Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
File:                     002ef700-936e-3cb8-aa93-bc3050bdb98d.roa (raw, json)
Hash identifier:          XqwxcrEkiPrA8kcIuEHW6QfezbK8V0G+mddk+VhOR4w=
Subject key identifier:   A5:62:A3:79:28:A6:A5:B8:8B:E0:D9:36:28:92:5D:7F:BC:3B:CA:87
Certificate issuer:       /CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
Certificate serial:       010D0C9F4328584F225D093AA10DB85CE49D14A0
Authority key identifier: 5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     201579
IP address blocks:        23.166.72.0/24 maxlen: 24
                          2602:f9e4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:09:3a:a1:0d:b8:5c:e4:9d:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=0a22d4e1-1d3c-49d2-95b8-dbfc5fe3d24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:2f:11:f6:80:35:d5:ec:f5:0c:45:1a:ba:
                    91:12:13:64:3a:f6:db:3b:ca:cb:7f:82:df:35:9e:
                    ed:4e:e8:f1:b7:1b:53:15:69:3d:3d:8d:45:d2:ad:
                    b2:de:01:8c:b6:32:64:a1:3d:6a:09:97:43:52:85:
                    24:d8:b5:76:a8:6d:f7:41:f0:54:e7:c4:49:db:35:
                    c0:2d:73:94:ef:9c:95:99:e7:67:1b:07:1d:fe:5b:
                    9a:54:82:99:3a:83:c5:be:03:64:e0:5d:92:a4:b7:
                    b2:0c:63:29:15:8d:dc:a1:03:f8:dd:b2:0e:fb:cf:
                    0f:e8:8c:12:a0:fc:9d:c7:ac:58:92:10:56:db:6e:
                    c1:9e:20:d7:67:fb:2b:51:cd:38:7f:66:96:9e:11:
                    5b:99:35:0d:7d:18:0c:bb:9e:27:73:70:41:36:39:
                    88:c2:56:65:82:d9:3c:06:62:22:45:d7:7b:86:ea:
                    c9:4e:17:93:1e:97:d1:12:1c:23:a0:6d:28:d8:93:
                    6c:af:a5:40:15:54:49:d1:71:21:96:11:4a:3d:5d:
                    14:ab:37:36:0a:8f:6d:06:69:2e:de:7e:51:e7:79:
                    7c:05:ec:cb:a7:33:fb:22:bb:e7:0e:ee:a9:e4:5d:
                    f8:34:fc:66:a2:6f:8a:c6:8c:2b:b4:dc:e0:ce:d0:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:62:A3:79:28:A6:A5:B8:8B:E0:D9:36:28:92:5D:7F:BC:3B:CA:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl

            X509v3 Authority Key Identifier:
                keyid:5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.72.0/24
                IPv6:
                  2602:f9e4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a2:6f:69:e8:da:b8:42:16:d0:7a:35:80:5d:a9:a1:9a:2c:
         46:5d:9f:1f:9f:b9:1f:c2:6e:28:56:a1:ce:65:c2:dd:f6:de:
         56:8c:d9:52:f0:6a:61:8c:d7:42:3e:91:0a:cc:a7:fc:22:ae:
         46:31:92:01:93:58:0e:11:7d:a1:7f:17:9c:c9:b0:33:e5:5a:
         53:41:57:41:65:03:5a:fd:1d:57:ad:b1:50:40:4e:c2:90:40:
         f6:aa:8b:3b:6e:62:73:76:b3:17:5e:56:a8:7e:6d:e5:53:56:
         14:fb:a2:55:60:27:03:ac:05:0d:a4:1d:9a:f4:24:65:df:d5:
         d7:a0:37:93:2a:36:37:47:b5:1c:33:1d:e8:01:f3:9b:5f:df:
         c5:32:2d:d5:10:9f:5c:e6:21:27:77:76:bc:54:1b:32:cf:ae:
         2a:b3:8f:4b:55:24:ec:b8:aa:5c:c6:74:01:e0:c9:8f:25:62:
         bc:15:d2:3f:d9:f6:9b:3c:8c:5c:db:89:45:90:6c:da:30:93:
         70:5e:66:e5:44:5b:c3:76:de:8f:08:ca:15:16:2e:aa:ca:98:
         47:30:c6:b2:19:ec:58:1f:32:54:e1:fc:ee:a1:76:f9:8c:e2:
         62:10:4d:b6:07:38:6b:25:b8:7a:1f:22:13:b2:2f:72:45:f0:
         2e:d6:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:29:38 2026 by rpki-client