Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/6c5b600c-635f-36a1-b07a-3a060bbfe2eb.roa
File:                     6c5b600c-635f-36a1-b07a-3a060bbfe2eb.roa (raw, json)
Hash identifier:          CDs3+V9l8Uy+kUSD/1ij250pnQocc6I0wZil6Dw1Wok=
Subject key identifier:   AD:9E:C3:8A:D8:65:EA:A9:8A:8C:0B:1C:46:18:3B:E9:40:61:A0:69
Certificate issuer:       /CN=20ea9630-c9c1-4094-9638-6a744ac37d2c
Certificate serial:       010D0C9F4328584F4973D83DD3C2D2A81099DB00
Authority key identifier: 4D:E3:22:F9:AD:80:31:94:78:2B:4D:8A:2B:E2:2B:5C:4F:5D:68:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/6c5b600c-635f-36a1-b07a-3a060bbfe2eb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14731
IP address blocks:        23.154.208.0/24 maxlen: 24
                          139.64.212.0/22 maxlen: 24
                          172.99.208.0/22 maxlen: 24
                          2602:fd69::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/20ea9630-c9c1-4094-9638-6a744ac37d2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/20ea9630-c9c1-4094-9638-6a744ac37d2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d8:3d:d3:c2:d2:a8:10:99:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ea9630-c9c1-4094-9638-6a744ac37d2c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5bfb96be-2e49-4d32-b5b3-52fb46bba295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:1d:be:68:24:fc:bd:90:0a:1d:17:ac:71:
                    11:f9:97:b0:a6:3a:26:98:62:4b:d4:b5:18:1c:c5:
                    9a:c5:32:9b:2e:67:fe:c5:0b:8a:25:e4:35:84:24:
                    72:03:f5:e8:6b:13:40:15:f6:b8:e7:31:21:92:c8:
                    01:90:52:f2:6c:f5:50:09:27:1e:9b:64:59:eb:b4:
                    34:d5:46:7c:96:76:ad:76:13:22:da:2f:2c:c6:6b:
                    e6:a4:3c:f0:12:2a:e9:ab:96:a9:5c:af:8d:05:22:
                    13:f4:58:e6:82:a9:05:ee:9a:19:36:e1:44:76:0f:
                    b3:42:fa:64:0d:59:85:bb:19:45:a4:c7:a0:76:5c:
                    10:ab:cd:7b:87:b5:8c:44:06:1b:6c:82:94:67:29:
                    f8:a7:c9:f0:01:d4:bc:4c:64:83:13:42:9d:7a:89:
                    b8:f3:ea:9b:05:9e:7c:ac:dc:7e:60:87:66:68:84:
                    0d:f2:d4:e7:8e:7c:b5:3e:ba:83:1e:05:3d:3d:5e:
                    bf:94:42:29:31:70:7f:17:49:f0:7e:08:fd:20:f9:
                    11:4c:93:4e:a5:db:56:58:8c:1b:36:11:e0:ac:b7:
                    5a:b1:7f:34:c4:7d:0b:b2:01:22:81:70:2a:af:53:
                    4a:30:f4:96:b2:4f:05:aa:74:6c:79:56:0f:96:ba:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:C3:8A:D8:65:EA:A9:8A:8C:0B:1C:46:18:3B:E9:40:61:A0:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/6c5b600c-635f-36a1-b07a-3a060bbfe2eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c/20ea9630-c9c1-4094-9638-6a744ac37d2c.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E3:22:F9:AD:80:31:94:78:2B:4D:8A:2B:E2:2B:5C:4F:5D:68:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20ea9630-c9c1-4094-9638-6a744ac37d2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.208.0/24
                  139.64.212.0/22
                  172.99.208.0/22
                IPv6:
                  2602:fd69::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:72:c9:b5:6a:3e:fa:41:f6:0b:62:57:d0:75:6f:13:e1:68:
         4e:f4:b8:76:ae:b9:86:ca:b4:22:1a:7e:ed:a3:b4:e4:12:e2:
         71:25:fb:1c:a1:18:11:4f:75:63:8b:90:3c:13:5c:06:21:67:
         b4:5c:59:04:3b:a0:51:27:c9:99:ef:22:9e:56:df:ac:a9:36:
         6c:2d:b9:a4:10:fe:01:84:16:e1:b8:ed:b5:29:ca:6d:c4:ab:
         71:79:65:e8:20:b2:9d:2e:a0:b5:bb:ea:87:b2:5d:43:97:b2:
         20:e0:35:36:08:0e:5d:96:92:0e:0e:81:b2:27:49:42:db:f8:
         28:46:1b:6e:60:9a:c5:f0:62:90:e9:6e:21:17:03:99:1c:9c:
         b7:c2:ef:29:3f:6e:cd:5f:0e:f3:72:dd:c1:b7:37:67:4e:a8:
         d9:7b:9b:5e:32:75:ef:b9:a3:b9:e6:9e:6f:1c:33:82:cf:cf:
         2f:07:0e:0d:6c:9a:6f:14:f1:09:b5:1c:dd:11:50:60:67:2b:
         bc:2d:de:b1:da:fe:8f:62:b6:a0:39:e9:3c:02:17:71:a5:5e:
         02:67:bc:02:d9:6b:7b:aa:0f:0c:90:b2:1d:c7:67:e5:1b:3f:
         3c:a4:65:06:87:3c:e6:5f:32:ee:58:e5:7a:8c:6a:3b:aa:6f:
         00:c9:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:23:11 2026 by rpki-client