Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e/e73ae7cb-e2b6-3c0a-95d6-3d2cad5970dc.roa
File:                     e73ae7cb-e2b6-3c0a-95d6-3d2cad5970dc.roa (raw, json)
Hash identifier:          8p/XJn3XybCZA8FpSrYfujm/+8hv7GpOL0Usrp0V90Q=
Subject key identifier:   C6:0D:41:46:34:F7:E5:B5:98:C4:C3:91:A9:BC:29:AF:FE:A2:BE:1F
Certificate issuer:       /CN=18253f47-99c1-473b-a4e8-c75f95a5c92e
Certificate serial:       010D0C9F4328584EF2E782E69AE2060793BD1E80
Authority key identifier: FB:E9:EF:59:64:91:B3:EA:0A:C8:CA:06:67:52:78:0B:AB:88:82:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e/e73ae7cb-e2b6-3c0a-95d6-3d2cad5970dc.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     402292
IP address blocks:        23.155.252.0/24 maxlen: 24
                          2602:f41f:1::/48 maxlen: 48
                          2602:f41f:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e/18253f47-99c1-473b-a4e8-c75f95a5c92e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e/18253f47-99c1-473b-a4e8-c75f95a5c92e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:82:e6:9a:e2:06:07:93:bd:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18253f47-99c1-473b-a4e8-c75f95a5c92e
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=3232f237-4759-464f-a2d7-9ebe9002aea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:88:fc:c4:ea:b7:f8:b5:d3:3a:50:d0:6e:
                    28:f3:66:30:ce:ec:c2:5a:ee:73:cf:ae:6a:59:82:
                    c0:22:26:f2:46:31:fe:3e:1f:f1:39:82:b9:b1:4a:
                    34:13:5e:74:45:5b:91:1c:7f:35:49:3a:53:c4:27:
                    11:e8:59:f3:75:8e:5e:ce:9a:d9:88:9b:01:74:3e:
                    c8:3c:72:61:e6:3c:ff:42:12:7c:68:58:59:b8:8a:
                    99:8a:91:4f:18:a5:90:31:29:22:cb:e4:c3:7b:48:
                    10:1a:f5:67:02:66:58:f2:a0:a3:8c:f8:83:19:1c:
                    23:c4:94:b1:44:a8:72:74:18:87:d8:21:f9:3c:fb:
                    dc:dd:73:83:33:16:2a:43:1e:24:28:f7:c6:98:5f:
                    c8:a1:0b:9f:09:ad:cc:42:f1:23:bb:c3:ff:0b:63:
                    26:b9:f2:0f:db:89:c6:de:bc:7a:4a:72:94:ca:15:
                    4a:1f:87:e7:4e:1a:b5:41:53:9a:35:89:4e:18:e9:
                    f0:8c:fe:ea:ee:6e:17:9d:a0:8b:d4:3e:7e:45:dd:
                    59:da:a6:21:e2:83:93:aa:af:56:83:f9:71:f4:7f:
                    f7:5f:95:00:3c:c6:08:18:d5:e9:ee:41:84:99:91:
                    00:fb:08:1c:9d:57:a0:46:6f:ac:cd:5a:d3:03:95:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0D:41:46:34:F7:E5:B5:98:C4:C3:91:A9:BC:29:AF:FE:A2:BE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e/e73ae7cb-e2b6-3c0a-95d6-3d2cad5970dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e/18253f47-99c1-473b-a4e8-c75f95a5c92e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:E9:EF:59:64:91:B3:EA:0A:C8:CA:06:67:52:78:0B:AB:88:82:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/18253f47-99c1-473b-a4e8-c75f95a5c92e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.252.0/24
                IPv6:
                  2602:f41f:1::/48
                  2602:f41f:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ec:82:bc:3e:96:65:d0:87:2b:94:5e:e1:13:ef:6c:8b:7f:
         90:b7:af:cf:ba:2b:3d:2c:da:99:ca:b6:2a:e7:f3:0f:78:78:
         a9:71:8a:0e:67:05:a3:f3:21:46:f8:f8:29:5d:c3:66:76:7c:
         1b:03:e7:42:f8:bc:f8:25:6d:eb:68:f9:c1:29:39:9d:52:23:
         d3:7b:9d:96:75:df:04:af:ee:12:01:cc:22:ea:65:6f:90:18:
         ed:a2:72:61:44:cb:f6:16:db:82:e3:0b:60:1f:0a:ca:ef:81:
         f9:b5:c8:46:14:89:32:b4:43:1a:8d:25:ce:b8:50:aa:6b:c1:
         d3:e1:da:53:1b:23:ee:e6:84:44:35:75:b4:09:8c:9e:83:66:
         4c:d8:fe:65:c1:11:d3:f7:07:15:fa:49:97:ff:a3:86:18:5e:
         80:c6:59:fa:35:ed:47:50:7f:72:dd:1f:fe:95:e8:8e:49:07:
         6d:3b:e5:34:80:71:09:56:8d:59:42:f2:49:d9:c6:0d:e6:52:
         da:1d:cf:b5:81:bd:2e:a6:e4:df:f3:56:4b:bf:3d:ea:ee:e5:
         41:b4:13:8f:77:21:f3:20:48:56:80:f4:81:33:26:47:ab:33:
         13:af:0a:bc:3d:7d:ed:ba:22:1c:12:91:b8:af:a7:fe:9d:c1:
         d7:ce:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:50:09 2026 by rpki-client