Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
File:                     c67fa2c4-805f-3152-936f-aeb5f876559b.roa (raw, json)
Hash identifier:          ZrcEdx7LSl58jDhsy4l50bnrhpyBmUFL5Mjsn+pr05c=
Subject key identifier:   66:E8:D9:47:F5:FF:D5:58:A0:F3:66:13:84:88:11:74:A5:2A:91:A7
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584FBED1284AE1CAFE936A7A3880
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
Signing time:             Fri 06 Nov 2026 02:00:14 +0000
ROA not before:           Fri 06 Nov 2026 02:00:14 +0000
ROA not after:            Thu 04 Feb 2027 02:00:14 +0000
asID:                     6079
IP address blocks:        23.153.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:be:d1:28:4a:e1:ca:fe:93:6a:7a:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Nov  6 02:00:14 2026 GMT
            Not After : Feb  4 02:00:14 2027 GMT
        Subject: CN=aabf84bf-0d4b-4ce3-b5ed-4a748f0e3b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:36:3d:b7:c6:38:47:38:08:ed:54:92:1e:
                    4b:c3:0c:3a:9a:50:d3:5b:34:d1:47:43:18:ea:ca:
                    9d:b5:a3:94:d0:26:29:00:34:40:1b:98:ac:80:9b:
                    27:8c:86:94:0d:17:53:f5:4f:e4:2c:d4:44:43:24:
                    4e:4e:6e:ef:94:0a:77:e1:b3:81:8e:f5:52:e4:33:
                    be:3b:0d:13:74:01:48:30:5e:c7:a9:ad:09:2e:89:
                    eb:43:18:48:b4:ac:7a:1f:b7:de:e2:10:19:b4:16:
                    71:ac:0b:88:c5:4d:c4:0f:d6:48:b3:4b:91:3f:79:
                    6d:f2:62:cb:ba:7a:56:1d:c9:28:0f:57:ce:9f:08:
                    3e:1d:db:40:e0:b4:b7:bf:1e:f2:8f:41:ab:7d:ba:
                    c8:d4:36:2a:e3:6f:66:87:60:b4:0d:51:ba:e9:be:
                    b2:4c:1c:45:dd:8a:32:a1:ee:bc:ba:c6:3f:db:aa:
                    4e:13:73:4d:b8:3a:97:64:75:06:81:3c:d6:af:27:
                    09:6b:22:cf:6d:b4:71:45:da:41:85:b0:91:21:2d:
                    ff:1c:67:6a:e4:16:45:10:9c:a8:b7:0d:26:63:a1:
                    a3:b4:ee:07:af:ee:31:2b:9d:e0:26:30:40:0c:0f:
                    92:5d:11:76:9a:c6:0a:06:1b:62:d5:85:4c:d1:29:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:D9:47:F5:FF:D5:58:A0:F3:66:13:84:88:11:74:A5:2A:91:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:09:a7:9b:02:53:2e:a9:fb:3d:20:d3:2b:2a:58:76:f0:1e:
         d6:9b:e9:15:16:d0:d0:db:79:25:c4:f4:60:cc:c1:f8:44:06:
         79:de:88:bb:2b:47:db:49:24:f4:46:1c:7a:b5:25:32:e0:75:
         0b:19:25:ce:81:f0:59:81:8d:79:44:d0:4e:fc:a3:95:fc:4a:
         1c:45:ea:af:f2:e9:13:63:69:08:51:c3:58:23:0f:bd:72:db:
         bf:65:50:a5:b0:82:ed:3b:d6:38:83:60:d4:c4:f2:03:2c:70:
         24:1e:cd:c8:f0:d7:57:fd:cd:41:d1:75:25:f0:fd:a1:73:b1:
         a0:6d:15:26:c5:d9:88:72:42:68:68:ff:0a:82:73:61:53:96:
         75:89:1c:51:42:cd:c0:67:1d:d4:6d:93:3f:1a:4f:17:bd:40:
         4f:df:dc:7a:5c:d7:97:19:e7:b7:64:17:98:8d:b6:5b:9a:ed:
         99:c7:99:63:30:8e:25:d5:96:a0:d7:1f:79:47:cf:d7:1c:9d:
         93:86:c3:25:ce:2c:00:63:ec:c4:be:29:b6:da:3f:8a:30:be:
         a7:a2:f6:66:09:ae:b7:98:d5:7c:59:96:a7:71:c1:b2:05:bd:
         d2:17:27:32:b2:af:75:fe:60:d5:ff:9b:40:b5:83:59:cf:2d:
         e6:f4:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:42 2026 by rpki-client