Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9b480007-28de-3693-8014-6e88c53ac67b.roa
File:                     9b480007-28de-3693-8014-6e88c53ac67b.roa (raw, json)
Hash identifier:          dePb2+UAvTfke4xT091afUvbhuyRkqsxxthirm8PscM=
Subject key identifier:   39:51:F6:4B:F1:43:E4:0D:F1:B5:2A:42:FE:4B:4D:6C:B4:E4:86:06
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584F374D2872AF2A833CA81C3600
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9b480007-28de-3693-8014-6e88c53ac67b.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     25645
IP address blocks:        23.148.80.0/24 maxlen: 24
                          66.118.240.0/22 maxlen: 24
                          69.64.116.0/22 maxlen: 24
                          2605:88c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:28:72:af:2a:83:3c:a8:1c:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=c3eba0c1-4ed9-43ec-a281-56d05f4b8f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:ab:06:ce:24:ce:72:b3:ca:67:1f:97:26:
                    28:88:a3:dd:37:41:79:c1:dc:03:0f:62:e8:e4:a7:
                    88:7d:0a:85:7d:90:b4:3d:b7:a0:0f:a7:64:e4:09:
                    b3:76:a1:3e:92:16:7c:8e:66:e7:38:6f:22:e2:cb:
                    89:25:04:04:c1:4b:85:34:39:ff:29:b9:2a:c6:c9:
                    0b:80:be:93:bf:97:8c:7d:62:09:d6:31:9a:e2:59:
                    93:ad:62:f8:21:ec:b4:c0:c1:ea:ff:ba:0a:2d:68:
                    75:e1:ae:0b:27:56:0b:4d:5f:c6:6b:6b:db:18:a5:
                    b1:3d:29:cc:c0:dc:52:a6:01:89:b0:fb:ac:a3:d7:
                    eb:d2:0c:1c:e1:8d:ad:13:71:a1:41:60:df:e7:a4:
                    5a:71:3c:b5:84:e6:19:6b:12:83:e0:7b:38:c0:df:
                    32:7f:02:dc:34:37:4c:d6:f0:23:9e:42:69:38:9c:
                    3a:9b:bf:39:c6:e5:c2:bf:f6:35:dd:3c:c4:31:46:
                    c3:cf:76:78:7d:ad:f8:f6:0f:74:04:b1:85:1c:68:
                    bb:1b:af:72:a5:3a:54:27:da:f6:11:88:9b:3f:bc:
                    29:9d:90:3c:8a:83:3d:aa:45:29:d6:f2:3f:51:93:
                    be:1d:fa:fa:fe:e9:86:32:32:7c:1c:15:29:2c:01:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:51:F6:4B:F1:43:E4:0D:F1:B5:2A:42:FE:4B:4D:6C:B4:E4:86:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9b480007-28de-3693-8014-6e88c53ac67b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.80.0/24
                  66.118.240.0/22
                  69.64.116.0/22
                IPv6:
                  2605:88c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b1:a7:30:7f:e9:25:bf:ec:88:16:12:11:dc:41:89:28:bc:
         d7:a1:91:f9:61:03:e2:f4:bb:88:9a:73:45:25:d7:0b:f9:ec:
         b5:19:51:c9:ea:40:54:55:43:0e:02:20:d9:06:81:13:af:c5:
         35:33:75:dc:50:0f:b3:0c:31:ae:16:d4:92:88:ff:86:ee:43:
         9e:91:a6:19:00:76:5d:76:d2:34:d0:7b:11:cc:cf:ce:ba:f4:
         4c:f2:b7:ff:17:ef:15:6b:e9:10:3b:db:4f:cc:56:48:02:03:
         f0:dc:49:ec:e5:96:15:a4:4b:1c:5a:4f:4b:06:02:9c:bf:69:
         c6:99:e4:0b:36:9c:d7:4e:5f:89:19:c4:62:6f:4c:c8:58:f5:
         3a:77:21:b3:e8:d3:0f:f9:6d:db:70:fb:52:e1:1e:dc:3b:a5:
         6c:8c:06:0d:b4:47:b6:87:f6:6c:31:b9:49:d9:19:d0:bf:4d:
         36:27:5b:d4:ec:ba:1a:d7:eb:33:41:57:dd:b5:3f:91:e6:92:
         52:09:80:07:51:6d:07:d7:e9:7b:10:e5:6c:31:01:bc:22:b0:
         f0:ab:bc:e1:2c:68:2d:83:b1:2b:05:24:e9:da:e3:68:2d:f7:
         58:aa:2d:ab:e4:61:e5:d5:b7:57:77:54:b1:da:e7:2a:db:3f:
         78:1d:f0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:58:45 2026 by rpki-client