Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/9bb6da2c-9e51-30a2-9769-751c1a83d447.roa
File:                     9bb6da2c-9e51-30a2-9769-751c1a83d447.roa (raw, json)
Hash identifier:          9o7BtNAS51iE+LKG4EyUpebJjBKDNTNAOVJ/TawzLcg=
Subject key identifier:   66:EC:E3:CC:5E:C4:3D:BB:BF:C1:A6:62:91:D8:49:68:25:85:8D:7D
Certificate issuer:       /CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8
Certificate serial:       010D0C9F4328584EFE123153DC595F92D9AB3F00
Authority key identifier: D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/9bb6da2c-9e51-30a2-9769-751c1a83d447.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     401998
IP address blocks:        23.145.180.0/24 maxlen: 24
                          2602:f557::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:31:53:dc:59:5f:92:d9:ab:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=acaa5a1b-0b49-401f-882c-8dd2e0bd48f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:c7:1e:ff:62:e5:88:3b:fc:62:06:eb:bd:
                    7c:51:b4:56:e0:f1:18:eb:f6:5c:d2:bf:72:ed:54:
                    5b:74:ba:7e:6f:87:da:e0:1d:0e:c5:69:5f:90:1a:
                    25:80:dd:6c:82:8f:02:83:6b:7f:b5:da:2d:4a:a6:
                    55:95:d6:4c:08:7b:8f:db:87:21:54:90:6c:30:f0:
                    ce:62:f4:fa:ff:e0:8d:33:77:b5:8e:36:01:1e:c1:
                    da:d7:78:e0:2f:81:0b:de:e8:0e:0a:38:0c:c4:c2:
                    24:21:84:d2:e0:a3:6f:3e:72:e4:8a:67:61:b2:07:
                    19:e9:69:85:96:c5:3c:e4:1d:2e:2f:ee:e0:d1:0c:
                    82:2d:3f:9f:61:b2:40:c3:95:ca:0d:dc:8f:cc:9d:
                    67:65:4f:3c:c0:54:ad:65:95:39:21:63:d0:40:f4:
                    dc:9c:e4:cd:3b:64:7d:d6:91:6b:ea:ed:87:2e:aa:
                    a2:42:50:34:4d:a0:05:8d:32:9c:f6:cb:05:a5:44:
                    32:18:e7:20:b8:2a:ac:6a:c7:e9:65:3c:17:8a:02:
                    38:b6:76:51:5b:1a:75:70:fa:50:b0:cf:d7:0d:e6:
                    a3:68:69:13:3f:8a:49:74:50:45:96:cc:6b:07:c6:
                    23:8f:f4:61:d6:52:33:06:84:09:0c:60:70:da:c1:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EC:E3:CC:5E:C4:3D:BB:BF:C1:A6:62:91:D8:49:68:25:85:8D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/9bb6da2c-9e51-30a2-9769-751c1a83d447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.180.0/24
                IPv6:
                  2602:f557::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:a2:7f:a2:7d:b6:9f:74:b4:1e:cd:19:87:78:8a:90:95:
         d1:07:ca:82:32:e3:21:12:4c:13:7d:36:6b:41:2b:16:06:e2:
         d9:61:63:3f:cd:41:d0:0f:f8:b7:f1:b1:2c:c7:72:bc:98:24:
         64:23:e1:61:8c:46:08:06:1d:50:03:b5:ae:1c:ba:71:f5:e2:
         58:77:0a:ef:cf:73:b4:e7:26:6f:45:78:7d:ab:c8:ce:cb:f5:
         90:85:57:cb:d1:cf:59:b9:5a:d1:ff:ac:ab:4b:5e:3a:7f:3c:
         96:71:6b:5e:52:09:85:e7:ec:15:76:33:7f:6f:52:6b:81:78:
         df:7c:0f:b6:74:a3:8c:ca:0d:5a:b3:89:63:b3:ec:46:83:e1:
         ee:4d:c8:e6:e1:a0:73:fd:c4:5e:77:aa:3b:fb:79:d7:47:49:
         b3:cd:b8:14:f0:51:ea:04:41:c4:8c:fa:bb:19:67:6c:b4:31:
         cf:d0:5d:95:d4:ff:3b:c0:1d:45:cf:91:de:0e:00:50:c9:c2:
         28:80:20:d8:7e:7f:fd:3f:7f:dd:36:97:30:9d:59:fc:7d:3f:
         8a:8a:33:73:47:f4:43:dd:d6:c7:aa:85:57:4b:1d:e6:76:9d:
         fa:db:c7:ce:ac:ff:ba:74:76:57:30:85:ab:cc:23:60:53:a0:
         1d:10:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:20:13 2026 by rpki-client