Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa
File:                     b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa (raw, json)
Hash identifier:          72gZiTw7Y7tzD6XohZ1ARefxuPnc9/MfIQLKf8Dk718=
Subject key identifier:   19:97:DB:91:F5:7D:AC:33:60:7A:A8:64:3E:6B:C7:67:C9:33:C7:97
Certificate issuer:       /CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc
Certificate serial:       010D0C9F4328584F49749716B88231F22D4ECE80
Authority key identifier: 8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401581
IP address blocks:        23.132.60.0/24 maxlen: 24
                          2602:f741::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:97:16:b8:82:31:f2:2d:4e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2eab9fed-3254-431a-9237-5acc504476f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:77:f9:65:74:d0:5a:bb:00:de:33:5d:0a:
                    52:27:b0:5c:93:1e:d1:bb:31:fe:13:39:ec:2a:32:
                    3a:c6:bf:b7:6b:cf:fb:47:05:1d:3e:52:1e:e8:9f:
                    dd:38:41:1e:49:44:0c:e9:49:49:5c:22:ed:47:9a:
                    2d:30:33:1b:74:5f:35:83:1a:76:49:89:9c:22:2e:
                    10:a6:43:4f:a6:55:d7:dd:08:06:ff:a3:d3:33:1a:
                    75:03:d8:72:cd:52:de:2d:99:f3:e9:92:b3:76:54:
                    52:55:48:f9:85:b5:d9:67:2f:78:af:5c:24:0f:e9:
                    a9:88:48:2e:bc:ad:40:18:06:71:cb:8a:89:9b:af:
                    e7:47:9d:eb:a5:ca:44:93:62:4b:37:d9:e8:c2:f3:
                    df:37:e2:d4:42:31:f1:e1:12:65:f8:cd:73:8d:b7:
                    fb:73:a3:88:32:8e:78:31:af:a6:6c:bd:8a:8d:ae:
                    02:a0:49:5e:49:e7:a6:0f:4e:61:be:a7:ba:db:98:
                    00:be:3c:8c:85:5a:b4:ca:33:f5:6a:6f:4a:35:3d:
                    2f:51:23:c5:7e:25:da:ff:b9:b2:cb:6e:36:59:59:
                    5d:8b:ae:03:99:be:36:70:c8:7e:53:83:f9:34:aa:
                    e1:8b:61:12:ad:18:47:2f:71:9a:79:67:88:6b:a5:
                    c7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:97:DB:91:F5:7D:AC:33:60:7A:A8:64:3E:6B:C7:67:C9:33:C7:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl

            X509v3 Authority Key Identifier:
                keyid:8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.60.0/24
                IPv6:
                  2602:f741::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:72:21:6d:34:6a:d1:57:6e:3d:32:8b:3a:dd:7f:5d:38:95:
         ba:19:9d:34:fb:ac:99:ca:a7:d2:29:32:79:94:55:b5:89:f9:
         9f:d0:ca:85:1c:a1:f5:06:14:55:92:4f:99:78:23:41:7a:dc:
         c1:e6:01:17:b9:7c:08:90:24:6e:38:db:3d:57:d8:ce:ff:58:
         12:b9:3a:af:48:37:c1:ae:59:8e:53:43:43:e0:ab:75:3a:0a:
         b4:26:93:f4:da:7e:10:1d:fa:d2:2e:67:72:2a:6a:1e:04:ff:
         eb:51:cf:04:a6:5d:3e:fc:e8:7c:a7:9b:7b:a7:30:01:de:41:
         34:a9:cf:ff:bd:6b:00:c6:d1:a7:86:d6:7e:21:5a:9b:6d:e0:
         38:14:ac:32:51:c1:6e:f7:50:82:69:b1:ae:5c:31:e1:a5:75:
         4d:50:98:fe:de:ce:a0:c1:99:52:8f:7d:54:c0:b2:a4:17:50:
         2a:9c:da:ee:28:f9:59:b4:c1:6e:f7:e4:91:02:aa:07:20:e8:
         4e:aa:1b:89:83:28:fb:67:74:bd:96:62:0e:1f:43:40:3e:96:
         af:45:ae:c5:2e:b7:71:e6:e1:26:a2:58:f9:3f:18:56:22:fd:
         72:5d:34:01:e4:e9:79:c8:e1:54:96:f0:10:75:2f:d0:8c:c4:
         14:b1:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:45:01 2026 by rpki-client