05:bd:ec:91:8d:2a:ad:fd:2b:50:a5:b7:fb:dd:72:
                    5e:a6:1e:34:0d:bd:40:8c:91:13:02:7b:28:3c:72:
                    cf:72:a6:a9:1d:39:d6:76:9a:67:ae:12:02:68:e6:
                    bd:0b:0c:6f:e5:e5:b5:14:36:4e:90:d4:60:2e:cf:
                    c6:a2:83:21:0f:9a:b8:fe:dc:d9:51:a7:67:0b:f9:
                    bf:50:59:51:06:33:23:09:8b:e1:02:fb:78:3c:45:
                    49:86:b4:24:f5:61:bf:8e:50:7a:aa:9e:5e:97:98:
                    6b:22:e2:2d:6e:37:81:c5:ae:d8:0f:8a:8d:b0:0d:
                    34:e8:ce:e6:5f:43:aa:9f:74:b1:b2:1e:70:6e:1b:
                    b4:bc:fb:b0:28:e0:5a:84:1f:39:4d:94:f8:ab:53:
                    65:ff:75:78:7a:6c:6b:ba:99:ba:73:18:9d:35:03:
                    3b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:4E:5D:96:C7:4B:D5:D6:42:34:5A:3E:90:28:CE:96:23:4A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173/6e9eb522-ee87-355c-8fe6-44880e530fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173/a7094fec-ed9f-458d-a28d-f87277cfc173.crl

            X509v3 Authority Key Identifier:
                keyid:41:64:A7:F1:20:5D:5C:D7:B7:7A:82:1F:A0:94:0B:6E:99:3E:33:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a7094fec-ed9f-458d-a28d-f87277cfc173.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:08:78:66:18:6e:06:20:b9:67:1f:45:40:d6:07:93:6e:9b:
         62:0f:2b:42:68:54:8a:65:e6:19:3a:b1:b5:b8:fe:8b:2a:c8:
         0f:37:56:d8:81:48:d6:13:47:db:7a:51:1f:0b:04:1e:fa:98:
         71:f6:07:ca:24:18:cc:c2:b9:09:8f:9d:e0:3d:90:42:fb:ad:
         06:01:d2:b5:f9:88:45:b3:de:04:1d:9b:01:05:a0:57:fe:b4:
         0e:18:d7:7d:c7:c6:58:42:e3:00:a1:2a:f5:c7:7a:7a:bf:27:
         06:ca:ca:eb:24:82:97:6d:d1:03:ee:be:52:28:b9:e1:c9:90:
         c0:b8:57:45:cc:8e:57:c0:5a:34:1c:71:ea:f5:7a:a9:d3:32:
         d3:5c:c2:ac:1a:a5:84:5c:4d:b6:33:77:07:86:f6:b8:e5:8a:
         6a:a2:cf:c7:29:e8:08:4c:85:c2:63:aa:9f:82:20:1f:d7:e2:
         79:e3:43:c5:80:37:ad:6d:d8:0c:f5:77:dc:c2:62:d7:a8:4a:
         6c:ec:7d:a6:6a:6e:c0:a8:dc:69:9e:08:eb:c9:35:81:24:33:
         af:e9:a3:62:8d:50:ce:ec:1a:f5:02:36:4c:d4:11:1a:7e:35:
         15:7e:cb:2b:63:9c:59:92:b8:9f:13:02:d5:b6:9c:d0:72:f7:
         86:3c:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:53:30 2026 by rpki-client