Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa
File:                     668cf81e-26f7-3cfb-8188-230b6296a5c7.roa (raw, json)
Hash identifier:          I76Vx5r1rgn/UnSWyQFfaI/Etx+DCZ4O4hNDxfRkWcM=
Subject key identifier:   13:08:D7:98:D5:A0:B5:C8:2C:B0:09:C6:3F:C0:6B:ED:76:E1:3A:AF
Certificate issuer:       /CN=7834df4e-1d40-4a3e-b949-220f86329057
Certificate serial:       010D0C9F4328584F6828209DABEFBD0A8DECAF80
Authority key identifier: F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     402102
IP address blocks:        23.151.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:20:9d:ab:ef:bd:0a:8d:ec:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7834df4e-1d40-4a3e-b949-220f86329057
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=07e3eddb-72e8-4f43-99db-8f6468b3c4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:88:b4:bf:66:60:a7:08:40:b3:a9:b0:28:
                    26:c9:51:41:bc:92:8c:f9:2e:03:d4:c0:ea:06:e8:
                    6e:aa:7a:27:ae:9e:61:2a:3a:88:31:d0:a5:73:a9:
                    11:f8:81:b0:15:53:ad:de:52:a0:31:a9:a0:ff:2a:
                    08:ba:50:2e:58:f4:28:9c:7a:99:db:58:04:64:26:
                    59:9a:cf:4d:d5:64:cc:b4:b5:fc:32:54:e3:d0:26:
                    f5:c4:bf:ee:29:36:a5:fb:09:80:e1:b9:94:28:d3:
                    00:f2:4b:86:52:2e:cd:c9:de:8c:0a:23:d6:6b:89:
                    83:18:ae:87:d4:dc:55:61:c1:03:a6:9a:76:91:4b:
                    36:82:d1:a9:fe:b8:92:5e:ea:c6:7e:23:b1:6a:a8:
                    8a:29:82:cc:b1:dc:63:ae:d6:17:14:1e:1b:2f:02:
                    65:c4:a5:91:d4:d4:10:7d:d8:61:44:7a:1a:b1:5e:
                    98:c8:91:94:bc:70:6d:19:cc:9d:c1:5c:f6:3b:a1:
                    04:50:fd:ad:3a:79:12:9e:96:cb:d9:08:a4:c4:d4:
                    5a:84:f1:0d:43:52:f4:23:2a:67:c1:9a:ea:f6:e1:
                    c8:79:e4:26:e2:69:da:b2:82:83:3f:20:26:5b:cc:
                    60:3f:b9:bd:8b:45:74:0b:f1:a2:63:c0:e6:7c:3c:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:D7:98:D5:A0:B5:C8:2C:B0:09:C6:3F:C0:6B:ED:76:E1:3A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:22:5b:dc:d1:07:18:24:ab:70:42:ba:ac:96:c3:f6:73:94:
         e2:40:2f:a2:f6:64:14:7e:c7:46:98:38:c8:5a:74:13:65:8a:
         23:26:49:71:d9:68:da:59:29:8f:42:58:3f:6e:94:d8:ed:e3:
         19:68:a2:20:68:06:da:f7:c5:b8:e1:85:a6:81:65:12:37:7e:
         ef:41:01:94:f7:2c:a4:00:d2:0f:cd:e3:0d:52:11:9d:d8:d2:
         76:bf:4a:b4:86:e5:0a:f8:fe:40:d4:6d:9d:f8:c4:46:36:64:
         44:6f:28:e7:ea:f9:c0:9e:f0:4f:2d:bc:36:90:b6:8c:08:1b:
         06:be:59:04:a8:08:69:74:8a:5e:ff:7c:8b:ca:c0:83:87:13:
         7f:4b:ec:79:c4:e9:65:a6:f4:58:59:af:47:5d:10:2f:c7:cb:
         13:9c:d1:91:a2:b6:26:e9:1d:4f:1d:e4:1f:15:5e:53:19:22:
         34:c4:03:26:1e:76:6a:18:9c:19:d1:a3:7b:ff:40:1a:c8:38:
         25:57:89:3a:27:58:b8:16:e9:4b:ed:88:a9:b4:df:64:07:31:
         23:68:e2:e7:b1:78:78:c5:9e:40:35:d5:d4:dd:6c:55:42:e2:
         ae:cf:4e:c5:a8:00:ac:8b:48:3d:10:17:a2:37:5f:f7:bd:2c:
         57:01:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:15:06 2026 by rpki-client