Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa
File:                     4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (raw, json)
Hash identifier:          GPOz/4Q1FGUxUjKCSKZWCounD2XL9Pd4vPDXZZrYi1s=
Subject key identifier:   39:93:3B:6E:43:BB:E4:29:72:45:57:73:DE:EA:DA:60:1C:8E:35:AA
Certificate issuer:       /CN=2c2ae48f-475b-42b3-9a56-ce8852515055
Certificate serial:       010D0C9F4328584EF87CBC9EDC55E90D6B641100
Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     400142
IP address blocks:        23.191.176.0/24 maxlen: 24
                          2602:fc99::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:bc:9e:dc:55:e9:0d:6b:64:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=262073f3-6e80-4d94-a62a-b5cf12dca35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:06:b4:91:66:b7:d2:2c:2e:6a:ab:b5:af:
                    04:63:5a:94:ee:22:2b:46:af:54:c9:2f:e0:19:95:
                    fd:9e:ec:5d:02:0b:fd:9d:44:32:7e:fd:8b:ff:b3:
                    79:83:02:fb:fb:79:97:24:0f:4a:b7:b3:f6:c0:dd:
                    b6:24:89:b3:c3:62:48:1f:2f:88:5d:bd:94:e9:9b:
                    0a:9f:65:ab:31:ae:bd:ee:e4:ca:ea:5c:22:41:22:
                    71:7d:ff:ab:b8:7c:c1:1c:f2:ac:d4:e7:44:8b:d2:
                    95:6e:34:a1:08:5a:96:ce:a5:bc:18:28:bd:67:13:
                    08:70:ee:d1:9b:79:14:ea:28:61:f4:9e:91:75:df:
                    bb:40:bc:07:4b:61:5d:c0:be:1d:82:8e:57:ff:4e:
                    22:42:0e:3e:34:c7:4a:9c:a5:c6:a8:e9:cf:21:fe:
                    29:45:d2:5e:85:4e:87:aa:e9:bb:79:1a:e1:28:e9:
                    1c:e9:b8:aa:49:f5:25:f8:cd:8a:66:0b:0f:9d:ac:
                    81:8a:b6:8b:8b:2d:e8:47:06:d0:87:c7:24:54:66:
                    a7:c1:b9:53:97:8e:31:c3:9d:e3:99:d5:16:f9:41:
                    66:e3:20:d5:04:ed:04:da:16:32:8b:ea:32:b2:b0:
                    17:3b:69:e9:cb:e6:17:69:60:32:68:e4:62:33:df:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:3B:6E:43:BB:E4:29:72:45:57:73:DE:EA:DA:60:1C:8E:35:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl

            X509v3 Authority Key Identifier:
                keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.176.0/24
                IPv6:
                  2602:fc99::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:a6:52:2d:c2:eb:7a:1c:74:39:88:6d:19:31:06:25:ef:
         76:f2:96:38:d1:15:2a:35:d5:ec:8b:fb:98:b4:4d:0a:f2:22:
         7b:ea:45:aa:14:33:05:3a:70:87:0a:bc:8b:8c:eb:9b:db:67:
         1a:97:8c:c1:9a:96:36:63:71:f4:f3:dc:24:29:e1:e4:e5:5e:
         5f:ae:f1:13:14:98:ad:1b:98:15:6b:a0:4c:6d:61:d8:2b:5f:
         eb:23:7d:67:2d:a7:58:78:d2:45:0c:4d:e0:74:29:a7:22:bd:
         fd:b0:4d:68:1d:23:2a:5b:52:48:88:58:8c:31:56:24:4b:ea:
         e9:b6:d6:85:6f:f1:29:63:db:9d:13:96:8d:4a:cf:43:ec:db:
         20:35:a1:47:0a:91:73:c6:62:e7:9a:b4:c1:2a:46:ab:f6:55:
         59:f6:91:d4:73:23:88:fc:f1:40:91:fc:71:cd:60:fc:2b:d9:
         f2:4d:ac:a4:91:81:02:9f:e6:cd:26:a8:1a:04:4c:4e:70:32:
         77:17:f6:65:8c:6e:74:30:7a:15:6c:e6:95:a1:1f:95:6b:9a:
         20:68:02:26:48:d7:3c:61:99:50:39:68:cf:0f:84:a6:c7:0c:
         34:e5:1e:24:53:67:d9:9c:ac:fd:ca:1b:d8:0c:13:9f:5c:ac:
         50:30:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:04:16 2026 by rpki-client