Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa
File:                     b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa (raw, json)
Hash identifier:          VymBpFhNZgo6AriNvR9SZuIJfdktkevHySaAtbdNScQ=
Subject key identifier:   CF:6C:5E:4D:F5:BC:72:9D:E3:4C:43:8B:58:C0:98:E1:04:18:CD:FB
Certificate issuer:       /CN=ebf10f16-5f3c-4b91-8d9d-40a9535563bb
Certificate serial:       010D0C9F4328584EF7176CAF7C8E4E18866B4B80
Authority key identifier: 21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397529
IP address blocks:        23.132.144.0/24 maxlen: 24
                          2620:6f:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6c:af:7c:8e:4e:18:86:6b:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf10f16-5f3c-4b91-8d9d-40a9535563bb
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=ac340adc-4e8e-46dc-acf3-818c1c3e68f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:32:6f:3c:5f:fd:82:52:9e:f6:fc:10:c7:
                    6a:1e:74:5c:9a:91:fc:bd:2b:aa:8a:78:b1:bd:eb:
                    8b:75:a4:a5:52:fe:e1:9a:1a:2f:fb:34:08:73:b9:
                    c1:4a:b3:3b:79:c9:c5:b9:55:55:39:34:ca:2b:c6:
                    9b:ca:76:bf:f9:b4:30:4c:47:33:5f:09:23:0d:de:
                    85:57:ff:b2:cd:61:41:d1:42:59:31:02:48:15:f4:
                    35:64:4a:f5:66:61:6b:8f:8f:d9:7a:1b:8b:a3:4d:
                    1a:3c:a4:75:99:99:e1:f6:e4:da:32:77:ab:77:3a:
                    f4:93:0a:2e:28:06:99:f4:91:2a:9f:32:84:27:10:
                    d9:b5:b6:48:d4:e0:83:23:0c:3d:10:b5:c2:59:6b:
                    b6:27:54:4e:63:6c:46:00:9e:56:5a:d0:58:9a:e6:
                    1b:3f:fd:7e:09:c8:ea:be:ca:74:94:b8:9a:22:ea:
                    55:be:e9:ea:82:9d:7a:43:c5:85:37:ae:3d:98:5b:
                    5f:fd:0c:42:dc:1a:c6:93:32:84:19:5b:69:71:68:
                    78:e3:6f:f6:fa:26:cf:15:37:b3:82:27:99:57:ed:
                    a4:f9:09:1c:35:d7:22:a1:55:a3:74:e3:02:e1:06:
                    b6:ae:8a:76:68:7d:96:8b:90:9f:61:6c:e4:80:89:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:5E:4D:F5:BC:72:9D:E3:4C:43:8B:58:C0:98:E1:04:18:CD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.crl

            X509v3 Authority Key Identifier:
                keyid:21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.144.0/24
                IPv6:
                  2620:6f:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:23:81:a1:d0:a9:1f:a5:f2:37:77:1f:5d:3d:dd:17:4c:01:
         4f:50:31:f4:01:37:70:fc:99:a7:64:48:8c:49:a6:2e:4a:12:
         27:ed:21:ee:1e:1a:4a:5a:e8:1b:7b:fe:69:7e:b8:9a:ab:07:
         7d:fa:e3:62:9a:b0:f7:74:1c:ab:7d:ce:0b:90:61:a7:52:30:
         b5:df:d3:55:d2:77:37:47:2f:28:e1:82:df:ff:53:75:84:ad:
         37:2a:4b:53:d4:9c:13:f1:a6:34:69:60:43:74:8e:c6:16:9f:
         e5:d5:6d:fd:28:b6:6b:3a:61:2b:a4:3b:b8:60:80:12:03:7f:
         eb:12:07:7c:98:7f:7f:65:5a:a6:e7:e8:c3:00:26:38:cb:6e:
         3b:14:a8:19:6b:75:22:83:ff:bf:68:ae:03:82:e2:10:5f:d5:
         de:80:ff:2e:8a:77:07:4c:08:76:b4:10:92:ae:c9:0a:ce:60:
         46:d8:1a:7a:8d:51:c8:63:a0:f1:fb:eb:e4:61:f2:b5:19:da:
         99:d8:a8:f9:48:24:78:94:90:42:2b:4b:31:fd:6c:6c:d4:e4:
         8d:8a:e3:a5:29:8d:2f:12:75:47:90:c1:97:de:89:29:c9:8a:
         81:1b:11:d5:c2:d9:10:8f:aa:ae:01:9e:64:2e:e4:69:12:f5:
         99:69:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:18:41 2026 by rpki-client