Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
File:                     97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa (raw, json)
Hash identifier:          6MC62xIB0wiUn444fghVlCmmm85lH2E/bXK3XQ4/6QQ=
Subject key identifier:   EC:4D:6D:87:E6:A2:32:53:E9:E9:49:C2:B9:46:25:76:A9:2C:CA:34
Certificate issuer:       /CN=452d8948-a48b-4a64-bb88-5c289408944c
Certificate serial:       010D0C9F4328584F9E987665845E115076004400
Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     33201
IP address blocks:        23.142.112.0/24 maxlen: 24
                          2602:800:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:76:65:84:5e:11:50:76:00:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=547a0cbf-d312-4f3f-bcd8-31a67e175b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:5e:c5:7e:ec:d2:16:dc:1e:b3:59:b8:74:
                    d7:e6:7d:e2:ff:82:d5:ff:8a:6e:72:91:74:e8:36:
                    52:56:3b:68:df:54:3c:72:a6:4e:17:f6:7d:2d:24:
                    6c:8e:65:5a:40:15:a1:2b:e4:f0:65:97:d0:0e:26:
                    c0:90:1b:cf:04:66:d6:3e:65:dc:3d:6a:bd:50:71:
                    ed:66:58:cb:2d:1c:73:10:f9:d7:f7:3a:8f:ce:d3:
                    9c:37:24:88:35:a9:29:a6:24:4c:d0:be:b8:59:96:
                    4a:4a:eb:ad:ff:cf:93:19:78:c2:a3:0e:a4:38:31:
                    8b:44:d8:2b:71:53:24:1e:de:a3:a4:55:18:ab:60:
                    03:11:a0:97:a1:15:b3:32:0b:74:18:c0:c0:06:cf:
                    40:64:3a:30:13:b3:6d:76:e6:50:47:0c:1e:f9:43:
                    18:c5:fc:2c:72:32:ac:49:71:40:72:ee:38:66:a2:
                    b5:24:b3:43:26:5b:df:0f:38:59:cc:6d:8a:e7:70:
                    91:03:50:11:59:ba:2c:bf:93:e3:d3:c9:04:89:fc:
                    b3:60:a4:36:d0:78:7b:b0:ee:70:70:f7:3d:50:00:
                    75:c4:8b:c4:b4:5e:7a:32:74:d1:cd:69:69:ad:c8:
                    0d:86:36:26:dd:12:b6:7b:9c:4f:e8:49:c5:e7:37:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4D:6D:87:E6:A2:32:53:E9:E9:49:C2:B9:46:25:76:A9:2C:CA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.112.0/24
                IPv6:
                  2602:800:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:e2:68:77:dc:a0:b1:1b:17:95:84:47:21:49:eb:44:05:
         9f:32:ce:7c:5e:df:ac:23:03:3c:1a:dd:27:7b:4c:8b:55:08:
         c3:5f:b8:82:ea:b4:d9:0b:3f:9e:7d:a0:28:88:3c:2d:be:62:
         20:19:c4:07:ad:5f:af:b0:6f:56:2e:db:f4:92:67:62:af:eb:
         d7:86:17:5b:e5:82:a4:96:6a:de:1c:a1:41:94:c7:20:e6:31:
         08:c8:6f:3b:68:80:6a:4b:42:53:98:a9:9d:0f:b9:e0:80:37:
         97:73:86:6f:54:56:c5:86:4f:d7:6a:9c:cb:15:6a:86:90:58:
         d7:79:6e:cd:66:e8:2f:5c:6b:f1:6c:33:89:72:cd:47:30:f6:
         66:c1:74:b1:b9:f4:f2:61:16:3d:81:bf:ce:c0:70:65:d5:ec:
         f3:db:5f:9b:b0:86:89:77:34:da:60:c3:6c:38:ac:ef:d8:72:
         2e:88:94:7e:84:5e:1b:91:5d:a2:a5:b0:df:3b:a8:fc:e9:73:
         33:93:13:63:b6:0b:ef:32:a1:07:09:ed:ac:05:16:e2:57:9d:
         0e:1a:0b:90:b0:1a:f8:18:70:68:e4:e4:22:ec:00:82:b0:28:
         1b:2e:b2:ff:b7:a2:56:68:1a:49:96:e8:5a:c8:49:15:2e:93:
         fa:17:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:42:22 2026 by rpki-client