Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4056d6c1-ecca-3b87-ac0f-de768e1f0514.roa
File:                     4056d6c1-ecca-3b87-ac0f-de768e1f0514.roa (raw, json)
Hash identifier:          10OhYfOPFlvKaekptgUu0V2gQXNOTqyYVD/JwzWQjZA=
Subject key identifier:   13:CE:74:DC:AD:A0:61:58:75:78:C6:7D:94:15:7C:70:48:05:AC:20
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584EC2FFE53308A280966EFB3400
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4056d6c1-ecca-3b87-ac0f-de768e1f0514.roa
Signing time:             Fri 07 Aug 2026 21:10:56 +0000
ROA not before:           Fri 07 Aug 2026 21:10:56 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     11776
IP address blocks:        23.244.215.0/24 maxlen: 24
                          23.244.222.0/23 maxlen: 23
                          23.245.8.0/23 maxlen: 23
                          23.245.19.0/24 maxlen: 24
                          23.245.80.0/23 maxlen: 23
                          23.245.176.0/23 maxlen: 23
                          23.245.178.0/23 maxlen: 23
                          23.245.180.0/23 maxlen: 23
                          23.245.189.0/24 maxlen: 24
                          69.161.79.0/24 maxlen: 24
                          69.161.116.0/24 maxlen: 24
                          146.168.250.0/23 maxlen: 23
                          159.250.94.0/24 maxlen: 24
                          172.85.26.0/23 maxlen: 23
                          216.10.172.0/24 maxlen: 24
                          216.10.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:ff:e5:33:08:a2:80:96:6e:fb:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Aug  7 21:10:56 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=e1793f01-e404-48c0-b4d6-63f96447bbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:50:a5:5c:ac:24:92:66:88:c2:c6:b2:fa:
                    9f:63:b7:16:60:79:3c:7a:63:24:a2:5a:70:44:2c:
                    4b:60:0d:4d:2b:6e:20:9a:77:37:ef:a3:46:34:a4:
                    60:00:58:4a:70:c0:d5:7a:ce:69:1f:3e:34:93:f3:
                    74:e2:e0:02:bc:a0:33:e3:42:07:63:a4:f9:93:a9:
                    12:93:0c:1c:24:20:78:7e:53:72:db:12:fa:b8:9e:
                    a4:c7:38:28:f6:06:35:ae:4e:d7:e8:38:7d:3a:69:
                    12:8a:9f:05:37:a9:65:6f:33:d4:73:e1:82:7e:10:
                    17:16:5f:b2:3c:0f:8a:51:32:41:09:d1:45:e8:3a:
                    d2:12:65:a6:0b:57:07:cf:83:68:91:5c:9b:5e:ca:
                    15:97:57:27:22:62:e1:b3:95:fd:38:a8:6a:03:35:
                    16:52:f6:94:56:e0:5a:b3:1a:13:a2:7d:63:b9:27:
                    2e:70:43:e3:17:5b:27:65:c3:bf:ce:ea:e1:5c:d7:
                    27:32:99:f0:6e:a7:86:c9:cd:4c:67:35:96:66:17:
                    e0:25:2c:11:66:46:74:7a:02:7c:37:3c:9b:72:d4:
                    21:dc:60:77:e2:2c:2a:d7:1c:18:b5:77:04:2e:55:
                    76:3f:98:13:2c:6c:0f:bd:94:5c:72:fc:1f:d0:39:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CE:74:DC:AD:A0:61:58:75:78:C6:7D:94:15:7C:70:48:05:AC:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/4056d6c1-ecca-3b87-ac0f-de768e1f0514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.244.215.0/24
                  23.244.222.0/23
                  23.245.8.0/23
                  23.245.19.0/24
                  23.245.80.0/23
                  23.245.176.0-23.245.181.255
                  23.245.189.0/24
                  69.161.79.0/24
                  69.161.116.0/24
                  146.168.250.0/23
                  159.250.94.0/24
                  172.85.26.0/23
                  216.10.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:7b:f6:7f:2b:d1:92:76:a0:56:b8:30:a6:b1:83:9d:25:11:
         b1:15:53:ad:ed:41:ab:a7:91:dc:07:72:1a:45:74:d7:44:45:
         64:ae:ae:77:7f:60:16:a2:a6:fb:e9:c8:23:c6:bf:20:31:74:
         33:64:7c:71:d5:73:9e:73:4b:15:03:f6:b3:50:9a:66:66:e1:
         ce:c3:e8:37:5d:25:60:5e:1e:8b:5a:af:1c:92:fc:81:2f:64:
         e0:a8:48:a5:44:56:24:60:fc:74:88:dc:0c:60:81:86:6d:19:
         d7:f5:9a:09:d0:49:6f:70:6f:de:7f:eb:13:e7:92:f3:23:37:
         ba:39:b1:d4:ac:e9:81:ef:76:43:90:6f:d2:a2:92:a4:32:86:
         a6:da:23:41:34:a0:f2:a6:e4:23:d8:06:aa:fc:b7:83:61:8c:
         ab:54:33:ad:53:39:40:09:d6:ca:cf:e3:b2:19:fa:24:2f:33:
         99:d5:0b:1f:11:66:6b:7d:e3:38:d3:03:39:b8:03:8d:95:c5:
         21:71:74:f4:76:78:1a:d4:ad:e1:52:f8:5d:88:3f:cb:4b:a9:
         c0:1f:0c:b5:b5:3c:a5:69:2b:64:37:d4:75:7f:f8:5e:13:32:
         da:c7:f1:38:f8:ac:b6:33:24:4c:7c:6a:7d:27:d0:62:c8:80:
         16:3c:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:23:57 2026 by rpki-client