Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa
File:                     06c61722-7a68-3f16-a8ff-eefcf70e5126.roa (raw, json)
Hash identifier:          XQfpAJMQ5p10ef81Upaj6fiJlPKoXapOfbobXPaV8BM=
Subject key identifier:   07:62:8E:24:DF:E5:57:CC:1B:BF:23:C9:46:E5:59:40:1F:2D:C9:E8
Certificate issuer:       /CN=9eed61a4-093d-432f-9466-2001995b9535
Certificate serial:       010D0C9F4328584F549D6D92FA08186A3B8346F0
Authority key identifier: AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     30307
IP address blocks:        23.168.184.0/24 maxlen: 24
                          199.195.236.0/22 maxlen: 22
                          2602:f9b1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:6d:92:fa:08:18:6a:3b:83:46:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eed61a4-093d-432f-9466-2001995b9535
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=5e9f3800-100e-4bf2-8ea5-4f6984785300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:54:cc:14:0d:e5:4b:97:e8:a8:6b:cc:a9:
                    d0:7f:2d:0f:7f:ac:ed:bb:4e:95:b3:67:02:49:46:
                    98:4d:fd:93:48:cb:53:65:0c:d3:63:75:41:45:46:
                    5c:08:8f:11:54:ad:85:c4:22:33:35:02:e3:b4:bf:
                    40:1d:ca:61:ea:d8:e9:d7:85:27:9d:75:d2:6d:77:
                    d4:e4:94:f0:ff:83:6f:4d:6d:d3:8b:43:67:73:e9:
                    63:86:e7:2d:99:e9:0e:9d:1c:f1:0d:bb:d3:c0:2f:
                    15:73:a5:54:37:6e:cb:65:3a:91:39:b7:76:4e:a6:
                    f8:07:a4:02:72:50:f0:d7:3f:79:b7:ac:89:54:01:
                    92:ed:d1:79:43:28:a4:3d:fe:ea:72:6e:d0:84:d1:
                    1b:10:1a:4f:b2:a8:bf:69:32:6b:fd:55:4e:b3:dc:
                    c2:10:02:90:e3:a6:2d:42:01:4e:bd:c7:5e:6e:74:
                    b8:37:ef:3f:f4:d7:2d:3a:e1:2d:cd:77:f4:cc:a6:
                    0a:8f:cb:52:9c:21:df:9c:e4:2d:1f:a0:3e:e8:8a:
                    57:b4:4a:97:fc:4a:8d:f2:b8:33:f5:b6:5c:26:0e:
                    d9:0e:16:04:e1:6e:dc:ad:20:3c:08:6b:7b:3f:06:
                    11:66:6b:79:53:5d:78:de:83:bb:94:f2:19:fe:c9:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:62:8E:24:DF:E5:57:CC:1B:BF:23:C9:46:E5:59:40:1F:2D:C9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.184.0/24
                  199.195.236.0/22
                IPv6:
                  2602:f9b1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:01:94:e8:e5:a5:09:df:27:82:78:45:a8:c2:94:e9:20:f0:
         80:ae:c9:38:17:fc:36:f6:a5:dd:ba:14:28:cc:c2:de:42:ac:
         ea:b2:27:97:9e:4a:60:f7:18:12:bb:4f:87:a2:a3:f3:a8:1f:
         bb:36:7e:b9:51:a0:3c:49:4b:33:a3:62:9b:f5:54:22:bf:10:
         78:09:90:d2:8a:f2:ad:d3:86:a8:f8:b9:55:1f:be:2d:d6:90:
         92:7e:51:4a:c7:ad:9d:2a:5b:97:13:a0:2c:fd:65:ac:a6:18:
         0d:d4:07:61:76:1e:e9:b8:3b:18:42:24:c7:b9:68:f3:47:01:
         88:fa:e6:9a:a1:44:7f:8a:e9:83:83:0b:57:c1:20:ac:bd:9a:
         13:8f:61:0d:bf:9f:a4:69:91:ff:69:92:0b:b0:af:cf:aa:51:
         cb:ba:0a:3c:0d:18:5f:e8:90:a2:11:0b:d4:19:7b:a3:5e:83:
         52:87:13:c4:74:d7:69:7d:3f:d6:ab:73:78:93:f9:53:5d:2d:
         99:f5:2a:39:10:a0:fb:ae:df:42:0f:3b:77:7d:b6:e2:63:5b:
         19:97:fc:28:6d:39:ba:f9:e5:3b:16:8a:69:17:d0:40:dd:b7:
         24:cf:68:7c:e1:e9:c6:71:0d:e4:0d:1d:8f:60:3b:08:1d:4e:
         5d:d8:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:17:13 2026 by rpki-client