Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa
File:                     9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa (raw, json)
Hash identifier:          BzHyvmMIKt0K6Pqp89AYyTE+nYIo/ZInFurXU8LpRyU=
Subject key identifier:   BB:F7:1F:48:8D:79:93:2A:FB:76:B0:B3:F9:E1:2C:48:37:43:5C:94
Certificate issuer:       /CN=55263d01-2075-432b-94d1-01f0c1c34295
Certificate serial:       010D0C9F4328584F498B9FDE9B64561B7221C500
Authority key identifier: 2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401556
IP address blocks:        23.133.68.0/24 maxlen: 24
                          2602:f71f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:9f:de:9b:64:56:1b:72:21:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55263d01-2075-432b-94d1-01f0c1c34295
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0b84a83f-8a59-4b8e-9da6-c732f93e0ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:ec:88:6d:37:d7:5b:90:c6:c2:f5:c6:49:
                    68:13:32:f2:27:87:09:de:7a:86:af:7b:4c:b6:99:
                    46:0c:68:29:14:c5:4f:2c:6f:bd:f5:5d:71:0b:94:
                    23:fc:ed:cd:f3:1f:6a:b6:73:3a:9d:ca:37:0c:bb:
                    fa:5e:ec:de:a6:37:12:26:bc:e4:0c:16:62:68:a3:
                    27:60:a8:70:47:12:9c:9b:91:29:1d:bb:e2:dc:0f:
                    af:e6:ff:ee:ad:b6:22:11:ff:ce:6f:da:1f:ff:32:
                    3f:c8:28:2f:af:0e:42:76:54:fb:bc:8c:9a:2f:86:
                    c5:32:0f:b8:ac:d3:59:ae:67:7e:f2:cb:65:f4:59:
                    f8:e9:22:c1:d2:92:40:29:01:f9:5b:21:75:50:97:
                    55:9e:02:45:7a:9a:2c:39:11:8d:5c:66:3f:7a:c4:
                    79:02:8b:3f:c7:43:34:9c:16:3b:03:d2:c6:af:47:
                    6e:e7:d7:df:c8:24:7d:d0:4d:6f:44:37:d9:d3:b6:
                    56:f5:54:dd:e8:ae:77:90:aa:16:0b:06:86:1d:fa:
                    a9:13:61:8b:35:32:61:2e:04:cd:6d:b5:1f:ad:1a:
                    12:1b:64:50:9b:23:98:f0:26:46:92:e5:87:7a:52:
                    67:7e:9c:21:01:1f:eb:dd:11:a3:71:24:44:0e:be:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F7:1F:48:8D:79:93:2A:FB:76:B0:B3:F9:E1:2C:48:37:43:5C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl

            X509v3 Authority Key Identifier:
                keyid:2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.68.0/24
                IPv6:
                  2602:f71f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:2f:c2:89:0c:a8:7e:a2:64:8e:64:91:86:19:32:69:d5:
         b3:37:3a:fb:9c:21:da:18:25:d7:e6:5e:9f:4c:6c:2c:53:49:
         d8:85:d9:a6:c2:fe:5a:97:62:2d:61:6b:85:d2:0a:0d:79:8e:
         f7:e0:f1:14:b3:b1:bf:ee:7f:5a:43:12:93:a4:09:f2:c3:5e:
         aa:e1:ef:e8:21:c2:d1:75:6b:68:ff:eb:7f:bb:e8:1b:3e:34:
         e1:02:04:3f:75:0f:c6:01:44:cd:98:a7:c5:d0:2b:c1:c8:c0:
         af:2f:fb:0d:af:e9:66:9a:3a:45:ad:a1:99:35:60:54:34:24:
         7e:f8:38:53:91:77:cf:7f:80:94:40:b6:32:11:5c:95:ba:18:
         69:5a:cf:4e:04:88:72:6d:3f:83:af:4f:20:e4:e8:a3:a7:f4:
         41:2c:17:2b:59:99:70:2a:74:4c:1f:b7:10:57:c0:f2:a4:8c:
         40:17:bf:c1:0a:17:86:27:86:8b:ed:5a:d0:13:88:be:6b:27:
         fe:db:b2:a3:61:0e:cc:19:e9:6b:38:6b:b7:4a:92:07:62:e9:
         dc:15:f8:c6:b9:ef:b3:4c:46:dc:de:2d:ad:d9:25:7a:8e:a8:
         2a:5d:54:2b:e0:ad:fc:bf:59:de:6e:b3:99:9f:35:81:35:e5:
         17:f9:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:47:54 2026 by rpki-client