Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa
File:                     5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa (raw, json)
Hash identifier:          pm0lzZO3ejTUs8T1Pe3/FeKzx3zYvmowixMSLZRc39U=
Subject key identifier:   7F:03:E5:EF:FB:07:AC:03:21:11:5B:28:CB:CF:29:55:F6:41:9C:E5
Certificate issuer:       /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Certificate serial:       010D0C9F4328584EA79BAE3DBD46A5FE59963580
Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398741
IP address blocks:        23.172.216.0/24 maxlen: 24
                          2602:f959::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:ae:3d:bd:46:a5:fe:59:96:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9318aa7e-af13-4b08-9cc6-c7cea3669539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:7c:cd:c1:7c:08:92:d6:33:d7:11:6a:df:
                    7d:54:5d:bb:05:b8:0e:5e:81:cd:a1:49:4f:d4:f6:
                    2f:3c:66:2b:7a:56:86:a9:0a:c2:f5:8e:8d:11:a8:
                    14:c7:be:3d:a7:59:9b:05:18:8c:88:6b:e8:55:51:
                    66:e4:29:ee:45:61:bb:2f:f2:8f:a0:cd:e8:92:33:
                    51:d2:15:f8:0b:42:9e:84:85:f8:1a:76:97:0e:8a:
                    1d:f4:dd:03:72:89:4a:73:1f:a2:a5:a3:e8:1c:ae:
                    51:a8:31:ce:03:71:de:b0:54:9d:e9:06:dd:d3:46:
                    70:90:ce:2e:79:a0:0e:7d:f5:a3:14:e5:b4:fe:4d:
                    4a:36:08:89:65:8e:3f:05:f4:db:5a:a0:d6:7a:24:
                    86:cb:ef:7e:e5:ea:a0:c1:a9:a4:35:4d:ee:95:cb:
                    fd:5a:df:72:ba:fb:52:64:e3:99:a1:87:43:5e:13:
                    70:02:41:b0:b4:c1:4c:1b:2d:88:39:a2:e5:17:44:
                    4d:10:cd:3b:23:2f:bd:3b:c4:a8:af:b7:79:87:53:
                    cb:6d:c3:d1:65:55:09:a7:19:55:79:03:31:9a:2a:
                    0b:a2:e8:5a:e4:3b:6a:4f:8a:33:fd:85:54:3e:29:
                    e1:1c:1d:2e:57:0c:82:99:cf:8b:a4:a2:28:91:4b:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:03:E5:EF:FB:07:AC:03:21:11:5B:28:CB:CF:29:55:F6:41:9C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.216.0/24
                IPv6:
                  2602:f959::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:e4:64:34:b2:1e:9d:b6:c1:19:27:e3:9a:cd:6a:30:e6:
         3b:1e:a7:51:e5:9c:aa:db:6c:ba:b8:4f:de:02:73:f7:fe:a3:
         b6:bd:66:19:88:f1:76:71:3b:e6:a8:0d:89:45:b6:96:d0:fe:
         af:ad:48:4a:38:95:7a:71:3c:93:3e:8e:30:a6:c4:ce:c4:04:
         d5:3f:96:3d:db:7c:30:ab:87:24:3c:df:94:9d:74:d7:2b:a5:
         81:87:c9:40:d9:be:5a:1b:02:28:7e:6f:cd:d1:7a:50:99:9a:
         d4:f3:9e:0b:f0:b1:62:53:3f:ff:ea:bf:34:fa:b9:09:cb:eb:
         ee:ed:5e:ca:01:26:ed:15:30:db:d1:0e:45:2f:50:4b:ee:5c:
         50:b1:91:e7:19:a8:09:1f:08:8d:ae:ad:89:a1:aa:a9:b1:72:
         79:50:0f:f8:dc:ea:b7:be:b0:4c:ff:e2:73:dc:03:f6:1f:dc:
         5d:45:93:e8:ce:db:00:5f:1a:34:39:39:d0:c9:cc:c0:e8:72:
         5a:dd:25:66:c3:a6:5d:55:18:9d:dd:74:49:7e:fa:2a:c7:23:
         61:83:d7:52:50:7c:06:0b:d1:04:04:55:04:8d:91:0e:ad:e9:
         f6:36:30:52:5c:c9:9d:b6:21:f8:88:56:98:de:d8:42:5d:a1:
         49:4a:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:11:21 2026 by rpki-client