Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ab2e1e11-8f31-3499-914c-b50bfd222cbb.roa
File:                     ab2e1e11-8f31-3499-914c-b50bfd222cbb.roa (raw, json)
Hash identifier:          X6jW4SIzvmzwolpJE9hbVAgCKzxheNgGclBVROq3VXw=
Subject key identifier:   1F:72:87:C7:5F:03:40:1B:70:F2:64:71:FE:DE:E8:58:0E:60:3C:1C
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584F506D664CD3C707E6D6608A80
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ab2e1e11-8f31-3499-914c-b50bfd222cbb.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     18771
IP address blocks:        23.190.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:66:4c:d3:c7:07:e6:d6:60:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=8396d3df-2290-4b06-8c93-864b7983afc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:81:79:dc:f3:00:c9:8d:42:9f:b8:8e:86:
                    83:d0:19:dc:6d:2f:13:65:a4:b1:08:0a:ed:10:bd:
                    08:e8:8a:fd:76:0f:91:95:3a:8d:ba:75:8a:7d:48:
                    97:55:f9:62:4b:1b:b3:d5:53:1a:e4:0e:ef:67:80:
                    84:39:5b:03:6a:0d:0d:ab:e3:73:24:03:2c:c6:bd:
                    d0:2d:94:d5:26:74:a3:96:15:33:3d:29:5d:0c:48:
                    31:22:4e:54:11:e5:eb:fc:a1:3c:3c:32:45:36:0c:
                    15:3e:b3:f1:bd:f8:56:c3:97:7a:e9:14:38:f9:76:
                    e0:48:c4:89:72:4d:2f:af:aa:2d:1b:dc:60:45:34:
                    6a:76:d7:2f:4a:d4:2c:b3:99:82:f4:89:31:0a:32:
                    08:48:3b:f4:08:db:91:e5:6f:ac:36:15:b6:a2:95:
                    a8:41:cd:5d:7a:f9:b9:75:70:bf:12:3d:55:2e:68:
                    70:c9:81:e7:3f:de:f5:69:8e:45:4e:bc:3a:2f:43:
                    6f:cd:6f:0e:c7:b4:7f:b7:ae:cc:29:3d:7c:c9:1c:
                    53:ad:0f:fc:50:fa:94:2b:79:c2:5f:8c:86:80:43:
                    b9:6a:b8:86:47:f0:47:c5:4f:dc:1b:fc:5b:a6:f3:
                    7d:d8:d5:7c:85:1f:8e:78:59:5c:14:6a:69:26:cc:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:87:C7:5F:03:40:1B:70:F2:64:71:FE:DE:E8:58:0E:60:3C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ab2e1e11-8f31-3499-914c-b50bfd222cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d7:fe:ad:68:8a:bd:cc:d2:11:72:21:3e:66:ad:e6:d0:5b:
         9a:f1:32:38:43:bf:f6:2d:25:7c:c8:26:b7:6c:61:a7:7e:24:
         b4:c1:b1:11:de:3e:71:65:eb:b8:cc:6e:89:63:3b:8d:55:b3:
         bc:95:85:ed:de:11:87:b2:d9:2e:4a:8d:88:1c:19:b0:90:32:
         8a:2f:9b:eb:b5:bf:5b:28:3c:79:da:bd:bb:5b:ea:57:8c:8c:
         eb:11:09:9d:50:ba:a1:8e:f5:17:ba:01:ac:91:1c:fc:b6:c4:
         b1:a6:87:b2:c5:34:9d:f6:53:e2:ec:9d:aa:22:4b:63:52:a2:
         59:4a:de:72:30:ae:92:29:8e:ac:55:dd:d1:2f:38:f0:f8:2d:
         d9:1c:4f:ea:41:79:3c:90:2f:26:68:06:a7:8d:10:d8:30:37:
         2a:49:04:91:26:90:c2:fa:36:e6:44:07:e0:4d:8b:af:60:40:
         e2:cd:14:ee:da:2e:8f:d1:5c:f1:45:d0:cc:56:4d:e4:cd:38:
         c1:c8:44:0b:fb:df:0b:bf:de:66:8b:38:2a:ab:3e:17:78:ad:
         2e:18:de:70:c7:ff:dc:6a:cf:b5:b1:dc:a1:82:4d:bd:25:f5:
         b4:08:ed:8e:45:ad:21:ee:bb:66:93:1e:0b:27:e5:93:95:d9:
         54:9f:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:51:21 2026 by rpki-client