Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa
File:                     b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa (raw, json)
Hash identifier:          EKTsjtbSQzgoAiO9S50gfvnY4mzk52JyxnmMOximc+A=
Subject key identifier:   5B:54:A0:B0:2C:C9:60:C6:4B:2F:09:BD:69:DC:6E:E8:01:20:44:01
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584F2957C38AAF219A27F2810B00
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        23.165.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:c3:8a:af:21:9a:27:f2:81:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=dee076a2-d7a3-48a2-aa35-de668d8f6bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:ca:67:9e:4b:89:42:3c:d2:eb:53:ce:80:
                    f2:c6:07:5a:19:0f:17:46:99:b5:f4:0a:e9:08:a3:
                    6a:c5:66:9b:3a:2f:66:26:d8:9a:2e:92:5d:ab:26:
                    72:e0:ac:c0:89:55:83:82:9d:08:2f:14:4e:7a:e4:
                    36:1f:79:fb:64:2d:86:df:d3:31:6c:9c:9f:ec:e2:
                    e5:2b:3f:0f:4a:e8:51:a1:9a:8f:8a:c3:ff:13:54:
                    14:62:78:7d:90:8b:0c:49:f6:95:c7:0f:50:65:86:
                    94:c8:d5:04:89:c5:64:c3:88:32:79:9b:37:1b:b8:
                    67:cc:58:66:49:2b:20:be:fd:3a:eb:72:74:6a:c1:
                    90:59:30:62:09:c7:0d:a5:36:80:ff:04:df:4a:26:
                    cc:a5:81:45:49:a9:f3:24:ec:99:32:2d:ab:46:08:
                    59:47:29:12:b7:d2:bb:1b:d8:8f:8e:f0:2b:e5:01:
                    51:ff:a6:67:14:f7:9d:e9:08:96:52:26:d5:8a:bc:
                    18:09:f5:78:f3:94:c2:17:91:d3:e7:08:73:39:0b:
                    9c:6f:8a:8a:76:63:87:70:78:27:dc:f9:06:c0:97:
                    a2:85:c3:da:49:a0:4d:e7:47:91:c3:6f:c6:a7:48:
                    6c:55:ff:ea:07:71:5a:e4:38:a4:49:0c:c1:c8:03:
                    c1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:54:A0:B0:2C:C9:60:C6:4B:2F:09:BD:69:DC:6E:E8:01:20:44:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:c7:2c:77:b9:76:ee:14:81:4c:5d:ba:b5:9f:79:6b:5a:
         5a:05:f6:1e:5d:d3:90:71:06:6b:b7:88:db:8f:08:aa:d3:f2:
         b5:89:13:b4:aa:62:99:83:be:e4:6a:90:3d:c7:a9:43:4e:c3:
         58:1f:c1:53:59:1e:1b:99:1a:8d:4f:88:32:45:8d:c0:59:47:
         fb:dd:81:54:c7:28:82:54:27:a9:94:fe:a9:67:c0:38:5b:51:
         84:66:00:15:e3:8a:7e:f4:b6:c9:f8:a4:f0:f7:1c:a4:84:ef:
         49:93:b8:16:6f:5a:74:3a:bd:57:8a:71:2c:25:55:e8:d8:da:
         44:85:c7:e9:11:a0:57:62:46:f4:00:b3:99:e7:56:f9:d9:74:
         a3:89:fd:c7:3d:bb:05:37:f5:72:52:6d:4d:fc:cb:32:32:f4:
         b9:25:e5:d0:5a:fb:04:54:71:63:01:0f:0c:36:bb:bd:e1:d0:
         0d:e3:86:08:e2:02:6b:80:75:67:91:cc:63:3f:6f:0a:fb:25:
         5a:52:5b:d3:cd:92:7a:3d:ff:31:ff:76:a8:93:2b:b4:1a:36:
         f2:3a:cb:f2:ad:da:92:f8:81:49:a5:15:a2:f4:f4:11:d6:6b:
         f2:a1:b6:6d:6d:61:cf:37:19:d1:96:63:e5:f6:c6:3d:f6:78:
         36:05:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:57:10 2026 by rpki-client