Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
File:                     5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa (raw, json)
Hash identifier:          IVCit1EngRjFUz3b2mvBkwKVntLp86shCz31/0bIGhQ=
Subject key identifier:   D5:89:7E:A9:D4:E5:E9:D0:30:C9:FB:31:4A:EA:53:30:9A:16:9D:9C
Certificate issuer:       /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Certificate serial:       010D0C9F4328584F4973A3E5151B9BE193810078
Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63394
IP address blocks:        23.184.112.0/24 maxlen: 24
                          104.237.112.0/20 maxlen: 24
                          157.52.48.0/20 maxlen: 24
                          172.86.0.0/20 maxlen: 24
                          172.86.16.0/21 maxlen: 24
                          172.86.32.0/19 maxlen: 24
                          2605:e4c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a3:e5:15:1b:9b:e1:93:81:00:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7370ad26-ecab-4664-8e4e-97088a7c192e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:fd:b2:ef:28:81:8e:22:e6:14:d7:12:36:
                    4f:19:e3:4d:90:12:a7:66:1a:91:0c:0e:74:4c:da:
                    b8:d4:f5:2a:99:9d:26:55:3b:d1:ac:a7:3b:46:06:
                    e6:46:21:99:db:de:2c:27:b7:0f:d9:1b:eb:f3:b5:
                    eb:e1:5a:0a:07:44:f8:9e:3e:ee:5a:31:5d:bf:3d:
                    c0:09:37:d2:c8:34:c9:9f:10:a7:a5:a5:fa:cb:9b:
                    ed:6d:a4:79:47:75:cb:55:9d:4a:fb:9a:a1:6d:4d:
                    e7:51:1e:d6:7d:b1:1d:43:2b:c6:f6:d3:11:3a:84:
                    c9:98:39:3a:a1:2c:48:31:2d:23:be:2d:f3:80:79:
                    5e:67:4f:e3:8d:2f:ba:2f:d7:13:d0:47:c4:af:f6:
                    64:ae:ed:64:74:07:23:e5:16:24:7b:ba:38:40:d1:
                    dd:2d:d7:6c:8b:d9:a9:92:ee:67:ed:e9:ab:96:49:
                    ba:c0:5c:3d:99:e2:4d:e0:c6:23:ab:95:52:26:16:
                    37:93:d6:a7:0d:59:11:00:4b:4c:4c:00:f6:3e:cd:
                    5a:0f:c1:5d:0e:f5:46:9f:ac:75:3b:b5:3a:f2:a2:
                    69:94:20:51:dc:76:38:3c:ec:fe:8f:28:92:7d:61:
                    12:80:ce:33:b6:bf:2c:13:a0:5f:e4:b7:c2:61:72:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:89:7E:A9:D4:E5:E9:D0:30:C9:FB:31:4A:EA:53:30:9A:16:9D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl

            X509v3 Authority Key Identifier:
                keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.112.0/24
                  104.237.112.0/20
                  157.52.48.0/20
                  172.86.0.0-172.86.23.255
                  172.86.32.0/19
                IPv6:
                  2605:e4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:ab:51:3f:19:95:40:26:ce:a8:d9:e5:22:f1:46:88:c0:
         aa:89:af:e2:8c:ea:c2:5b:a5:bc:e9:98:0e:9a:b0:72:01:a9:
         eb:4d:7a:fb:1c:31:24:9e:04:fe:0b:8b:14:64:63:dc:b6:b9:
         ba:65:52:be:5f:4f:f3:22:0d:92:43:fa:08:08:58:1a:41:a5:
         5d:fb:3e:82:7b:0f:f5:1e:9f:80:c2:05:18:d7:ab:ca:00:91:
         7d:73:4e:83:89:70:0d:ac:47:1c:b4:4f:bc:90:96:23:ca:6a:
         62:56:1e:09:8c:c4:5d:2e:46:53:1e:d0:ad:4b:6d:32:0d:54:
         26:60:81:8c:a8:dc:f6:70:e8:35:d0:cb:17:47:bd:f2:12:a8:
         38:4f:c4:3f:78:98:a2:db:f4:c4:5b:1e:ce:d4:97:61:1c:75:
         11:30:bb:af:5e:f4:2a:e8:9d:9c:39:b9:7a:f9:c8:71:30:3a:
         7f:ef:64:e0:fa:78:5f:a8:eb:0c:0a:64:e0:16:66:5c:08:cb:
         3c:01:db:ba:64:b6:cb:a6:b6:9d:13:c3:74:d7:40:05:61:10:
         09:04:e9:2e:28:d3:56:77:a3:31:d7:73:a0:c5:c9:9c:e1:97:
         d8:77:b9:54:6d:74:33:fa:2a:13:38:8f:b4:10:2a:83:55:69:
         66:89:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:11:16 2026 by rpki-client