Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/a6cde5b0-0df5-3cee-9094-ddb89068e15b.roa
File:                     a6cde5b0-0df5-3cee-9094-ddb89068e15b.roa (raw, json)
Hash identifier:          5u61UOoLsHsPlSf+KYkxTRcksBGRWEFgKnqU1ISZ7Go=
Subject key identifier:   14:0E:5B:F5:3D:F2:89:FC:4E:FA:69:E9:BD:C8:E3:23:03:C1:A8:6F
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584F498C0D0EEF4786C13E79BD40
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/a6cde5b0-0df5-3cee-9094-ddb89068e15b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11776
IP address blocks:        23.245.56.0/21 maxlen: 21
                          23.245.80.0/21 maxlen: 21
                          24.145.36.0/24 maxlen: 24
                          24.145.86.0/24 maxlen: 24
                          64.186.87.0/24 maxlen: 24
                          72.28.160.0/19 maxlen: 19
                          137.103.64.0/23 maxlen: 23
                          137.103.76.0/23 maxlen: 23
                          137.103.182.0/24 maxlen: 24
                          159.250.128.0/20 maxlen: 20
                          159.250.240.0/20 maxlen: 20
                          209.196.176.0/22 maxlen: 22
                          209.196.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:0d:0e:ef:47:86:c1:3e:79:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f8ffb4f0-28d0-41d5-ab1b-ccc1a01fbd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:50:d5:03:61:a0:4b:4d:39:58:c1:22:e1:
                    3e:fc:fd:d0:80:76:72:67:e0:2e:4d:2a:d3:2f:80:
                    66:75:ab:12:7d:1c:49:f3:02:ef:42:1b:12:07:7d:
                    af:df:3d:62:5c:45:c8:17:4b:f1:fb:f0:26:50:0a:
                    e1:14:71:92:fb:cf:85:a5:48:c5:8d:da:13:17:14:
                    ea:91:a1:65:d2:d1:74:2e:82:54:c5:ba:92:79:d5:
                    73:41:cf:ce:ae:b3:1e:1f:b2:85:08:a4:fd:2e:05:
                    cd:e4:f0:e0:73:3d:54:b5:3a:27:ba:c0:c2:f4:93:
                    ed:e9:1f:b7:e5:da:70:38:a7:ec:92:1e:fc:4a:39:
                    20:e5:e9:20:20:4e:75:5b:24:70:f5:b3:9c:71:de:
                    e3:1f:ca:1f:52:a6:29:f6:44:88:d0:63:3d:a6:52:
                    6f:8a:01:99:e9:d7:25:0d:4a:00:9e:c9:05:b1:f3:
                    93:d4:9b:7c:ca:42:8c:f2:62:64:9d:67:73:84:c4:
                    f9:b5:89:05:1f:b1:45:cb:e3:59:7f:c3:a5:d5:56:
                    49:78:66:61:f5:94:88:ab:a8:d6:b9:76:da:16:fc:
                    8f:89:85:6e:35:0d:2a:8f:9c:65:63:8f:87:87:ba:
                    0a:08:9c:86:b3:b6:91:85:db:8d:66:fb:92:92:9b:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0E:5B:F5:3D:F2:89:FC:4E:FA:69:E9:BD:C8:E3:23:03:C1:A8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/a6cde5b0-0df5-3cee-9094-ddb89068e15b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.245.56.0/21
                  23.245.80.0/21
                  24.145.36.0/24
                  24.145.86.0/24
                  64.186.87.0/24
                  72.28.160.0/19
                  137.103.64.0/23
                  137.103.76.0/23
                  137.103.182.0/24
                  159.250.128.0/20
                  159.250.240.0/20
                  209.196.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:48:e0:32:c3:fa:08:b5:99:08:21:a5:c8:0f:32:d2:6a:06:
         8a:1e:0f:70:4b:b2:04:d6:f9:20:44:d7:cd:f9:e5:dc:f8:5e:
         9e:12:c2:cd:67:1d:08:69:2c:6e:83:dc:1e:28:c4:c0:36:6e:
         a0:9e:0b:92:46:1e:66:0b:aa:3a:b4:39:b1:db:ce:8d:75:14:
         e5:d9:a5:8a:8a:c4:44:21:80:f4:1e:ec:30:d1:06:5a:ff:87:
         38:ca:fa:34:08:6c:6e:5f:16:99:3b:dc:40:4f:6f:70:a8:1f:
         f1:e5:a4:3a:d4:10:6a:c6:4d:36:03:a6:05:96:c7:da:2f:f2:
         a1:b0:37:f7:65:ff:b1:00:f1:27:b9:7f:6a:23:60:2c:d6:7b:
         90:e9:05:e0:7e:ad:f7:84:9f:d3:a0:00:13:77:81:f3:49:83:
         67:99:24:2c:07:9c:e8:7b:f6:44:6d:05:40:59:e8:a7:57:70:
         d1:10:c9:1a:f4:f6:48:67:61:b5:25:57:70:cb:fa:c1:70:41:
         aa:12:e5:10:59:23:c9:8f:e0:74:85:7e:0e:2b:0c:5b:c1:36:
         f3:33:44:44:b1:cb:77:58:03:9b:3b:a2:7d:e4:36:df:f8:0e:
         42:28:3a:05:6f:0c:49:0d:a2:3c:e7:17:c7:f1:de:ec:0d:2c:
         57:04:fe:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:13:57 2026 by rpki-client