Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa
File:                     1b6b4554-6168-3529-a377-02cd9bc61653.roa (raw, json)
Hash identifier:          6projhmLVDiPWx3wuQxGRGRCKtQN7SogtW/8v6Ah0o4=
Subject key identifier:   73:E7:41:8D:18:E0:EB:FD:78:03:11:B7:C6:0F:77:0C:11:71:65:88
Certificate issuer:       /CN=16a8300a-6b73-42c6-b812-6b49b6587a38
Certificate serial:       010D0C9F4328584F49769644454869F879FE6700
Authority key identifier: 99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395648
IP address blocks:        23.173.248.0/24 maxlen: 24
                          131.143.48.0/22 maxlen: 24
                          2602:f946::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:96:44:45:48:69:f8:79:fe:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a8300a-6b73-42c6-b812-6b49b6587a38
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fc37a578-2343-4da4-aeb7-9511f6d7c6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:78:c2:35:91:1f:f2:d6:35:51:09:0e:62:1f:
                    e0:4b:b8:a2:c4:24:74:fb:fc:04:27:c9:7c:c4:1c:
                    68:2b:ed:38:16:92:14:62:73:b9:b2:9d:ed:92:d2:
                    e1:0d:ae:2c:b2:00:4a:33:60:fa:fa:3a:76:54:65:
                    8f:a1:dc:d1:fb:b5:5f:ec:c6:9e:70:98:5c:95:3e:
                    cd:04:d5:4f:c6:d4:55:93:f5:fc:1b:16:6e:43:77:
                    a5:05:43:d4:54:ef:99:35:fd:56:b6:55:07:4f:62:
                    ba:cc:f6:a9:db:81:82:e9:1c:17:7a:4a:ef:9b:84:
                    2f:eb:aa:36:ba:a0:6d:f5:df:89:19:e3:c8:9b:98:
                    5a:e0:17:a9:c1:08:e8:22:7b:69:8a:1a:f8:f2:4e:
                    6a:22:dd:30:7c:49:fe:4c:ad:79:35:6b:17:8c:ee:
                    20:8e:3e:45:56:b6:0c:06:d5:bb:d3:1a:07:83:0f:
                    b1:0a:a9:27:9f:84:64:96:9f:36:ef:2f:7b:14:85:
                    ba:f8:49:ec:fb:54:09:14:36:48:2c:98:67:fa:6d:
                    e7:cd:ff:fd:36:1f:97:7c:b9:b7:f9:e1:54:b6:5d:
                    51:4a:79:51:1e:fe:2d:16:8a:48:9e:36:ef:b6:db:
                    8b:97:28:3f:87:c4:03:cd:79:dd:2e:6f:f2:57:2b:
                    6c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E7:41:8D:18:E0:EB:FD:78:03:11:B7:C6:0F:77:0C:11:71:65:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl

            X509v3 Authority Key Identifier:
                keyid:99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.248.0/24
                  131.143.48.0/22
                IPv6:
                  2602:f946::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f0:44:da:16:5f:5d:67:b8:4e:7b:ba:a3:3b:6a:7a:4d:bf:67:
         7e:38:c9:63:dd:c4:4d:3a:26:f8:6e:b7:b0:05:b6:0c:81:19:
         67:86:2f:98:7c:41:01:a2:d2:9d:55:91:97:ef:14:64:12:64:
         4d:99:cf:1b:2e:20:fb:75:bd:86:10:86:6f:13:c3:5e:72:9b:
         4a:4e:17:70:a2:94:e9:a9:08:fe:e2:b1:42:e2:34:8c:bd:9c:
         54:4f:95:79:67:f3:98:b7:fe:16:62:86:f1:49:b3:7a:94:d3:
         17:49:d7:9d:e1:9f:8e:b6:10:71:83:9b:57:77:22:99:0b:59:
         ae:9c:ad:37:65:a1:0d:62:2f:33:df:56:fa:75:20:ce:71:d0:
         f3:6d:f4:47:d2:ad:18:63:43:f7:a6:ec:3e:da:c4:b9:94:7f:
         ca:a3:37:5d:17:13:57:e7:37:30:d7:bc:da:d7:a2:cc:d5:28:
         77:1e:ee:bb:0e:7a:c6:55:c9:6f:31:14:46:53:f8:2a:9f:e5:
         b0:df:78:00:9e:89:c5:67:7b:92:ff:e9:5b:1b:b9:50:a6:51:
         e5:12:c6:ba:da:f6:9a:15:54:97:23:dd:b5:2d:56:cd:74:44:
         b8:d9:fc:2b:8f:e2:8f:fb:78:a1:3c:5f:5a:41:47:07:6a:5f:
         f1:45:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:03:25 2026 by rpki-client