Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa
File:                     15d664b5-17e1-32df-bb65-4665ea1a0284.roa (raw, json)
Hash identifier:          NBKk2upXO/hzFQF4VNz9DrCAru+uaAOdyYic0OrPtqA=
Subject key identifier:   2C:34:90:30:43:8B:AA:21:7A:BB:76:D5:48:76:74:3D:69:73:C4:BE
Certificate issuer:       /CN=563a7f22-13a9-45ac-b309-56ee9c8904ce
Certificate serial:       010D0C9F4328584EC0C93202A25801A656547BC0
Authority key identifier: 3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa
Signing time:             Fri 07 Aug 2026 02:09:06 +0000
ROA not before:           Fri 07 Aug 2026 02:09:06 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     401840
IP address blocks:        23.143.108.0/24 maxlen: 24
                          199.58.13.0/24 maxlen: 24
                          2602:f5c6::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:c9:32:02:a2:58:01:a6:56:54:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563a7f22-13a9-45ac-b309-56ee9c8904ce
        Validity
            Not Before: Aug  7 02:09:06 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=8eb07402-7f34-4f1d-ae83-91655ce14a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:34:85:37:a9:11:f0:7e:d5:b7:66:b8:d5:34:
                    9d:2f:e1:66:64:62:17:ff:57:71:b1:71:7d:4e:bc:
                    93:f7:c7:3b:20:6c:cb:f3:d7:c9:25:8a:4a:10:19:
                    51:3f:b4:05:e5:f0:56:8c:69:cf:e5:a5:0e:18:42:
                    5c:28:d6:6d:2b:e7:56:bf:a0:41:26:a6:0d:3d:b7:
                    f7:fb:b9:4d:21:fc:de:a0:65:60:71:e6:12:b2:ad:
                    6d:fd:15:32:0b:66:6a:2b:c1:4b:06:0b:b8:18:93:
                    1b:5a:17:c1:02:eb:50:4b:76:b7:99:6c:d0:2b:6b:
                    4d:16:fc:41:16:51:19:55:33:2c:a4:4a:4e:42:04:
                    c2:6a:92:8d:8f:da:b2:f1:2a:a5:c9:08:69:93:81:
                    af:cc:c2:16:22:eb:22:b5:26:3a:05:1c:6e:15:70:
                    dc:73:48:4a:9b:4f:a2:fd:08:f1:fc:4f:a5:30:c0:
                    87:2c:56:28:d1:f5:2c:b5:5c:2b:a0:8b:87:e6:38:
                    3c:db:37:b2:93:64:64:38:e2:f6:5e:12:16:ff:c7:
                    ac:b9:c2:8a:37:64:fd:95:9f:0d:70:96:a5:d6:b5:
                    98:9c:49:47:cc:90:cb:1b:c0:23:84:a0:5e:68:e0:
                    64:8b:74:a7:06:6d:78:a6:c9:c3:77:78:fd:5a:27:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:34:90:30:43:8B:AA:21:7A:BB:76:D5:48:76:74:3D:69:73:C4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.crl

            X509v3 Authority Key Identifier:
                keyid:3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.108.0/24
                  199.58.13.0/24
                IPv6:
                  2602:f5c6::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:dc:78:89:ea:57:f9:92:13:48:c0:3a:86:95:df:97:db:
         4f:82:ed:e7:81:16:d3:40:2f:30:a9:03:f1:2c:b4:f1:d7:6b:
         b8:42:02:7f:c0:9c:28:74:6a:11:cf:68:4b:08:ac:41:ab:a3:
         3a:28:b7:a7:8a:5a:1e:d0:00:35:08:e3:cf:9f:c6:8f:42:67:
         4f:e5:a1:f7:76:37:0d:cf:bd:3e:7c:18:a2:5d:d4:3c:52:62:
         8a:7a:39:6c:0e:d6:da:a6:1b:d3:30:cb:ad:ed:91:f9:25:cd:
         55:9b:57:c6:a7:19:50:d8:78:36:d9:f9:f8:e4:3f:0f:00:8c:
         12:a6:da:78:a1:a0:82:c9:04:69:87:ed:52:c1:a6:73:b4:9d:
         8a:54:83:26:22:1c:f7:5b:1d:1b:72:80:fe:19:7f:b7:2a:62:
         a6:86:8f:03:d7:21:4b:2f:71:aa:5d:4b:47:1a:96:ac:31:0a:
         5f:b1:83:d6:f7:20:85:dc:dc:50:56:c2:3e:d8:b5:2d:2f:0b:
         7f:4d:f0:cc:b0:f3:d0:44:3c:45:16:5c:44:96:bf:dc:28:5d:
         5b:de:ab:13:4e:d4:3a:39:28:d7:10:f6:b0:c4:b2:ca:99:e7:
         19:66:6a:7a:a8:c3:3d:8d:00:e5:73:d1:ba:a3:eb:34:9c:6f:
         25:d3:61:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:50 2026 by rpki-client