Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/6b029d67-c0be-3cd6-be53-2ff6741141f1.roa
File:                     6b029d67-c0be-3cd6-be53-2ff6741141f1.roa (raw, json)
Hash identifier:          7yR9VxVmWbM8lIJY8agulxSIjM6rYZq/fO+0Vhud0WM=
Subject key identifier:   9B:8E:1D:BA:66:5A:08:B9:92:C0:94:46:E4:F3:83:14:C0:DE:E2:B7
Certificate issuer:       /CN=7f4682fd-15a3-4dca-aaa2-1b5c7b71b511
Certificate serial:       010D0C9F4328584EE22749E1AE9834F6B342A2C0
Authority key identifier: B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/6b029d67-c0be-3cd6-be53-2ff6741141f1.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     401896
IP address blocks:        23.143.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:49:e1:ae:98:34:f6:b3:42:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4682fd-15a3-4dca-aaa2-1b5c7b71b511
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=b899b38c-9ba6-4cd1-af25-3acb2720b786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:da:25:5d:42:9d:cc:a5:da:4b:f5:b5:97:
                    62:d0:f2:21:c0:74:c3:88:0e:1e:6e:fc:e4:e4:cb:
                    0d:b1:69:28:68:3e:f6:2c:5e:c2:99:02:31:36:d0:
                    88:1d:e6:54:85:58:94:e7:d7:ea:8a:ae:03:2a:45:
                    ae:ec:1b:8e:c4:4c:b7:e6:f4:3e:95:a4:e4:00:22:
                    9a:fb:13:2e:e9:36:0b:ab:06:ce:30:44:7d:44:81:
                    80:df:0d:03:db:99:19:7e:29:d7:33:ff:c2:48:9d:
                    79:73:32:79:67:8c:fb:51:e4:5a:5b:75:0f:99:51:
                    b6:33:4b:98:5b:98:13:08:51:63:fa:24:d3:93:df:
                    fc:d5:4e:67:26:c3:8b:86:0e:9e:fe:ba:c1:7b:51:
                    d1:c8:94:de:17:47:3b:8a:56:3a:d4:d6:08:72:92:
                    c2:a1:e9:4e:b1:ba:87:28:c2:29:c0:61:a4:46:5d:
                    bc:8a:cd:a6:4b:1f:0a:8b:7d:e1:af:f9:f9:6a:3f:
                    7e:67:0f:c3:ef:e4:9e:0b:78:62:3c:fd:ab:56:fe:
                    52:7b:8a:f9:56:ef:99:0d:c5:9c:23:7b:cd:22:ff:
                    93:2d:e7:81:40:c3:2d:d3:6c:63:5b:9f:7e:06:c8:
                    78:f3:a0:5e:2b:68:d5:54:99:a4:a5:72:ce:e5:90:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8E:1D:BA:66:5A:08:B9:92:C0:94:46:E4:F3:83:14:C0:DE:E2:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/6b029d67-c0be-3cd6-be53-2ff6741141f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.crl

            X509v3 Authority Key Identifier:
                keyid:B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:61:08:1e:37:8a:37:ba:2d:b2:4c:53:72:25:20:87:1d:87:
         7d:47:c5:2b:b2:21:0a:23:0c:7b:ee:23:3f:1f:71:3f:d4:dd:
         4b:86:44:8f:69:e7:af:8d:a0:26:d2:36:4d:a4:3c:c9:b2:a1:
         28:f8:07:07:41:67:88:d2:23:7c:f1:bb:18:09:81:c9:e9:b9:
         3f:47:df:c5:07:be:87:9b:ff:59:9b:30:62:40:1f:84:a7:e5:
         0f:54:e3:e8:6e:3c:a9:54:9b:10:60:ea:a3:fb:d3:d8:42:9d:
         a7:0a:02:09:cb:08:d6:8c:74:8b:cc:ca:f5:c0:3c:d9:03:de:
         49:05:ce:dc:81:6e:4e:37:f0:f0:2b:e1:f9:48:ec:2c:59:c9:
         0d:10:c6:c1:90:60:51:e6:02:b0:30:62:c8:3d:aa:8f:9c:28:
         be:b5:70:17:f6:a7:b5:39:8b:ab:db:60:9f:82:a0:7b:fe:18:
         29:3a:4d:8d:be:c5:3f:f1:7a:29:87:7f:0e:d5:f7:18:d5:31:
         17:b3:c9:e9:95:1f:64:83:9d:d1:7a:33:82:cb:23:42:06:93:
         ff:b4:aa:86:9c:23:a3:7e:6a:db:e0:50:67:94:b9:a3:f3:5b:
         45:3a:ff:f0:3b:33:56:fd:6b:26:92:bb:54:49:0a:e2:c9:d9:
         f6:4d:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:43:43 2026 by rpki-client