Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/6870bcce-2373-318b-8cb2-b2b7a32b83fc.roa
File:                     6870bcce-2373-318b-8cb2-b2b7a32b83fc.roa (raw, json)
Hash identifier:          8HeZCMtNqo2S68riVEFvfB1AwzzkYugs5m0NIpHzQbo=
Subject key identifier:   11:24:1D:2E:A0:33:A0:51:C1:D8:D1:EE:98:5F:5B:B3:C9:DB:CA:31
Certificate issuer:       /CN=6147fef5-fde1-436c-a6b6-04ed80854515
Certificate serial:       010D0C9F4328584F7A63D41426E784C943ADD388
Authority key identifier: A8:94:C0:2C:3B:56:3C:8B:DF:06:DE:82:81:21:48:5A:42:17:7A:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/6870bcce-2373-318b-8cb2-b2b7a32b83fc.roa
Signing time:             Mon 12 Oct 2026 13:45:13 +0000
ROA not before:           Mon 12 Oct 2026 13:45:13 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     26123
IP address blocks:        23.152.164.0/24 maxlen: 24
                          76.76.6.0/23 maxlen: 24
                          198.134.164.0/24 maxlen: 24
                          199.59.236.0/22 maxlen: 24
                          208.81.192.0/21 maxlen: 24
                          2604:4b00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/6147fef5-fde1-436c-a6b6-04ed80854515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/6147fef5-fde1-436c-a6b6-04ed80854515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:63:d4:14:26:e7:84:c9:43:ad:d3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6147fef5-fde1-436c-a6b6-04ed80854515
        Validity
            Not Before: Oct 12 13:45:13 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=0754ccca-23cd-4d74-a758-e01969ce9b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:a1:9d:e7:53:08:dc:e2:0c:1c:8e:6f:17:
                    e8:d9:0c:aa:27:20:c6:60:cc:42:d1:8b:c2:8b:ed:
                    95:dc:c7:15:c0:49:d9:92:58:5f:23:c2:60:d7:c4:
                    3e:0c:b2:40:8e:13:2f:a2:ac:44:e2:90:53:57:32:
                    25:63:33:d5:56:0a:a7:f0:da:2a:f2:33:43:f0:c2:
                    e2:7d:54:23:c5:d7:4f:3a:cf:7d:9a:29:b1:55:7b:
                    0d:bf:27:5b:84:54:f1:f6:6b:30:1d:9f:c7:16:59:
                    1a:32:bd:eb:d9:d0:29:63:25:b2:7d:8e:c0:80:ca:
                    c4:6d:7e:91:31:86:fe:21:30:8b:c5:43:c8:47:98:
                    ad:d2:6d:76:4e:8b:ed:4d:69:00:fe:71:1d:79:36:
                    a0:b4:39:42:ea:b3:49:da:e6:89:7b:b0:97:dc:8a:
                    3b:fc:87:5b:82:a7:0f:6a:24:ba:1a:7f:cc:c7:3f:
                    ab:c0:70:f2:d0:e2:31:dd:17:db:d4:22:05:83:28:
                    7c:58:4e:c7:b8:88:b4:b9:39:e7:42:31:10:6d:96:
                    2e:0d:d2:87:63:e6:fa:25:07:af:ae:c8:f5:52:5f:
                    75:5f:85:b3:4a:82:7b:80:e3:a2:6d:57:8b:94:e2:
                    79:33:07:64:8b:99:c1:5e:af:cc:79:e2:fb:d2:6d:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:24:1D:2E:A0:33:A0:51:C1:D8:D1:EE:98:5F:5B:B3:C9:DB:CA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/6870bcce-2373-318b-8cb2-b2b7a32b83fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/6147fef5-fde1-436c-a6b6-04ed80854515.crl

            X509v3 Authority Key Identifier:
                keyid:A8:94:C0:2C:3B:56:3C:8B:DF:06:DE:82:81:21:48:5A:42:17:7A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.164.0/24
                  76.76.6.0/23
                  198.134.164.0/24
                  199.59.236.0/22
                  208.81.192.0/21
                IPv6:
                  2604:4b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1e:77:83:a7:c9:06:3d:77:ee:07:42:c2:39:53:68:0f:31:
         71:7e:15:7d:39:02:a4:f0:2e:ba:00:e6:2b:fc:48:40:de:1a:
         05:4a:5f:0b:f6:a3:2e:08:71:c4:62:4a:ca:bc:41:c0:dc:12:
         a9:a6:03:33:14:57:77:68:d9:97:4e:7e:2b:af:5e:08:1d:1c:
         3c:c5:ac:77:41:65:fb:68:45:81:c1:4e:26:b1:77:25:18:9d:
         16:38:d8:50:44:e4:12:7f:66:ac:23:6e:4b:ef:7f:a9:97:49:
         38:7c:f2:43:eb:cf:13:c8:54:a0:2e:08:06:6d:a7:c5:25:44:
         82:be:f4:7e:5f:59:95:31:f9:2e:f7:69:bd:88:78:69:82:eb:
         69:e8:e6:ad:d3:35:16:58:dc:d4:15:fb:1e:80:16:ae:14:13:
         6e:74:e8:79:4b:0a:4c:c3:c9:ca:34:c2:e9:b3:e2:e4:9f:39:
         8b:3a:84:6e:8e:ce:c2:19:ba:d5:05:c2:1d:eb:a9:68:c2:2c:
         af:c6:5f:95:34:f7:bb:2f:ac:b9:06:0e:84:4d:4d:d2:2f:a9:
         4c:9d:c1:a7:dd:0f:07:6d:66:bb:25:ec:14:37:4c:f6:34:2a:
         64:22:bf:73:b8:02:48:6d:b4:df:1f:2b:03:d5:5a:32:bb:ec:
         f8:b3:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:17:31 2026 by rpki-client