Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa
File:                     143a0d57-0f9f-393b-bc63-7c750f27a196.roa (raw, json)
Hash identifier:          lNwAlgLjZfGZjk9AVM0p4XzP98rCiLGmtSQRE/m7rIk=
Subject key identifier:   2C:E8:69:19:8D:10:73:49:7B:FF:C9:6E:BF:DF:E7:67:CC:F6:34:99
Certificate issuer:       /CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
Certificate serial:       010D0C9F4328584F549D5E2BC0E50E0992635800
Authority key identifier: 62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     399861
IP address blocks:        23.133.196.0/24 maxlen: 24
                          2602:f705::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:5e:2b:c0:e5:0e:09:92:63:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=687bd811-a11a-4eda-af3e-99d3b874c862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:db:63:86:06:64:c5:02:51:ab:be:91:34:
                    37:1e:97:7f:d8:16:14:c6:61:d2:e0:dd:f4:3d:37:
                    70:72:9b:b3:16:b2:d1:76:9c:32:aa:2a:d1:24:42:
                    52:83:f5:b7:bb:b5:cf:14:29:8f:83:54:95:3e:6a:
                    63:8f:ed:1a:23:af:f9:50:4f:6d:27:d7:f7:af:54:
                    d3:c5:09:0e:95:ec:f5:db:fe:51:a3:30:ed:2d:16:
                    33:a8:57:28:2c:3d:ee:6f:8f:49:b7:c2:16:63:50:
                    e6:3a:11:d1:7a:f0:3a:d8:4b:50:e5:72:e7:cf:e3:
                    45:12:cb:9f:98:20:8f:25:92:1b:97:98:65:10:c4:
                    06:40:a6:7f:31:26:37:20:15:fe:fc:d1:4f:e4:11:
                    76:72:26:ea:d9:cb:f1:09:69:a8:d9:d7:76:fc:8e:
                    59:de:37:0f:c7:e4:56:b9:12:d6:ec:0a:a4:2e:cc:
                    03:62:d6:b8:23:e1:16:61:56:e1:d3:a9:49:3e:35:
                    08:41:4d:aa:52:75:ae:e8:f1:1f:0c:66:e0:74:e6:
                    b1:16:c7:23:6e:ba:41:8f:3d:cb:a8:9b:78:fc:87:
                    17:42:ab:da:e7:74:ff:42:8a:a9:9d:92:6b:a1:a7:
                    e9:96:9b:f2:f5:55:de:05:8d:cb:b8:b6:ba:95:e2:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E8:69:19:8D:10:73:49:7B:FF:C9:6E:BF:DF:E7:67:CC:F6:34:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl

            X509v3 Authority Key Identifier:
                keyid:62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.196.0/24
                IPv6:
                  2602:f705::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:72:a2:17:d9:2b:70:9e:12:ba:5c:f1:bf:51:08:3d:c1:a9:
         8d:ff:f6:59:c1:f6:63:9b:63:34:26:02:5f:36:4e:54:2c:d6:
         f3:25:3c:84:b6:55:f7:f7:74:e4:c8:3c:8e:55:88:2f:e1:13:
         fb:7a:1e:24:b1:8a:ce:29:f2:be:73:66:73:a4:89:c4:c5:0f:
         d8:c3:97:0d:8e:1b:87:81:a3:3b:aa:b7:20:eb:29:0d:b6:b5:
         37:cc:13:ba:96:ab:8c:08:f1:37:d0:34:50:4c:66:48:03:80:
         99:a8:4d:3b:c1:f3:90:63:64:b7:bc:b9:d1:e1:19:8e:67:61:
         b8:63:9f:f0:d8:9c:b6:1f:18:04:bc:e3:b0:bc:8b:3a:42:c2:
         85:af:48:a5:00:f0:0d:4a:e7:7f:f8:77:06:7b:ac:c0:89:fe:
         fe:84:f1:95:04:85:9c:59:a4:48:18:a9:71:96:55:be:ef:38:
         ae:16:ea:80:89:1f:16:2a:b8:11:02:1a:75:d5:06:16:6c:7d:
         c0:e7:ca:51:eb:6b:c8:42:9d:fc:6d:9e:74:b8:11:62:c1:05:
         50:9c:f1:70:04:0b:ef:5f:35:d1:21:3b:60:c3:3a:bf:b7:52:
         d5:44:b5:aa:7d:c1:f7:ff:46:69:8f:d3:de:8b:e8:47:04:03:
         63:1b:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:42:23 2026 by rpki-client