Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c/6fd115b6-f9c2-39c2-9788-be9bd280ef42.roa
File:                     6fd115b6-f9c2-39c2-9788-be9bd280ef42.roa (raw, json)
Hash identifier:          DHVVOmYnWEo6We6n85Pok1nUw4Cv3GA+3w0xxEgFLzE=
Subject key identifier:   9D:5E:F6:66:CD:70:0F:36:66:C5:BD:05:95:5E:66:12:D2:67:47:18
Certificate issuer:       /CN=1974b266-c0d6-473e-b8a0-d8003f319c7c
Certificate serial:       010D0C9F4328584F4972DB8CED01AEE9D0959240
Authority key identifier: 07:75:6A:C5:F4:AD:9F:F0:7C:F4:7F:A2:9E:14:CC:4D:72:84:F0:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c/6fd115b6-f9c2-39c2-9788-be9bd280ef42.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402566
IP address blocks:        23.159.60.0/24 maxlen: 24
                          2602:f3a6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c/1974b266-c0d6-473e-b8a0-d8003f319c7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c/1974b266-c0d6-473e-b8a0-d8003f319c7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:db:8c:ed:01:ae:e9:d0:95:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1974b266-c0d6-473e-b8a0-d8003f319c7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3ea891d0-bbc3-49ad-a710-7c288b41f8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:20:e9:ea:ef:b0:20:f9:de:d5:e0:32:1c:
                    62:d6:74:2e:d4:23:ca:d8:b8:ee:f2:42:24:f3:5f:
                    dd:50:fa:1e:a5:4e:57:5a:d2:c4:b0:db:f7:ee:e0:
                    f6:37:ff:d7:55:85:c5:4b:1a:1c:a9:54:6a:a4:ef:
                    e8:3f:6d:d3:13:42:ad:db:4f:a6:61:ff:2e:db:70:
                    40:d2:22:33:0b:bf:74:ae:d3:5d:a2:ce:dd:5e:5b:
                    ee:6d:7f:2a:67:6d:45:ed:a4:9b:09:6e:e7:05:f7:
                    41:a5:75:d1:bd:f4:76:11:ca:7a:13:20:84:ff:c7:
                    c7:4c:4a:77:5d:21:e9:9c:00:a9:ee:88:e9:e9:7d:
                    73:79:11:6f:20:1e:79:df:c7:cf:fd:73:db:0b:31:
                    c7:d5:8d:3e:17:40:89:8a:a2:45:4d:2a:5f:9e:62:
                    5d:cd:c2:39:33:b1:ae:c7:f3:60:9d:20:8d:4d:d7:
                    3e:d5:51:78:f6:69:da:3f:09:92:92:b5:cd:8b:a4:
                    6c:71:f6:a4:c5:77:21:7f:3f:64:ca:69:8a:55:5f:
                    8b:f8:de:35:02:c9:85:ac:99:38:ab:6c:d5:65:ef:
                    65:16:6c:92:b0:0d:24:16:32:77:49:de:b6:a8:18:
                    f3:19:ca:dc:15:67:7c:cc:48:a9:95:90:f5:b3:8c:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5E:F6:66:CD:70:0F:36:66:C5:BD:05:95:5E:66:12:D2:67:47:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c/6fd115b6-f9c2-39c2-9788-be9bd280ef42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c/1974b266-c0d6-473e-b8a0-d8003f319c7c.crl

            X509v3 Authority Key Identifier:
                keyid:07:75:6A:C5:F4:AD:9F:F0:7C:F4:7F:A2:9E:14:CC:4D:72:84:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1974b266-c0d6-473e-b8a0-d8003f319c7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.60.0/24
                IPv6:
                  2602:f3a6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:fa:ed:cc:0e:5b:e7:d1:ff:ac:2e:48:8c:43:04:bd:a5:
         ee:e8:ca:91:93:80:fc:9f:23:f8:aa:ab:dd:74:47:58:78:19:
         4f:ee:67:37:2b:8b:e2:1d:27:ef:2e:cc:2a:85:a4:94:c5:d0:
         63:ff:1c:b4:9a:8e:bd:40:9d:71:8b:84:9b:94:85:d7:d5:f2:
         23:f6:dd:5c:5e:17:75:2c:27:b6:2f:33:86:06:92:09:d6:e1:
         5c:c2:d0:64:b0:a0:80:e4:21:f0:0d:f0:02:8d:a6:f2:6f:e1:
         c8:eb:6f:6e:08:33:56:90:ed:1b:0c:e2:9f:33:58:81:35:7c:
         bd:57:d9:7c:e5:45:51:f7:e0:45:0a:ba:47:18:93:4d:15:5e:
         ea:d3:dd:3c:bd:98:b8:f4:c0:1f:c5:5c:a3:e6:5a:87:fb:1f:
         b1:ec:85:7b:5b:dd:fb:d4:f5:35:de:0a:27:f3:26:d2:6a:13:
         5e:4b:74:23:55:e8:3b:68:bb:df:1a:86:8e:cc:af:f9:22:7d:
         aa:51:a2:37:9a:37:30:5d:6f:20:d8:1d:e9:c6:97:53:73:27:
         a8:50:ff:30:7b:f5:f0:ba:97:65:73:65:12:ac:9f:79:3c:9f:
         df:dc:50:cb:1a:2a:e7:9c:29:16:f3:c9:0e:1e:ae:b3:32:3b:
         29:0a:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:28:27 2026 by rpki-client