Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa
File:                     1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa (raw, json)
Hash identifier:          CUE6rVwSOXEQwPcKSMEpNxQPE2erIBjdTbormzauQ/A=
Subject key identifier:   DE:72:A7:17:C5:3C:2A:0F:61:33:A7:FB:AD:4B:15:89:53:D6:A8:36
Certificate issuer:       /CN=18489a14-d237-40bd-ae7a-25fe7c7561ef
Certificate serial:       010D0C9F4328584FD526A21DE837993F7C5F2300
Authority key identifier: BB:7B:55:BC:B8:3E:D2:78:FE:4F:27:20:25:0B:3F:8C:F1:BA:07:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa
Signing time:             Sat 14 Nov 2026 02:00:13 +0000
ROA not before:           Sat 14 Nov 2026 02:00:13 +0000
ROA not after:            Fri 12 Feb 2027 02:00:13 +0000
asID:                     54256
IP address blocks:        23.153.168.0/24 maxlen: 24
                          198.134.236.0/24 maxlen: 24
                          198.252.222.0/24 maxlen: 24
                          2602:2d9::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d5:26:a2:1d:e8:37:99:3f:7c:5f:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18489a14-d237-40bd-ae7a-25fe7c7561ef
        Validity
            Not Before: Nov 14 02:00:13 2026 GMT
            Not After : Feb 12 02:00:13 2027 GMT
        Subject: CN=e8071d98-d543-42f8-903f-61fb55d6b266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:60:96:24:f3:8b:d2:9e:7f:9a:f5:6d:b1:
                    7a:45:ae:76:25:ca:bf:5d:ae:16:0c:3f:ea:da:2a:
                    61:bf:2b:39:24:97:61:bb:a0:7c:71:d1:f9:52:e0:
                    01:23:d8:46:36:37:2e:c2:b4:5e:90:5b:a8:32:2f:
                    89:58:15:08:ea:71:96:87:d6:ce:64:06:ec:ea:f9:
                    39:86:73:8a:2f:dc:7a:9a:88:ab:67:00:cf:12:b6:
                    4b:bd:a3:bf:ac:6d:0e:e3:c5:30:80:32:94:96:b5:
                    6a:67:67:0b:52:a0:20:b9:f4:81:af:6b:44:f1:e8:
                    2f:18:c4:00:a8:88:58:a5:4e:df:fa:9d:57:29:24:
                    ac:2d:02:15:d0:08:a6:6d:a0:0e:03:de:c9:65:e1:
                    b7:be:5d:40:f6:0f:a5:95:0a:49:09:db:07:50:20:
                    e1:56:51:7d:c0:f8:a3:77:59:aa:5e:de:0e:ac:e7:
                    b0:df:a6:8b:78:db:74:5d:b0:a4:fe:9d:7d:1f:56:
                    9b:e3:d7:2f:16:29:da:6e:26:df:45:90:18:8b:95:
                    36:19:bf:ad:57:43:14:c8:19:c2:78:24:e2:f6:21:
                    92:51:7f:17:40:e6:f5:c9:d9:bd:ba:85:cc:eb:dc:
                    3b:a0:09:96:76:7e:99:c8:d5:d0:cf:51:38:93:55:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:72:A7:17:C5:3C:2A:0F:61:33:A7:FB:AD:4B:15:89:53:D6:A8:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:55:BC:B8:3E:D2:78:FE:4F:27:20:25:0B:3F:8C:F1:BA:07:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.168.0/24
                  198.134.236.0/24
                  198.252.222.0/24
                IPv6:
                  2602:2d9::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:05:a4:31:6e:5b:dc:7d:08:fe:61:78:08:4f:3f:c2:f6:11:
         c0:1d:92:91:3f:69:90:30:c5:d9:5b:1e:76:29:8e:0e:35:6d:
         27:4f:64:f6:b8:77:c7:61:50:5f:13:45:bf:8d:f6:fb:f2:5e:
         67:59:c0:62:ef:a9:f2:b5:1c:b3:93:73:e6:ea:4c:04:68:61:
         b4:5b:49:22:82:55:52:94:2b:e5:d8:47:ee:b8:16:5a:f7:a4:
         cd:63:cf:00:a3:7b:cc:71:53:b3:60:ba:de:35:f5:88:0a:ce:
         5b:f5:a8:54:80:75:9e:8f:f1:9e:25:ac:86:1d:27:9e:bc:8d:
         75:87:28:87:93:28:a7:60:7d:ba:82:62:dc:ae:16:45:3b:49:
         a2:25:40:c8:51:be:ca:a4:68:69:a1:7d:db:1f:e8:60:3a:c5:
         94:3a:ec:5f:55:04:f9:fe:97:fe:a6:81:90:3e:96:40:ba:b4:
         48:2c:f7:11:d5:22:94:02:8f:79:2a:09:35:a4:6a:f8:f7:e6:
         21:1a:5b:76:a2:60:56:6c:3b:79:50:56:de:df:ba:f6:a5:5e:
         bf:d3:04:cb:26:71:29:e2:19:9f:55:b9:6b:1b:ab:69:fb:66:
         99:8c:71:92:d1:9d:2a:21:70:02:52:8a:3a:4a:95:1c:3e:25:
         66:ed:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:17 2026 by rpki-client