Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/6561a1e9-7d89-3514-bdf6-0778be01fe71.roa
File:                     6561a1e9-7d89-3514-bdf6-0778be01fe71.roa (raw, json)
Hash identifier:          AygQkjhw4A5DxsPFFulREum5j7+d1CX9NMB4XAjCHJo=
Subject key identifier:   1A:AF:4A:C3:19:79:83:3F:77:3D:BC:4C:2E:11:AD:77:8C:74:99:F1
Certificate issuer:       /CN=d9c16922-7f72-4551-905c-fa3b40d9efd0
Certificate serial:       010D0C9F4328584EE7BCA8CBEC069882B66B65D0
Authority key identifier: 96:BB:FD:D5:17:36:B1:D5:15:C2:5C:F3:43:C7:F2:3B:F0:94:A8:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/6561a1e9-7d89-3514-bdf6-0778be01fe71.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     394887
IP address blocks:        23.182.192.0/24 maxlen: 24
                          172.110.172.0/22 maxlen: 24
                          2620:134:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a8:cb:ec:06:98:82:b6:6b:65:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9c16922-7f72-4551-905c-fa3b40d9efd0
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=1dddacad-7878-42ce-94b2-2908407e07da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:0d:f1:bf:a9:d6:cc:c9:28:6b:9b:99:e6:
                    8c:44:a0:dd:53:e3:56:e0:67:eb:76:c5:bf:27:76:
                    ef:81:1e:56:2d:ca:dd:8d:63:d7:48:36:8a:88:43:
                    b3:01:be:1b:85:7b:7e:64:ec:be:e2:e4:e8:64:fd:
                    9b:a9:86:dc:78:c2:b5:4a:8a:e4:35:bc:d3:d5:10:
                    38:7f:8a:40:16:c5:9b:85:57:37:d8:7e:0d:36:33:
                    81:ef:aa:b4:a8:f7:33:95:47:6a:ad:32:80:11:73:
                    d3:9b:51:65:82:c7:77:e0:f3:8f:00:79:39:51:00:
                    63:4a:24:eb:66:5a:2a:a1:c7:1a:e5:3d:91:f0:45:
                    e6:65:5a:df:d0:78:fe:09:4b:73:9f:af:a1:75:7a:
                    d2:37:e2:20:0c:92:d3:8b:77:58:f7:d4:cc:69:d1:
                    d1:ca:ef:39:32:68:58:48:9e:79:0d:fa:fd:12:30:
                    23:84:9e:f7:6d:f1:60:61:bf:65:c0:29:fa:d6:4d:
                    a0:a4:76:7d:5a:b8:c1:cc:ca:30:f4:b6:7c:26:4a:
                    18:b7:e6:62:e2:3a:54:68:a9:dd:1c:08:9a:a5:14:
                    7e:f8:95:4e:70:c6:81:69:4a:5b:87:89:99:59:ff:
                    0e:4b:ec:64:34:a5:be:e0:1f:5f:ad:54:2a:b5:6e:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AF:4A:C3:19:79:83:3F:77:3D:BC:4C:2E:11:AD:77:8C:74:99:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/6561a1e9-7d89-3514-bdf6-0778be01fe71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.crl

            X509v3 Authority Key Identifier:
                keyid:96:BB:FD:D5:17:36:B1:D5:15:C2:5C:F3:43:C7:F2:3B:F0:94:A8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.192.0/24
                  172.110.172.0/22
                IPv6:
                  2620:134:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:75:96:0b:98:4e:df:64:e9:1f:cf:5e:cf:fe:e5:32:78:bb:
         bd:25:e2:9f:a0:cd:b5:b1:b7:86:b3:6b:d5:ca:9e:db:88:be:
         9c:6d:1d:64:55:91:65:2d:c0:c1:02:2d:36:5b:7c:66:dd:3c:
         e2:13:fd:6e:cd:f2:e7:0f:bf:e8:25:e6:e9:53:68:63:2c:84:
         a1:8e:07:e2:6d:cc:fd:4e:0b:70:86:d4:aa:1d:c9:8d:ca:31:
         ed:51:2f:27:7b:72:67:16:b6:16:e2:8c:fe:6c:cc:23:28:27:
         a8:a2:3c:d2:62:31:34:77:20:36:a8:20:32:ad:6c:df:57:8d:
         9d:07:63:18:9f:67:30:59:c5:47:bd:b0:09:c6:0d:94:41:b6:
         7a:3f:b3:10:e5:09:4b:0d:de:4a:c9:dc:19:a9:20:bd:85:3b:
         7f:12:fe:d1:d9:2b:71:d2:fb:82:43:49:9f:aa:13:6b:7a:43:
         45:b3:6f:ff:2b:c9:b8:40:77:87:12:60:ca:b4:d2:39:cd:97:
         5b:9c:1e:eb:cd:51:a2:4b:93:b3:fd:dc:c7:47:50:b5:6b:a9:
         14:e7:e4:eb:6c:3b:4d:75:4b:f1:1e:07:87:44:25:26:66:9a:
         76:3f:4f:25:ee:0d:95:dd:1b:4e:1d:9a:12:62:9e:82:8f:55:
         bb:0a:b1:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 12 14:26:59 2026 by rpki-client