Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/929897a7-ecc0-34d6-a55c-aeb26602f817.roa
File:                     929897a7-ecc0-34d6-a55c-aeb26602f817.roa (raw, json)
Hash identifier:          u0V4ZA6Oz77Ta9+UNwhjjTtVwgraOYCE9kSjhNj/avM=
Subject key identifier:   C6:A0:02:84:6C:F7:F6:7A:46:F4:7D:5F:87:02:6C:4D:F8:AE:D9:78
Certificate issuer:       /CN=4d906a8c-85ee-4279-9f48-d84ea4865122
Certificate serial:       010D0C9F4328584EA787CF8F7D1A99226B891B00
Authority key identifier: C5:52:3D:9F:A1:CC:FC:24:0A:04:F9:19:66:E1:44:3B:9E:0F:B6:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/929897a7-ecc0-34d6-a55c-aeb26602f817.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401568
IP address blocks:        23.132.100.0/24 maxlen: 24
                          2602:f73a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:cf:8f:7d:1a:99:22:6b:89:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d906a8c-85ee-4279-9f48-d84ea4865122
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c16ac420-2001-42fe-8022-91753607f46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:8c:4b:43:20:6b:bf:c8:aa:fe:8a:80:29:
                    34:16:a7:97:99:3f:51:94:80:4b:52:80:a8:23:38:
                    01:06:30:00:f0:19:b6:43:be:4f:ac:f5:0c:1d:af:
                    e8:cf:3d:80:bd:12:c8:c3:27:09:07:69:9b:9a:76:
                    e7:20:16:a7:0b:05:90:e0:f4:72:76:b7:79:f8:74:
                    b3:a9:c1:1f:84:20:42:1a:79:be:18:a9:d0:d4:88:
                    23:f5:b5:e1:d1:2c:57:43:d2:37:7c:a9:d7:95:98:
                    f8:72:5a:a1:e7:c8:d8:93:f7:31:8a:10:c6:b8:44:
                    9c:8a:3a:c0:0f:63:60:ca:b0:7a:41:92:67:33:15:
                    86:58:7c:e9:2d:2c:b1:8a:c2:0d:ad:f9:8b:d8:f0:
                    97:eb:5b:25:4b:e7:6f:4b:99:ad:16:a2:3f:10:6b:
                    13:4d:73:0e:0c:6c:73:e5:10:c6:60:8a:c4:22:0a:
                    65:32:ed:60:80:b0:95:fd:86:b6:bd:2a:b7:98:24:
                    d4:9c:b9:fd:f1:dd:0c:ca:21:cc:17:a4:3d:9f:5c:
                    6e:17:66:4a:f8:e9:58:8f:65:71:3b:c4:ce:f0:6f:
                    51:d3:a9:84:b5:d8:f4:e4:6b:59:ca:34:ad:f1:db:
                    ff:1e:24:64:30:12:f3:1c:c5:0d:32:79:7d:5e:9d:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A0:02:84:6C:F7:F6:7A:46:F4:7D:5F:87:02:6C:4D:F8:AE:D9:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/929897a7-ecc0-34d6-a55c-aeb26602f817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.crl

            X509v3 Authority Key Identifier:
                keyid:C5:52:3D:9F:A1:CC:FC:24:0A:04:F9:19:66:E1:44:3B:9E:0F:B6:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.100.0/24
                IPv6:
                  2602:f73a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:eb:da:82:64:7e:b5:3f:d5:74:ff:95:d0:0c:3c:ce:85:08:
         11:7d:c5:ae:77:39:12:3a:40:d5:13:29:df:e4:35:54:86:36:
         1a:f6:0b:19:ba:04:6d:d7:e5:0b:f4:ed:07:7c:de:e9:90:fd:
         9e:90:31:a7:8d:ac:f7:d8:49:1e:86:08:53:d7:18:3d:6b:a2:
         de:81:8e:be:61:a6:a2:35:66:9b:89:ae:db:56:8a:a8:e4:02:
         a3:1b:fd:c1:b9:05:20:19:89:a3:e0:e9:0b:45:c6:b2:f3:68:
         7d:b4:df:38:71:fa:9e:c1:69:c8:a5:3b:11:46:24:9f:a2:36:
         97:b0:dc:37:95:78:7a:d5:01:7f:12:d1:bb:9c:40:e0:89:d0:
         eb:41:42:d5:65:20:41:d0:46:0e:59:c3:24:4f:a2:1c:5b:19:
         d1:d4:40:d5:2b:16:39:57:ed:3e:99:0c:87:a5:9c:c4:48:4b:
         18:99:19:9e:3f:ab:fb:36:ff:5d:c2:a0:94:02:5c:65:74:af:
         1f:e1:ef:01:f8:cc:81:0e:74:1e:8a:53:5c:0c:b4:fb:3a:70:
         bc:d0:4b:be:3d:57:b9:ab:55:d3:2c:ae:c6:8f:04:f3:cc:ba:
         91:3b:7d:b4:52:91:58:3f:94:14:2e:0a:7e:54:43:fc:f3:60:
         23:93:4d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:40:34 2026 by rpki-client