Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/be2994d9-6b65-3d17-9fe3-eb95028cbe8a.roa
File:                     be2994d9-6b65-3d17-9fe3-eb95028cbe8a.roa (raw, json)
Hash identifier:          QW4rW9wJCSYvytCxIGpOKGK3BtillW/azf/Eokf59QE=
Subject key identifier:   4E:96:0B:FA:82:32:17:5F:88:3D:5F:D1:38:94:17:48:39:28:37:E2
Certificate issuer:       /CN=4a55c0a6-eaa8-4039-be15-220f288acd5a
Certificate serial:       010D0C9F4328584F5A32C2A8CE46385127586C00
Authority key identifier: 46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/be2994d9-6b65-3d17-9fe3-eb95028cbe8a.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     45691
IP address blocks:        23.137.68.0/24 maxlen: 24
                          140.235.164.0/24 maxlen: 24
                          140.235.165.0/24 maxlen: 24
                          140.235.166.0/24 maxlen: 24
                          140.235.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:c2:a8:ce:46:38:51:27:58:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a55c0a6-eaa8-4039-be15-220f288acd5a
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=763c76ca-60a4-421a-9194-c3ce695d3183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:a4:ba:ce:de:9a:d7:57:18:ed:46:5f:7c:
                    c9:1f:5c:04:1d:c9:0b:9e:45:ec:11:16:b3:94:08:
                    60:50:c4:77:45:bf:ea:18:f7:0b:15:36:db:77:ea:
                    09:77:e9:3d:5c:3d:e7:88:d4:03:17:c4:13:b1:19:
                    12:cb:46:1f:4c:33:4f:f8:fe:f2:75:49:85:f5:1e:
                    b5:32:b4:e7:af:1c:96:31:1b:1f:c2:e8:0c:5a:a9:
                    a5:da:11:0c:42:82:74:ba:6f:05:a6:68:57:2e:12:
                    d0:64:18:46:52:cf:1a:93:6b:5e:7f:33:9d:99:c6:
                    e1:17:11:6d:d9:cb:6a:88:2e:5a:cd:da:f1:fe:eb:
                    b3:ad:5a:c6:ee:dc:b0:5c:da:2d:10:d7:c2:bb:2d:
                    21:6a:dc:76:19:05:78:33:67:3e:f1:bc:bd:fe:93:
                    10:6e:45:ad:9b:72:5f:1e:82:c7:df:7a:37:f5:78:
                    57:26:83:3f:78:92:5d:ae:29:04:e7:1b:5e:6a:68:
                    76:ec:ac:38:7b:e3:38:b7:e6:24:25:1c:6c:fa:c0:
                    ac:fc:66:6b:fd:ba:8a:c9:9d:8a:a0:6e:c3:ec:a2:
                    96:b1:f0:5b:fa:5e:4a:61:08:f2:ee:b2:b2:a5:c3:
                    e2:af:01:09:fe:31:95:f7:a8:e2:8c:9c:80:d5:59:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:0B:FA:82:32:17:5F:88:3D:5F:D1:38:94:17:48:39:28:37:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/be2994d9-6b65-3d17-9fe3-eb95028cbe8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl

            X509v3 Authority Key Identifier:
                keyid:46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.68.0/24
                  140.235.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:49:08:b9:af:76:96:94:bc:c5:9c:65:29:f6:30:d7:6b:92:
         dd:da:a4:c3:03:77:19:69:ff:d5:7c:b5:66:4f:df:b5:47:6e:
         25:30:34:dc:5c:65:6f:06:36:73:32:f5:24:8b:0a:7a:c3:7b:
         78:81:81:31:83:cd:28:3f:41:1a:7b:be:e4:58:b4:d2:b8:be:
         40:31:b3:8e:2f:4e:e7:50:01:c5:dd:62:41:2b:47:a5:f3:97:
         84:26:b1:06:71:2b:dd:be:64:b5:3a:b5:be:78:5d:10:7b:30:
         82:bf:3d:e6:70:92:37:86:39:40:7f:a5:07:34:5c:d8:44:de:
         c7:72:17:6d:16:2a:58:4f:d0:00:ed:0b:73:91:c8:97:6a:83:
         c4:b1:a0:0e:09:b7:c6:d9:e2:34:e1:98:d5:83:65:31:66:f5:
         fc:c2:7d:5b:e9:4a:85:90:51:7b:31:1a:b8:28:07:a3:99:65:
         bb:51:eb:0b:74:5e:50:d3:6c:c6:e6:ba:21:a4:b4:44:a6:bd:
         24:0e:b8:d2:9d:76:f5:1d:ad:d8:9e:b3:b7:78:f1:5e:4f:0a:
         6d:9c:b6:07:11:59:10:51:43:5f:fd:60:04:64:4a:6b:79:cf:
         04:57:ff:39:29:68:71:f7:30:07:8a:63:a4:23:be:9d:e3:04:
         69:fb:1c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:39:50 2026 by rpki-client