Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/166d7fa8-a78b-30a0-9aa6-66932dd483f9.roa
File:                     166d7fa8-a78b-30a0-9aa6-66932dd483f9.roa (raw, json)
Hash identifier:          P/UwmHtBbltz7dcIoDXmfISuXLplvf1x9txgY0lnC5s=
Subject key identifier:   6B:28:74:3B:4A:E0:14:5C:79:BE:8C:7D:BD:17:57:36:E3:1C:0B:6C
Certificate issuer:       /CN=1068cac9-dc99-4d0e-acf7-ce09e28ae97d
Certificate serial:       010D0C9F4328584F49748A2BE9A359076A5AC300
Authority key identifier: DB:21:91:80:9A:67:B7:AD:18:FE:AC:29:68:53:B7:59:60:94:74:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/166d7fa8-a78b-30a0-9aa6-66932dd483f9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402019
IP address blocks:        23.149.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:8a:2b:e9:a3:59:07:6a:5a:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1068cac9-dc99-4d0e-acf7-ce09e28ae97d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2eb302ad-e87b-469e-9690-486b53f1bb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:0e:e2:9d:5f:4f:e0:24:b0:a4:e9:21:4d:
                    ec:48:20:0c:75:1e:e8:fb:17:e0:83:ba:c4:53:0f:
                    e1:e2:be:2e:63:df:96:1d:9e:9b:83:9f:85:64:c6:
                    45:7a:0b:bc:10:01:da:b9:fd:f0:c1:a7:ef:94:05:
                    bf:78:f4:78:07:de:96:f7:cc:6d:1e:fe:39:d8:bc:
                    92:4a:43:84:24:98:17:73:22:4a:b1:bc:2a:29:d7:
                    fd:f1:e1:f0:24:9a:3b:72:34:73:fa:02:76:c5:9f:
                    fd:96:04:fb:fa:4a:44:63:29:25:01:0b:f4:1a:0f:
                    bc:cd:d3:df:58:a6:c7:e0:c3:ec:f0:9c:21:dd:02:
                    51:de:91:2f:e6:8a:61:f6:56:cf:24:6f:04:50:5e:
                    ab:87:55:13:9a:0d:af:c8:27:26:9c:37:97:b9:b7:
                    19:61:c7:93:30:66:f8:ca:56:53:ba:d3:87:7f:11:
                    5c:01:c5:d2:64:76:54:ff:fe:e0:44:8f:53:ce:4a:
                    06:a1:82:e3:37:9c:46:59:e7:aa:50:88:9c:0d:f8:
                    b4:ae:7b:d6:b1:3c:24:a3:fa:3c:f2:ce:c4:47:3b:
                    20:de:da:19:0e:a6:f3:d7:46:cd:7d:d2:e2:9d:16:
                    a1:0f:dd:23:4f:cc:bd:d0:a3:6e:91:2f:97:70:11:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:28:74:3B:4A:E0:14:5C:79:BE:8C:7D:BD:17:57:36:E3:1C:0B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/166d7fa8-a78b-30a0-9aa6-66932dd483f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:21:91:80:9A:67:B7:AD:18:FE:AC:29:68:53:B7:59:60:94:74:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3b:79:e8:c6:1b:0b:3c:bb:74:92:b6:a9:91:79:a3:06:0e:
         be:93:17:0b:9c:18:5c:4e:e4:0c:12:b1:41:a1:c1:6a:64:07:
         0f:33:5b:2d:dd:59:54:71:a5:32:74:d6:5f:4c:fb:cf:d1:1b:
         72:a3:c1:da:48:40:13:a3:09:a9:5f:89:da:b2:67:63:6e:0e:
         18:1f:50:8a:f8:d8:80:7b:04:a7:41:ec:40:d4:17:dc:50:b4:
         20:b5:9a:40:24:9f:63:73:b5:1b:f2:2a:24:80:32:08:0c:05:
         38:dc:f4:a4:2c:e1:67:26:4c:ba:88:fe:17:c2:a0:7a:f4:60:
         97:c6:f2:80:87:a5:3f:f0:7a:9d:8c:98:b5:8b:a5:a0:0e:4a:
         25:b0:04:ac:43:6b:13:7b:ab:6f:27:1a:33:29:9f:57:7a:90:
         e9:7d:52:13:0e:62:5c:0b:1a:0e:05:bd:2c:88:86:17:4d:56:
         74:cf:5c:57:1f:70:c3:a9:8a:b1:d1:e0:17:d0:6f:40:01:d5:
         96:13:45:d8:41:46:eb:d1:da:f9:5c:3b:00:f0:4f:10:17:1e:
         ae:bf:9b:42:59:f9:6e:a0:06:b7:92:61:97:0a:d0:49:c2:79:
         6a:9f:08:03:66:2f:7b:64:70:5b:6f:9f:09:83:88:95:93:fb:
         87:c0:a0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:12:38 2026 by rpki-client