Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
File:                     7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa (raw, json)
Hash identifier:          36FXnw/V0XLgqwL2Hz6SGfl+6Y0sVKoGeFTUENjVGpg=
Subject key identifier:   EC:73:F8:14:FB:2B:EF:0B:21:2B:4F:A2:41:67:CA:72:29:B1:20:D3
Certificate issuer:       /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial:       010D0C9F4328584F30527ACACD3F09F917647800
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        23.131.60.0/24 maxlen: 24
                          2602:f763::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7a:ca:cd:3f:09:f9:17:64:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=01358cfd-951d-4f05-b71a-378dad10d7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c5:f4:72:31:d2:71:c7:8c:cf:f4:d9:2d:ab:
                    cf:6f:c2:c3:58:25:2e:d5:7f:cc:6f:04:f6:30:6f:
                    c8:18:17:e7:37:0f:28:22:98:ea:45:f7:9c:fa:ea:
                    ef:50:bb:30:de:56:c7:be:6b:6d:34:f0:91:4c:d8:
                    7c:e2:97:55:11:e8:d4:d6:f9:34:e7:c8:99:b3:9c:
                    85:da:41:fe:8b:5a:0e:78:b4:f6:e4:d4:5d:b6:82:
                    05:2e:6b:45:ae:e5:a9:ac:ad:6c:a7:1c:43:81:44:
                    0c:8e:26:5b:51:2f:69:00:c0:aa:be:ce:f0:2a:db:
                    94:f3:03:99:ce:79:80:45:13:eb:4c:fa:5d:e4:f2:
                    d0:1a:85:23:1a:a6:95:65:b1:3d:4a:95:a9:bf:ac:
                    5c:a0:f0:78:3c:f1:fb:07:47:51:13:91:07:c3:a7:
                    46:24:21:fd:45:04:d5:51:50:8a:7a:ce:e4:89:70:
                    27:62:66:35:7c:09:b6:84:ee:d6:3f:f8:3e:0b:64:
                    b0:75:04:a5:5e:46:17:22:21:c2:3d:d6:b9:7c:b2:
                    98:94:76:8d:a1:bd:87:7b:67:94:bd:d1:5e:8a:00:
                    ad:69:c9:3d:39:1c:79:5b:e3:c6:b0:db:f4:ee:73:
                    1e:07:cf:bf:21:72:b5:49:de:88:64:ea:14:4d:22:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:73:F8:14:FB:2B:EF:0B:21:2B:4F:A2:41:67:CA:72:29:B1:20:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl

            X509v3 Authority Key Identifier:
                keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.60.0/24
                IPv6:
                  2602:f763::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:bc:7c:6a:09:ae:07:49:3e:a1:4c:68:6f:46:bc:29:a7:
         48:18:02:1d:42:81:59:44:c6:9e:5d:8b:36:33:a8:79:19:fe:
         99:bb:b6:ff:3d:92:41:2b:99:f0:22:9d:42:62:67:3e:ae:53:
         ea:ae:cf:9c:ae:cc:fe:5c:db:04:e9:e0:19:0f:8b:ba:69:a3:
         0c:bd:7e:e0:b6:8a:82:a4:8e:3a:2f:ef:89:e7:5b:2b:92:5e:
         a7:9f:76:b1:96:20:c7:1a:95:4e:02:41:ad:fb:37:ce:a9:6a:
         4b:c7:0c:27:46:9d:37:e1:26:91:b0:5b:22:a7:b5:73:b8:a8:
         97:59:45:84:92:d5:d3:50:c7:d8:d2:f6:60:02:44:8a:77:9b:
         9f:e2:3b:8c:4f:84:49:2a:fb:a1:2e:18:b0:2e:75:e6:52:db:
         78:72:ee:c7:a3:1d:ac:d9:db:e5:f9:bb:3d:9a:b9:f6:65:72:
         39:15:f6:91:ba:f1:d9:5c:b0:3d:10:b1:f2:61:68:b2:6a:5a:
         a5:c5:ee:f0:e2:3d:d4:ea:a5:bb:d0:04:d3:d0:26:91:40:64:
         5b:54:ca:6e:7e:44:41:09:2f:9e:fe:47:2c:db:c4:bd:9c:2d:
         79:12:ae:4b:85:2b:7a:c1:d1:89:e5:a8:1b:7c:39:60:e2:58:
         e7:83:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:42:35 2026 by rpki-client