Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e9d7b167-a319-3a74-9de5-2447984532a6.roa
File:                     e9d7b167-a319-3a74-9de5-2447984532a6.roa (raw, json)
Hash identifier:          oDFo7kUPeLNb7uEo2KWC2y35SrkiuCndRijxVW5BX4M=
Subject key identifier:   1F:51:E3:88:37:7F:CA:D4:A0:2D:2D:80:F2:3C:5B:87:80:E7:62:17
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584F23C25D9E0ABA05B3B886F3C0
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e9d7b167-a319-3a74-9de5-2447984532a6.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     400618
IP address blocks:        23.249.16.0/20 maxlen: 24
                          104.143.32.0/20 maxlen: 24
                          104.251.224.0/20 maxlen: 24
                          172.81.96.0/20 maxlen: 24
                          198.176.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:5d:9e:0a:ba:05:b3:b8:86:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=683ff244-d86f-4fbd-bb42-9004aafe24c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fe:f0:6f:e9:dd:69:78:57:ce:c8:1e:4f:1c:
                    ba:6e:68:c6:41:a7:77:41:dd:a7:01:a4:1f:16:88:
                    3a:3c:b0:bc:29:65:26:f7:6a:c8:92:02:9b:3a:ce:
                    86:ff:a4:42:5e:9e:5c:4a:d3:05:cb:54:db:90:84:
                    df:aa:72:ef:fa:fb:6d:41:6b:0a:c3:61:4d:ac:7f:
                    19:e6:d7:4a:12:65:2c:6e:70:c9:7b:27:cc:4d:bf:
                    e3:e3:4f:0b:74:4d:8c:f6:ae:cf:3a:d6:7d:57:55:
                    df:d8:d2:fe:88:c0:38:a6:cc:9e:31:ec:05:71:a2:
                    04:25:9f:e7:c7:1e:a7:c9:24:09:65:02:cd:85:00:
                    94:b1:a4:6b:92:93:c6:ee:a1:d7:4d:16:61:e2:b0:
                    81:9b:3d:67:d4:58:a0:ec:93:1b:24:83:a3:b1:b7:
                    f0:74:4d:d0:77:a5:67:22:47:e0:01:ec:68:cd:b8:
                    49:eb:dc:c5:c9:d7:f0:25:56:e5:5f:f2:20:26:3a:
                    59:8f:b8:38:db:fe:00:f2:38:dd:69:19:7b:cd:5f:
                    32:9f:df:d6:e4:1c:5c:ad:3c:0e:03:d3:2f:95:45:
                    89:f3:ee:33:16:df:9d:d5:b9:9f:18:16:70:28:54:
                    96:71:fe:06:2a:a9:9e:30:91:31:11:3b:e4:49:f0:
                    6f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:51:E3:88:37:7F:CA:D4:A0:2D:2D:80:F2:3C:5B:87:80:E7:62:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/e9d7b167-a319-3a74-9de5-2447984532a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.16.0/20
                  104.143.32.0/20
                  104.251.224.0/20
                  172.81.96.0/20
                  198.176.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:c5:b8:e4:a3:94:d5:02:87:ed:1d:8c:68:6b:4f:27:8f:
         7b:aa:91:78:40:71:47:8c:db:03:46:c6:9b:63:c3:8e:f1:ae:
         48:9d:2f:c5:88:9e:ab:fa:c3:aa:65:ea:8e:60:bd:80:9e:2a:
         6f:a1:3f:20:49:80:00:d1:d1:05:ef:75:d3:e7:a8:d6:34:8f:
         97:2d:db:c8:21:3e:ad:41:6b:24:d0:cc:e2:c5:0f:a3:8e:c4:
         0a:ed:76:6b:03:2b:6c:22:d7:4d:2b:99:89:79:57:db:96:e5:
         ea:ce:fd:f2:46:6c:24:2c:f5:ee:a5:bc:85:3f:72:be:a0:36:
         76:4a:33:ea:5d:c7:6a:a7:a0:ee:d1:07:b3:02:ef:38:f0:24:
         cb:a2:1b:60:5b:bc:2f:75:cb:5d:3c:19:53:8e:46:af:1b:eb:
         34:a6:d3:da:a4:17:24:6a:0b:51:30:a7:db:30:c2:53:73:29:
         ff:6b:17:3c:c2:cb:29:8c:70:c6:6c:d6:d5:de:fa:fc:95:80:
         67:03:4e:3e:46:61:d1:e8:4b:16:d1:e7:90:99:ff:5e:fa:e9:
         b7:9d:64:bb:74:79:d3:f2:5e:a2:0d:42:b1:ba:dc:6f:15:54:
         f3:e0:9c:e3:46:3c:af:0c:17:0c:8c:bc:d0:60:7a:ba:c4:3f:
         71:5a:d6:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:09:05 2026 by rpki-client