Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0/e0674f02-c3cd-393c-9eb2-1fb39c5042c2.roa
File:                     e0674f02-c3cd-393c-9eb2-1fb39c5042c2.roa (raw, json)
Hash identifier:          yu2S38Mc05GylM/TG3J2s+E6A5owFfC+dJNWKtYp5xY=
Subject key identifier:   2A:71:A4:DC:75:AD:1D:A6:21:AD:CA:4D:9B:FC:89:26:93:A6:86:3E
Certificate issuer:       /CN=6623b38b-10aa-4881-aae1-82d5466ebcc0
Certificate serial:       010D0C9F4328584F979DC96F7183E59C0B8FB280
Authority key identifier: 35:8D:B6:DE:BC:0B:D6:9C:36:FD:C6:3A:F4:3E:79:36:23:6E:F3:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0/e0674f02-c3cd-393c-9eb2-1fb39c5042c2.roa
Signing time:             Fri 23 Oct 2026 01:00:12 +0000
ROA not before:           Fri 23 Oct 2026 01:00:12 +0000
ROA not after:            Thu 21 Jan 2027 02:00:12 +0000
asID:                     214483
IP address blocks:        23.149.212.0/24 maxlen: 24
                          2602:f4c4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0/6623b38b-10aa-4881-aae1-82d5466ebcc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0/6623b38b-10aa-4881-aae1-82d5466ebcc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:97:9d:c9:6f:71:83:e5:9c:0b:8f:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6623b38b-10aa-4881-aae1-82d5466ebcc0
        Validity
            Not Before: Oct 23 01:00:12 2026 GMT
            Not After : Jan 21 02:00:12 2027 GMT
        Subject: CN=b20ec49a-5d38-4f0f-b39d-9d42828fcfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:36:d5:d5:e9:04:68:6a:a0:d8:4d:19:b2:
                    95:be:0e:93:dc:06:ed:46:7e:39:e7:9d:50:0b:2b:
                    17:69:ac:e4:f5:b6:7f:13:59:c0:53:ad:c9:f3:35:
                    cd:5c:ca:62:35:06:69:33:44:d0:af:91:38:2c:2f:
                    19:13:70:da:9f:2c:05:31:46:90:86:9e:ec:43:f3:
                    dd:23:47:db:dc:c0:47:2d:65:3e:30:3f:4c:99:64:
                    c9:65:1f:92:57:41:d0:65:bd:46:37:3d:80:15:46:
                    77:53:25:a9:37:41:dc:1f:2f:49:5f:ab:0c:cd:83:
                    2a:c9:e1:37:24:b1:55:30:59:60:1b:ff:6f:c1:4c:
                    97:02:94:4a:45:36:d6:a6:01:0f:4b:28:8d:24:5a:
                    99:38:89:4a:03:3c:f4:67:8d:e2:d0:21:3c:ca:a8:
                    af:ab:2e:f2:4c:72:26:9b:93:c2:2f:60:58:d2:fd:
                    4b:d2:b7:a4:4c:1b:62:78:94:2e:90:c6:23:b6:08:
                    9a:2c:c1:d2:1f:c5:d4:a0:b9:1a:1b:43:32:b5:16:
                    20:8a:3a:4c:af:00:80:fe:c6:db:ff:d0:b0:45:b4:
                    15:f5:6b:d1:4e:6d:91:e7:c5:1c:a4:33:a5:36:22:
                    c8:9b:8d:20:9c:f3:ae:5a:15:c9:f5:3a:d9:f4:ee:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:71:A4:DC:75:AD:1D:A6:21:AD:CA:4D:9B:FC:89:26:93:A6:86:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0/e0674f02-c3cd-393c-9eb2-1fb39c5042c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0/6623b38b-10aa-4881-aae1-82d5466ebcc0.crl

            X509v3 Authority Key Identifier:
                keyid:35:8D:B6:DE:BC:0B:D6:9C:36:FD:C6:3A:F4:3E:79:36:23:6E:F3:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6623b38b-10aa-4881-aae1-82d5466ebcc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.212.0/24
                IPv6:
                  2602:f4c4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e3:9b:0b:39:c9:9e:2e:52:28:4c:ec:6b:c9:48:38:f3:6b:
         0f:29:86:16:60:46:6b:91:1a:80:4a:77:52:fc:15:b6:cd:93:
         21:68:22:fe:e6:f6:ea:4c:bf:7b:e5:60:dc:c8:02:2b:f9:96:
         2b:6f:54:64:b1:fb:01:d6:c1:3b:9e:b5:1b:9f:20:ec:19:e2:
         ab:08:de:c6:70:89:a4:5f:b1:92:40:be:f0:c2:22:2b:ed:b7:
         15:41:6c:a3:be:97:73:37:ac:e8:c5:ad:a1:7f:03:48:43:86:
         ad:81:b2:6a:ad:2b:1e:52:27:53:f5:0c:78:88:7b:dd:44:69:
         25:2e:b4:9a:8f:6e:1e:04:b1:43:22:25:b1:ed:9b:be:ce:a0:
         4a:fb:1e:2d:a6:dc:77:66:7d:13:a2:23:00:bd:19:dd:b3:d2:
         b8:c6:bd:32:18:b6:e3:09:7a:e9:bc:b5:63:f6:2e:ce:e7:cd:
         80:21:d4:73:54:87:61:f3:6e:a9:da:e8:3a:76:a4:a0:68:9a:
         bc:5b:2b:52:fb:ec:a2:70:50:8d:09:2a:95:3e:5c:c7:c2:f4:
         79:af:37:54:a3:5b:84:16:e8:1c:5c:a9:c5:ef:cc:ec:4f:0c:
         1b:fb:f3:27:15:0b:15:22:a1:d4:c1:37:79:87:91:a8:7c:35:
         32:9c:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:23:19 2026 by rpki-client