Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/49e46ded-e181-3f52-ac7a-f4b82a0f6187.roa
File:                     49e46ded-e181-3f52-ac7a-f4b82a0f6187.roa (raw, json)
Hash identifier:          YDbprLmRDzd7I3scj6nHeF8CoousnLmBR+ydD0Slb2U=
Subject key identifier:   AE:D9:2E:0A:6D:33:8D:18:80:A7:D5:67:76:7F:B2:E6:20:71:D2:F2
Certificate issuer:       /CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d
Certificate serial:       010D0C9F4328584F920850336FDF87E732813B80
Authority key identifier: 34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/49e46ded-e181-3f52-ac7a-f4b82a0f6187.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     5096
IP address blocks:        23.167.200.0/24 maxlen: 24
                          23.167.201.0/24 maxlen: 24
                          149.112.190.0/24 maxlen: 24
                          149.112.191.0/24 maxlen: 24
                          2602:f9c6::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:50:33:6f:df:87:e7:32:81:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=9f10d453-31ed-421d-8c12-2f2fa820719f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:8e:e7:ec:48:5c:ef:02:54:34:12:be:d2:
                    3f:56:bf:f8:58:f5:ee:ff:ac:ee:08:88:5c:6f:c3:
                    73:ce:6b:7e:ee:53:50:41:d2:a3:e2:11:24:09:88:
                    26:d1:f9:05:39:da:36:04:03:e3:b0:94:a6:7f:33:
                    85:91:cf:69:0c:38:8f:3d:9c:47:5c:97:8b:c8:e0:
                    8e:bf:3d:63:4e:9e:5c:11:4e:80:07:57:c2:e1:79:
                    1a:89:13:e2:54:37:b3:0c:50:66:e9:c6:3f:29:03:
                    b9:22:4a:2a:88:82:5d:6d:47:e6:ec:42:bb:ba:38:
                    3d:fb:c3:68:77:c1:63:fa:99:d7:b9:eb:12:86:55:
                    7f:f6:1b:35:4c:59:02:6e:c5:ee:df:12:b7:10:0f:
                    be:76:eb:b2:ae:74:1b:26:ae:75:42:b7:1c:c8:a9:
                    8a:99:5a:4d:d9:cb:e9:a9:a1:85:ec:2b:0a:16:0f:
                    b8:f4:68:8c:dc:78:97:84:52:b7:38:c1:23:69:f4:
                    03:73:d5:ac:1f:42:f1:42:95:89:7b:4e:72:88:ff:
                    96:51:56:48:68:3d:61:7f:be:dd:a9:9d:e3:9e:e8:
                    c0:41:e7:f5:3d:0c:bd:04:a7:bc:27:09:06:d7:20:
                    15:56:2d:ab:5b:ed:2b:79:30:cc:94:ef:74:ce:55:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D9:2E:0A:6D:33:8D:18:80:A7:D5:67:76:7F:B2:E6:20:71:D2:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/49e46ded-e181-3f52-ac7a-f4b82a0f6187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl

            X509v3 Authority Key Identifier:
                keyid:34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.200.0/23
                  149.112.190.0/23
                IPv6:
                  2602:f9c6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d0:96:2f:e3:17:09:e8:72:f6:06:f5:56:70:9e:74:37:76:
         cd:ae:32:f2:e1:66:d6:ad:13:b3:4e:75:15:16:a9:31:95:2a:
         b0:78:03:04:1b:e0:74:00:d1:c3:3c:93:9d:68:72:1c:08:d0:
         bb:ef:48:75:ac:59:73:65:3c:86:cd:24:f8:8c:8d:5b:ad:86:
         69:f9:0c:81:0f:17:55:3c:e9:eb:be:de:60:4e:8d:e6:58:08:
         3e:a9:3a:71:c8:d5:31:4e:81:f4:55:b6:c7:9c:f6:3e:8a:c5:
         39:68:8b:59:85:ca:31:1d:3f:12:cf:d7:bb:6f:8d:6d:64:af:
         57:b6:d4:ee:63:e0:2e:c5:9b:88:ac:11:d0:d3:8c:c6:c3:d0:
         57:96:3a:c1:89:e7:37:3b:d6:61:98:f2:30:08:c2:15:79:6d:
         75:10:09:f5:39:0e:e7:55:aa:e2:1d:9f:79:ff:b8:e8:b6:39:
         6c:6d:01:81:0a:b1:72:80:73:68:d1:5e:48:e0:2e:be:4c:b1:
         d4:91:93:e5:24:a9:8d:c5:5c:96:41:4c:2e:5a:96:a7:ba:bb:
         26:af:9c:69:90:bb:24:79:a3:aa:6c:92:29:c5:34:a1:f3:fc:
         e4:a9:78:96:17:5e:d1:42:74:c0:8e:0c:06:ef:ee:78:cb:89:
         29:3a:1d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:20:36 2026 by rpki-client