Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
File:                     288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa (raw, json)
Hash identifier:          A4TVo2lIgT5snNmhKxKiMjS8smC+LkWCvtze6wmIuXM=
Subject key identifier:   E4:97:4E:C4:AA:88:4A:CB:2C:37:12:13:93:7A:F8:32:DF:E0:0A:DC
Certificate issuer:       /CN=194b4d95-965d-467f-835c-6cdeececce61
Certificate serial:       010D0C9F4328584F30527D6DB1BA551CA4302E20
Authority key identifier: 2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     1062
IP address blocks:        23.166.216.0/24 maxlen: 24
                          104.166.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7d:6d:b1:ba:55:1c:a4:30:2e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194b4d95-965d-467f-835c-6cdeececce61
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=61a66c36-8763-4b22-af1e-37b23630c967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:7f:07:b7:4e:da:83:3e:9b:3a:72:e7:fd:
                    62:98:d3:a7:e0:a0:b8:b1:44:e1:98:af:13:fc:5b:
                    77:ed:09:3f:4e:55:1d:00:da:91:81:89:07:fe:9a:
                    2b:45:d9:ba:8a:17:b7:f1:05:08:1e:c7:f4:8e:60:
                    c3:19:f6:2f:59:5c:47:f5:6d:43:a2:6b:0c:2c:d6:
                    1a:d0:cf:07:2b:ff:65:f1:bf:b9:62:df:95:ba:8d:
                    a1:fc:c3:b0:d7:c6:71:c8:72:e3:30:70:76:38:42:
                    74:1f:ef:9a:69:2e:ae:9d:64:b9:25:2d:f7:49:2f:
                    23:99:6b:1f:b2:2b:73:a2:4e:e8:39:5e:c7:81:56:
                    a2:6a:ca:72:2d:32:26:18:8a:fa:2a:5c:ef:cc:cc:
                    f5:72:2c:02:ec:c3:f3:70:54:93:b9:16:66:59:3a:
                    ad:94:60:bf:96:26:cd:4a:8d:01:43:dd:22:76:2f:
                    c2:38:8b:e2:a3:8d:85:b4:e6:99:92:45:fc:e2:c0:
                    a5:66:31:de:6d:20:7b:41:c2:d7:f8:b1:4a:36:1a:
                    21:5d:b2:45:77:9e:1d:27:e8:e6:34:3d:db:80:32:
                    37:94:0a:ac:e1:fa:fb:4d:8a:04:a2:41:7d:eb:4b:
                    6d:ba:45:55:84:73:57:c4:11:88:fd:10:70:7b:b8:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:4E:C4:AA:88:4A:CB:2C:37:12:13:93:7A:F8:32:DF:E0:0A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.216.0/24
                  104.166.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:aa:78:09:23:82:29:f3:bd:4e:b5:66:96:b2:d7:a7:b5:e3:
         6e:23:bc:6a:85:00:db:61:18:cb:e0:aa:c3:b4:b4:11:19:65:
         86:bb:9b:68:20:b3:e3:84:90:5b:6b:12:33:b1:b5:5a:c5:6a:
         24:f8:2f:4e:6c:db:a7:09:fc:81:14:4a:aa:6e:bb:2c:3b:ec:
         f3:2f:4a:0a:08:7b:df:41:7d:1d:3a:69:2f:ea:7d:30:25:a9:
         9c:99:cc:c9:d1:dc:7b:f8:67:fc:7a:d1:1a:ad:96:c4:d7:9e:
         a2:01:e8:57:e0:51:13:7e:6c:bb:03:3b:26:00:3c:12:6f:fd:
         ec:a4:58:51:1a:23:bb:63:09:77:e2:e7:ad:c1:7b:0a:66:92:
         14:a9:c3:20:a5:d5:2e:99:1f:54:c9:a7:77:57:33:5d:cb:6e:
         81:91:81:c3:17:eb:60:c3:bc:76:06:90:2a:57:45:6c:c8:47:
         e1:90:8f:06:f1:15:07:8f:65:0a:cc:25:7b:fb:f8:02:3e:38:
         73:63:5b:83:f7:d2:af:40:2d:56:27:4c:93:bf:52:14:43:ba:
         51:ed:17:6c:69:db:c7:ad:f3:5a:fd:79:fe:42:77:d9:4a:36:
         08:2b:a2:9d:9e:f4:4e:ab:ac:de:55:77:8d:1b:36:e0:7c:71:
         27:84:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:58:27 2026 by rpki-client