Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518/2b23bb38-a3f2-3ef9-8ac1-fc606ba9e0fc.roa
File:                     2b23bb38-a3f2-3ef9-8ac1-fc606ba9e0fc.roa (raw, json)
Hash identifier:          Gr931BZCwqh0fKk3+bLYV65goMKoKOlRLpQ8FijhCKo=
Subject key identifier:   88:F6:DD:97:24:8C:84:8B:A1:BC:38:00:AA:1B:46:EE:D0:A3:F2:F4
Certificate issuer:       /CN=6f13ed9a-e1eb-4bea-8f08-0eab46473518
Certificate serial:       010D0C9F4328584F78E8379FDE23592657857EA0
Authority key identifier: 72:15:3D:9A:60:7E:AB:86:8A:D6:FA:40:2A:25:C0:9A:55:9F:CF:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518/2b23bb38-a3f2-3ef9-8ac1-fc606ba9e0fc.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     214483
IP address blocks:        23.151.4.0/24 maxlen: 24
                          2602:f4a0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518/6f13ed9a-e1eb-4bea-8f08-0eab46473518.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518/6f13ed9a-e1eb-4bea-8f08-0eab46473518.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:37:9f:de:23:59:26:57:85:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f13ed9a-e1eb-4bea-8f08-0eab46473518
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=5eb0953f-7c8f-4955-8f16-c6d2b86517f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:c2:f2:58:d9:6b:66:9f:66:88:03:52:ff:
                    ad:07:46:08:eb:70:32:17:dd:c1:c9:26:d3:bc:bb:
                    9f:35:01:f3:76:f7:27:30:c7:4c:b6:a1:26:83:14:
                    52:48:f8:3e:3f:e3:1f:af:26:91:2f:5b:56:50:98:
                    e9:7b:62:f1:74:0d:5e:ff:3f:99:5a:7e:ee:e2:c6:
                    8d:4a:4d:08:17:14:a5:ee:f9:12:c9:4a:da:85:e1:
                    8f:80:59:af:d2:60:3e:b6:07:cd:6c:48:6e:2e:26:
                    ea:5b:29:76:1a:92:04:e1:96:9e:4a:e3:bc:01:1b:
                    61:73:55:cd:d0:45:8c:0d:5d:41:bc:85:16:a5:58:
                    d0:35:ea:8b:2d:26:b6:fc:e9:2d:47:fd:9d:fb:bf:
                    0b:af:13:2f:93:98:e8:2e:47:a4:8f:3f:4e:c6:f8:
                    4b:d9:6b:43:9a:ad:bc:f7:aa:72:09:5c:99:31:13:
                    96:0e:ad:98:2a:f7:e2:9f:da:66:8c:36:e4:cc:b7:
                    64:e2:83:25:b9:14:6f:f4:bb:8d:48:b8:3e:6e:1e:
                    46:28:0a:a8:d5:26:f7:42:fc:59:ac:66:da:19:33:
                    f2:a3:29:9a:7e:dc:72:f0:c9:63:2f:91:4f:17:7d:
                    61:89:38:83:e5:9e:cb:3f:25:5d:57:e4:40:88:d7:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F6:DD:97:24:8C:84:8B:A1:BC:38:00:AA:1B:46:EE:D0:A3:F2:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518/2b23bb38-a3f2-3ef9-8ac1-fc606ba9e0fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518/6f13ed9a-e1eb-4bea-8f08-0eab46473518.crl

            X509v3 Authority Key Identifier:
                keyid:72:15:3D:9A:60:7E:AB:86:8A:D6:FA:40:2A:25:C0:9A:55:9F:CF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6f13ed9a-e1eb-4bea-8f08-0eab46473518.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.4.0/24
                IPv6:
                  2602:f4a0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:7c:7b:42:6d:72:e2:79:b3:9a:95:83:ee:d4:ae:20:47:8d:
         1a:fe:36:05:d1:9e:04:00:1a:be:d4:17:c6:15:98:33:b2:87:
         ab:bd:5a:77:c4:a0:3a:e5:62:75:b6:2b:53:ac:78:fd:49:80:
         c4:0f:ac:a5:de:ac:0c:a4:82:64:7a:14:ea:42:e5:ba:63:a5:
         8e:6b:7b:40:39:ec:23:c4:99:72:a6:e5:d2:65:e6:ac:be:43:
         5e:52:a2:32:a9:4a:c3:e5:fd:01:23:32:06:87:9c:dd:e5:05:
         f3:96:0b:67:58:f4:9f:3e:88:2a:b6:86:c8:ff:54:cf:38:ed:
         2b:d1:34:84:8a:8b:b3:31:3e:0b:f4:bd:37:79:10:75:7d:86:
         4d:ce:a7:99:ea:49:89:31:a5:7e:4b:2c:0f:e2:73:a6:2a:44:
         38:28:d9:a4:78:56:1f:c0:20:e3:5c:d6:af:ee:8a:84:87:5a:
         81:c4:a7:ca:b6:8e:d4:6e:53:ea:a0:44:2f:3f:cc:ae:02:72:
         dd:07:b9:87:fd:f9:42:f2:42:64:a6:33:a7:bd:1b:45:f4:d5:
         ab:c2:71:c0:9a:40:74:8d:5a:c6:3b:33:20:a6:09:c8:aa:86:
         2e:0f:d4:c9:8d:79:ab:ef:10:a2:3f:ea:6d:9a:65:0d:a5:cc:
         61:85:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:49:40 2026 by rpki-client