Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6529c7e7-aea2-3e8b-90dd-c3a9518544ec.roa
File:                     6529c7e7-aea2-3e8b-90dd-c3a9518544ec.roa (raw, json)
Hash identifier:          JzSKuy5sT3j799cBuvMvFde1myBDIrwpsAb2a9TFSBk=
Subject key identifier:   B4:EC:6D:9D:D2:27:78:C8:87:CF:B9:26:99:B8:57:8F:25:11:06:A6
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5E62DA4A3058E1D6ED470860
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6529c7e7-aea2-3e8b-90dd-c3a9518544ec.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19148
IP address blocks:        23.19.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:da:4a:30:58:e1:d6:ed:47:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=4624d3e1-fb6b-464e-9142-2c937987ee10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:db:cc:35:30:7f:b3:3c:cf:e1:04:6a:8f:
                    86:07:88:2a:91:88:15:4a:8a:f5:74:39:91:ef:18:
                    be:1a:e0:f2:c0:20:69:82:07:c3:e6:87:ac:25:6a:
                    70:a2:ac:b9:dc:50:ae:b5:f3:4d:d2:7b:33:80:5d:
                    81:76:6c:0a:53:16:1b:62:b4:eb:51:04:a4:50:9e:
                    9d:eb:b7:6e:21:58:68:f2:42:10:9b:77:e2:33:a9:
                    fa:f5:d2:6a:29:b6:e0:9f:8a:8b:17:61:98:ac:25:
                    ca:5a:14:dd:1b:e4:94:2a:6a:60:de:35:da:38:9e:
                    3d:d5:08:fa:0c:f7:69:2b:d8:95:3d:f5:20:7b:df:
                    17:a2:2d:96:03:c4:ba:80:40:59:4c:c6:e0:f8:b7:
                    99:bf:b7:07:4b:f7:9d:c9:69:d4:83:4f:2d:82:24:
                    ff:b3:b2:bd:86:ae:3f:39:23:c0:96:ed:c6:5f:1a:
                    7f:dd:7a:31:99:dc:f7:c5:ec:5e:41:00:cd:7d:1c:
                    b5:fc:bc:80:9a:87:21:67:bd:2d:a0:e3:20:53:d4:
                    b2:f9:63:af:0d:f8:d3:f9:67:f1:78:69:6a:31:2e:
                    ed:27:b0:a8:22:36:d7:df:45:36:9c:7a:f1:aa:b8:
                    c0:08:ec:30:9b:35:ff:f2:2b:95:12:7a:01:47:f9:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EC:6D:9D:D2:27:78:C8:87:CF:B9:26:99:B8:57:8F:25:11:06:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6529c7e7-aea2-3e8b-90dd-c3a9518544ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:30:26:9e:61:16:e9:1a:d1:98:d7:bf:53:ed:c4:56:98:49:
         a9:2b:06:b6:34:63:0f:a8:0d:21:5c:75:b2:22:ee:55:aa:b6:
         25:db:5d:95:cc:2c:8a:25:a4:2b:1f:ba:fd:b5:c8:b0:d3:47:
         89:ec:91:18:f3:ed:0b:46:84:5f:fc:f9:38:04:1d:a4:75:b2:
         a9:e4:af:8d:e7:0e:77:80:4b:18:e0:4f:f4:2e:de:fa:05:9f:
         6d:f5:6a:a7:0f:62:bc:25:e5:cf:da:31:41:25:01:bd:5b:32:
         4b:5e:59:6f:9c:32:96:b5:7b:0e:8a:e0:04:08:1d:e0:9d:9c:
         b3:6e:53:73:de:45:41:29:7d:35:1b:71:81:64:4f:ba:8e:20:
         e3:a1:0d:0a:5e:04:d9:38:b0:46:2f:91:e0:91:cc:18:7b:eb:
         9a:52:93:d9:bc:22:97:fd:3d:c5:3f:27:0e:b6:42:c7:03:07:
         e7:f3:bf:31:07:ae:e4:18:0f:0a:8f:1c:6f:8a:26:9e:e3:d5:
         96:35:f5:e5:d9:95:27:d0:10:e3:cd:e7:82:f0:86:06:f6:db:
         f1:46:a4:40:4e:6a:fb:93:63:9c:63:11:54:7c:c8:1e:d8:88:
         13:39:63:7a:33:76:10:d0:a7:a2:97:90:15:4a:04:5a:3a:7d:
         4f:82:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:20:02 2026 by rpki-client