Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/e978865a-6c80-3e8d-b1af-a7e090170d50.roa
File:                     e978865a-6c80-3e8d-b1af-a7e090170d50.roa (raw, json)
Hash identifier:          7GKqko+PyLsPC1QxAR+yV9M8giexFdF0uSuSQN2Unyo=
Subject key identifier:   79:93:13:ED:BB:D2:73:5B:EA:AF:62:6D:9F:42:1E:D0:D9:90:0D:67
Certificate issuer:       /CN=8286db41-7cc3-4224-8e5c-10a5534a00a4
Certificate serial:       010D0C9F4328584EFCACBAD5F10617C20CBF1100
Authority key identifier: 0C:EF:A1:3F:44:74:5C:DE:42:34:3C:5E:1B:16:C2:56:28:0B:95:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/e978865a-6c80-3e8d-b1af-a7e090170d50.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     63260
IP address blocks:        23.151.124.0/24 maxlen: 24
                          198.177.137.0/24 maxlen: 24
                          2602:f48d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/8286db41-7cc3-4224-8e5c-10a5534a00a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/8286db41-7cc3-4224-8e5c-10a5534a00a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ba:d5:f1:06:17:c2:0c:bf:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8286db41-7cc3-4224-8e5c-10a5534a00a4
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=3eca5860-38ad-46d4-934a-7e24a2fd6ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:09:fc:7f:1c:be:16:55:e8:be:d3:99:12:
                    29:5c:2d:53:3a:9f:72:0e:dc:11:7a:3b:fc:e9:64:
                    51:75:eb:7d:89:8f:3c:80:19:b2:4e:95:50:ff:0d:
                    0f:cb:e1:00:44:92:9b:6e:ad:c9:da:7a:5a:e6:e2:
                    ff:1f:6f:8f:9f:05:ea:3a:9e:55:19:d7:37:1d:cc:
                    8b:57:c5:fc:bb:1b:32:cf:44:ee:86:64:61:c8:51:
                    0d:ee:c5:ee:6b:90:15:e8:91:70:8a:a9:3b:f5:54:
                    7c:54:4f:de:a8:92:b8:95:f0:9f:e4:99:ad:5c:80:
                    6f:0b:30:fd:54:5e:3f:84:2f:65:1c:cc:f1:92:d6:
                    e2:9a:f5:44:62:e7:17:68:6b:e1:57:e9:97:ed:05:
                    b2:c7:8a:fa:f0:07:64:7c:49:d8:60:06:41:08:58:
                    81:b8:f3:f5:de:9e:d6:04:b0:6d:5f:95:49:3f:dd:
                    06:20:94:a4:7b:c1:cc:af:f9:7b:f4:f7:09:c5:0d:
                    51:8b:ec:ee:9b:b6:39:58:3c:80:ad:30:9a:47:86:
                    2c:63:e9:54:71:29:a1:93:9e:fd:24:18:00:c2:9b:
                    b2:d6:1b:dd:f4:5b:7f:4e:22:82:4e:6d:10:b0:22:
                    da:73:17:09:26:6b:79:2e:13:f3:05:c2:0a:ac:9f:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:93:13:ED:BB:D2:73:5B:EA:AF:62:6D:9F:42:1E:D0:D9:90:0D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/e978865a-6c80-3e8d-b1af-a7e090170d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4/8286db41-7cc3-4224-8e5c-10a5534a00a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:EF:A1:3F:44:74:5C:DE:42:34:3C:5E:1B:16:C2:56:28:0B:95:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8286db41-7cc3-4224-8e5c-10a5534a00a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.124.0/24
                  198.177.137.0/24
                IPv6:
                  2602:f48d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:d2:95:8b:05:72:cf:cc:fc:87:60:e2:ea:50:98:c7:57:
         3a:bc:2c:ef:55:70:5a:9c:df:64:65:8a:d9:5a:e0:15:47:89:
         b3:9d:85:c0:99:55:32:e8:ae:e0:56:8d:57:55:e1:1f:ea:1f:
         03:45:a1:3a:78:1e:49:81:de:d1:79:37:ce:ea:b9:d6:93:cc:
         6a:61:d3:2b:5a:96:e6:9f:2e:ef:5e:b5:60:f5:ff:af:33:37:
         8e:37:4e:50:8a:2c:12:ef:eb:eb:7f:2e:1f:16:60:86:aa:59:
         bd:1c:bf:dd:bd:7e:21:7e:f6:70:f1:04:84:48:70:4e:6f:c8:
         2b:d6:1d:25:93:ad:f0:30:49:5d:14:cf:85:23:10:68:de:70:
         03:89:90:67:f4:8d:df:a6:9a:53:aa:12:db:f5:35:14:c3:d4:
         20:13:b1:34:96:f6:52:25:66:71:eb:70:29:ee:e4:50:b6:27:
         99:45:2c:3d:e1:3f:6a:df:78:ce:55:47:97:00:ed:c4:91:b9:
         1c:1b:88:74:bf:cd:b9:d2:6f:8e:f8:d1:c4:67:67:05:80:be:
         b9:83:54:b9:e2:42:8f:da:d1:84:a2:e8:69:0e:c2:28:7e:09:
         a4:6c:e7:8a:31:6b:e4:a6:e6:8b:67:89:98:3f:a9:37:be:29:
         02:06:fb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:22:43 2026 by rpki-client