Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa
File:                     1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa (raw, json)
Hash identifier:          0bCErogxWPMZudUVYMcL03+V/0asHnvCP+SFUDw1Bh8=
Subject key identifier:   9D:84:42:79:C3:A9:D6:85:62:1A:95:1B:B1:06:08:E9:57:F3:A3:CE
Certificate issuer:       /CN=b59002d2-8fd4-446f-987c-e63485cf1a5a
Certificate serial:       010D0C9F4328584F49870B92E792FD78D9ED4600
Authority key identifier: FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401630
IP address blocks:        23.133.100.0/24 maxlen: 24
                          2602:f724::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:0b:92:e7:92:fd:78:d9:ed:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59002d2-8fd4-446f-987c-e63485cf1a5a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e84aa416-1717-4da5-907c-f19f17f47e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:20:24:f4:ac:50:97:dd:7b:d5:21:56:c4:
                    f8:09:20:62:77:43:02:58:e8:59:c5:cc:21:83:e1:
                    73:06:23:05:72:e7:58:e4:4a:f0:f2:db:c7:bc:a2:
                    2f:24:4e:ed:fc:d2:c8:5e:a7:32:c4:68:e9:44:cf:
                    51:c7:60:a3:45:82:ae:a1:12:4f:fa:c8:06:57:b7:
                    c4:c6:b4:f8:25:91:26:6a:e1:33:6c:ab:99:97:0b:
                    ea:ea:7d:bf:9f:6d:d5:58:3e:21:ec:9c:a1:ef:5c:
                    7c:f5:d4:0c:54:ed:d1:57:a7:7d:c0:7f:2c:07:5d:
                    54:46:a1:b4:69:5d:e0:80:d1:3e:d2:d2:bb:6e:a1:
                    5b:4f:e6:6e:c9:da:b3:13:c5:6b:70:25:db:64:e6:
                    3c:f1:72:82:41:48:4e:b0:8d:92:75:ff:d5:aa:45:
                    d5:41:90:28:cd:64:b3:00:e0:48:94:ed:a0:de:19:
                    5a:ab:f1:2d:85:8d:3c:dc:2d:f6:39:6f:5c:f8:06:
                    8d:c6:a2:1a:cd:72:03:43:44:bf:ea:af:07:07:93:
                    34:a9:24:b0:19:99:5a:fc:d4:9e:e5:f1:4f:21:36:
                    5f:26:d8:07:7c:39:a0:70:ee:72:41:ac:c6:b3:21:
                    19:b5:a9:05:71:b5:5a:da:d5:0e:4f:3a:2e:30:af:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:42:79:C3:A9:D6:85:62:1A:95:1B:B1:06:08:E9:57:F3:A3:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.100.0/24
                IPv6:
                  2602:f724::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ca:c2:7d:fe:35:e5:4f:ea:0a:49:24:8c:9c:29:7f:b1:08:
         e6:a9:2f:89:de:34:15:17:72:43:17:41:42:37:96:58:1b:d0:
         9d:4a:f0:42:ac:76:f0:e3:aa:46:e7:3b:43:3d:63:e6:84:3a:
         41:d0:8f:65:4f:2a:de:cf:fd:5d:9e:d0:76:8f:82:0a:db:ff:
         eb:f3:38:9a:c5:a8:e5:17:7a:13:6d:34:be:16:d4:37:39:aa:
         e0:0b:c0:cf:38:68:d2:5f:1d:6e:55:d6:43:a6:93:b9:b9:6f:
         8f:6e:ff:72:e2:a5:96:06:cc:6a:d3:80:04:2c:76:00:f9:9a:
         b6:ef:8e:b5:6e:c7:4f:e6:f0:64:0e:89:9d:7e:04:d6:c1:fb:
         2e:ce:66:b2:3d:e5:68:9a:94:79:03:e6:75:23:a1:35:f0:b4:
         5d:54:29:85:60:fd:9b:c0:1b:f1:32:6a:e0:99:2c:0a:a8:f7:
         4b:67:29:f7:3c:8d:29:49:51:a9:5a:63:f9:f1:39:b9:96:88:
         16:56:82:2a:d8:1b:85:e1:2a:51:1d:91:83:bb:7b:26:ac:ea:
         b7:d2:af:13:23:41:e8:06:da:64:51:b6:18:e5:ba:32:ad:11:
         f3:48:88:df:4f:f6:cc:31:3d:de:8c:62:aa:46:8a:f9:f6:17:
         95:de:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:31:45 2026 by rpki-client