Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b/feabca86-d2fc-38ee-af73-6a546b206e48.roa
File:                     feabca86-d2fc-38ee-af73-6a546b206e48.roa (raw, json)
Hash identifier:          s/T7pfHMT3rP6JNRpv615hJsRLGD3jtjTYXHoYzt86U=
Subject key identifier:   E6:45:49:E3:C2:30:51:8F:DB:DD:DE:D6:97:15:AF:46:54:28:30:C8
Certificate issuer:       /CN=f312b2cc-5688-46e7-9e45-b5985b5d151b
Certificate serial:       010D0C9F4328584EF78A6DC145AFE3EE81FF8C40
Authority key identifier: 63:D5:F0:41:78:1A:B0:9D:62:49:13:BE:EE:3D:0E:1F:7F:2A:6B:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b/feabca86-d2fc-38ee-af73-6a546b206e48.roa
Signing time:             Wed 26 Aug 2026 16:52:05 +0000
ROA not before:           Wed 26 Aug 2026 16:52:05 +0000
ROA not after:            Tue 24 Nov 2026 17:52:05 +0000
asID:                     400926
IP address blocks:        23.189.152.0/24 maxlen: 24
                          192.12.250.0/24 maxlen: 24
                          2607:cfc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b/f312b2cc-5688-46e7-9e45-b5985b5d151b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b/f312b2cc-5688-46e7-9e45-b5985b5d151b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:8a:6d:c1:45:af:e3:ee:81:ff:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f312b2cc-5688-46e7-9e45-b5985b5d151b
        Validity
            Not Before: Aug 26 16:52:05 2026 GMT
            Not After : Nov 24 17:52:05 2026 GMT
        Subject: CN=14428e2e-15b6-4c39-8a29-e8f6cd095cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:ea:65:b5:87:57:d3:77:91:76:9d:c5:96:
                    15:df:dc:36:80:23:eb:aa:db:77:cf:e7:95:5a:38:
                    46:9c:8b:5b:02:ac:47:02:3a:dd:45:ac:70:fc:2d:
                    78:b7:8b:c0:1c:af:c8:a9:45:0f:a9:0a:96:63:9b:
                    42:79:28:e2:a9:72:d5:86:19:45:bd:dd:86:28:12:
                    3e:37:45:1e:5c:8b:fa:bc:29:40:4c:41:ad:1e:6c:
                    5b:8a:bc:76:a6:94:92:d4:c4:0f:25:c0:84:cc:15:
                    73:a4:6f:21:8e:f9:99:65:f6:5f:67:25:7c:88:c1:
                    7f:f4:f3:0b:13:0c:f4:4e:15:68:c4:a0:0b:73:72:
                    1c:80:7c:e7:ad:64:e6:5d:d6:f7:6e:e6:ef:b4:cf:
                    a7:1b:87:b2:96:2a:3c:8b:62:35:ab:9d:f2:b3:96:
                    9f:53:20:19:c4:66:1f:73:d1:a8:49:a0:9f:f9:85:
                    b7:cd:c2:ab:e4:f1:37:ce:55:e0:1d:85:bd:04:37:
                    0b:63:48:7d:57:9c:53:4e:01:44:12:01:6c:81:f9:
                    5b:49:a5:3c:fd:c4:c1:40:28:6d:06:46:42:1e:77:
                    9f:d9:fd:9d:7b:7f:84:a4:b4:35:04:33:80:d5:02:
                    97:0a:08:86:1e:09:20:6b:9f:c6:18:f7:4d:f2:b2:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:45:49:E3:C2:30:51:8F:DB:DD:DE:D6:97:15:AF:46:54:28:30:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b/feabca86-d2fc-38ee-af73-6a546b206e48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b/f312b2cc-5688-46e7-9e45-b5985b5d151b.crl

            X509v3 Authority Key Identifier:
                keyid:63:D5:F0:41:78:1A:B0:9D:62:49:13:BE:EE:3D:0E:1F:7F:2A:6B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f312b2cc-5688-46e7-9e45-b5985b5d151b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.152.0/24
                  192.12.250.0/24
                IPv6:
                  2607:cfc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:2d:35:8d:61:53:29:e0:46:1d:f4:04:ee:80:ab:24:df:
         b2:dc:19:f8:1d:c5:73:69:5e:91:08:f1:a7:a1:5b:74:eb:1f:
         3c:f3:48:74:b6:da:50:1f:5b:ab:2a:9b:0c:0e:85:11:2b:02:
         2f:b0:a7:31:2d:2d:b3:9e:c7:63:b3:8c:62:7c:e6:96:b7:86:
         a9:38:9c:a0:17:54:f2:8a:10:31:7b:17:4c:5d:13:6a:fc:97:
         25:7a:bd:d6:a4:52:27:d2:a1:45:ab:58:d3:97:dd:d2:c6:08:
         8a:75:01:22:46:74:1d:df:cf:13:94:9e:7e:02:1c:18:91:43:
         a1:7c:50:dc:c2:e2:d3:bf:15:e4:31:32:b2:07:c4:07:cb:c5:
         99:4c:cf:33:16:b0:0a:fa:a4:b5:f7:51:49:bc:4d:02:df:de:
         76:b4:83:e0:14:1c:88:0e:dc:00:6b:ea:26:f6:00:18:f4:64:
         00:fe:d3:13:f5:72:f3:c6:97:6a:85:ab:9d:19:82:f7:24:cd:
         a9:0d:31:7c:67:d8:52:7f:0f:d4:c3:a1:b1:27:65:e6:7e:86:
         df:eb:a8:8f:09:5d:9d:5b:7a:6a:14:d1:1f:cd:6a:48:d0:b3:
         53:85:06:13:b5:3a:07:26:4a:f3:7f:6e:45:2b:d0:a4:46:a4:
         fe:d5:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:22:35 2026 by rpki-client