Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa
File:                     6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa (raw, json)
Hash identifier:          cff8R372gCs4DQA6UsdzZZYd3gQJ330joLptq63KsWw=
Subject key identifier:   DE:53:C6:8C:A0:CC:4A:07:EA:0C:FE:91:95:93:D3:43:FF:54:17:CE
Certificate issuer:       /CN=8792fa78-8f07-41ad-aaa5-9b445516bf82
Certificate serial:       010D0C9F4328584B7DECA7A20989B4B7CE08BF80
Authority key identifier: DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     26286
IP address blocks:        23.138.156.0/24 maxlen: 24
                          2602:f661::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a7:a2:09:89:b4:b7:ce:08:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8792fa78-8f07-41ad-aaa5-9b445516bf82
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=f3b0f985-b504-4cb7-b8b1-ed9c20af5c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:16:6b:40:a1:93:dd:6b:f4:d5:4f:6c:3b:
                    b4:70:83:76:bc:42:3c:e7:c2:e8:43:fa:21:b1:25:
                    d4:96:c7:05:28:4a:fc:d4:2d:fa:e5:96:75:fd:77:
                    20:9e:22:19:53:e9:4a:95:a3:2c:01:21:ec:d7:4f:
                    75:fb:33:bf:e8:7c:3a:84:e9:9e:a0:46:96:d2:77:
                    71:7d:04:28:7b:55:d6:fd:8f:c3:c0:e3:a9:b5:03:
                    a4:88:1a:4c:34:df:f4:a4:7a:b4:39:13:9b:d7:25:
                    4c:fb:79:1d:84:00:31:b9:7e:10:de:58:1a:52:69:
                    a6:64:9c:48:79:2f:1d:d9:8d:ad:60:ff:7b:63:c9:
                    4c:47:79:da:3b:ec:16:d7:f8:03:ef:05:34:80:e6:
                    99:03:05:cc:c8:89:2e:65:10:20:48:c5:1f:bb:22:
                    1b:f7:d4:7e:98:0f:82:62:5d:02:7f:12:3a:83:53:
                    68:c0:d6:ed:f1:8a:98:4e:d3:44:50:06:b2:49:28:
                    5d:19:36:4d:bb:36:37:a7:0a:0d:5c:c5:4f:2f:b5:
                    f8:f8:f1:9a:b9:61:3a:48:59:86:b1:d2:e6:83:38:
                    e0:44:cf:68:05:ca:52:40:0a:a2:ee:8c:8f:7a:11:
                    2f:16:ba:36:f4:ed:dc:e3:74:ca:25:c8:d4:6f:f2:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:53:C6:8C:A0:CC:4A:07:EA:0C:FE:91:95:93:D3:43:FF:54:17:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.crl

            X509v3 Authority Key Identifier:
                keyid:DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.156.0/24
                IPv6:
                  2602:f661::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b2:be:97:46:9f:f7:a0:f2:aa:33:99:0e:b7:09:e3:0f:0a:
         a5:b1:be:af:fb:ed:73:6b:ba:62:8a:93:c3:23:88:58:b4:06:
         3d:f5:af:0a:8e:e8:e3:a3:9c:f8:20:fd:5e:ff:2a:21:de:69:
         c2:66:cd:4f:e6:a2:97:37:e0:e2:96:2d:f1:a5:ea:2d:63:8c:
         32:7b:43:58:4d:be:c0:bf:b7:fd:36:3a:da:cd:62:b4:1d:b8:
         9c:86:c8:47:73:02:36:66:86:00:fd:c2:9f:47:aa:70:e6:29:
         c8:1f:a2:62:f3:7b:f7:d4:f7:fd:66:f9:86:bf:c5:f0:97:d4:
         9d:51:f3:67:08:6b:2d:66:ce:48:4f:91:f5:f7:e5:6a:51:b1:
         91:64:d8:dc:19:6f:df:b4:94:bf:74:e8:ed:9a:de:13:ef:17:
         31:07:2b:38:d0:f5:8e:8f:47:78:80:94:96:01:65:e7:5c:0f:
         36:59:5d:2b:a0:10:59:86:15:4f:41:e0:79:c7:44:b1:60:d6:
         2e:e1:2d:1b:1e:45:11:86:57:5e:2e:01:25:ca:1d:02:3f:99:
         fd:54:b8:77:f3:c2:e4:7e:69:37:5e:ed:36:05:be:46:14:77:
         07:5d:f1:8e:88:2a:f6:d8:a4:c8:ee:0d:5b:30:d6:76:4e:d7:
         4c:0c:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:28 2025 by rpki-client