Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
File:                     11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa (raw, json)
Hash identifier:          ExJl6+doFB6s+h0d32Q60lvLVUsvKB2aOWSsOI+xhH8=
Subject key identifier:   F4:9C:75:0E:23:63:F0:8D:78:33:78:8F:A2:76:6B:5A:14:4E:25:61
Certificate issuer:       /CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Certificate serial:       010D0C9F4328584D4A8FB112E6FCD6A25B0175A0
Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     394144
IP address blocks:        23.143.8.0/24 maxlen: 24
                          130.51.127.0/24 maxlen: 24
                          2602:27c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:b1:12:e6:fc:d6:a2:5b:01:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=9cdb9e41-558a-4c44-9ec6-bd573a261334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:2d:e1:6d:5d:93:05:c0:de:f1:50:03:77:
                    2a:42:01:2e:21:f6:e6:c5:91:18:44:b8:d7:09:6f:
                    8e:72:df:f8:fc:e3:e5:cc:13:20:f0:97:6a:2c:56:
                    b3:c7:10:de:61:88:59:73:e1:a3:dc:11:ea:11:4d:
                    7c:1d:9e:5d:55:de:ae:18:d7:6f:c7:a5:c4:e1:8f:
                    f3:b3:96:d3:2b:73:51:00:1a:36:0a:43:cd:12:98:
                    3d:2a:d4:31:7b:ba:b1:c6:40:d1:3e:cf:da:da:b5:
                    62:ab:da:c6:fb:02:b0:cd:39:e4:81:85:aa:c5:aa:
                    4f:ef:70:e5:fa:06:c0:a4:82:0b:96:5d:4a:19:6d:
                    17:7f:75:22:0c:87:29:9b:b8:6c:e8:5f:7c:dd:44:
                    8a:07:e4:f8:91:28:05:c3:c8:65:c2:63:74:fd:7d:
                    f0:24:b8:ea:3b:c9:f4:37:8b:a5:fe:b0:9c:88:2c:
                    a3:74:c1:46:e5:62:71:ef:bd:f9:a5:69:82:ab:ca:
                    0a:52:c7:ba:d3:8d:7c:bc:da:3a:1a:c5:b1:3b:01:
                    27:b5:e6:1e:8b:7a:2c:2d:af:73:a6:9c:c6:50:bf:
                    f5:33:b0:4d:47:43:ba:e4:73:43:d8:76:dd:16:c9:
                    0b:cf:e6:7c:2f:ed:aa:73:76:75:d7:c9:5a:fd:ce:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:75:0E:23:63:F0:8D:78:33:78:8F:A2:76:6B:5A:14:4E:25:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl

            X509v3 Authority Key Identifier:
                keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.8.0/24
                  130.51.127.0/24
                IPv6:
                  2602:27c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:56:b6:62:cd:14:c9:69:0e:91:c5:0c:6a:8b:3c:0c:9a:8f:
         8c:c7:c7:24:26:5f:d5:2d:0e:6d:b8:85:1b:3a:f9:14:9b:96:
         84:e3:f8:84:30:4c:56:c7:0c:39:f0:0d:a2:31:12:b6:93:a4:
         e6:2f:8b:06:e9:45:ae:41:d2:70:30:a6:72:22:70:3e:18:73:
         63:ab:e4:db:a9:40:1e:82:00:fc:8d:b8:6f:58:f5:6f:a4:bd:
         18:f1:0b:ef:c8:e0:b9:39:b9:c5:12:0a:65:bd:11:3a:cd:88:
         74:b0:ad:45:8f:8a:40:8e:84:8d:1f:5d:56:3e:b0:90:15:5d:
         f4:19:61:45:06:d7:f4:fb:c5:30:0e:60:c8:60:f4:a7:ec:57:
         74:c2:51:ce:42:1f:47:db:26:e6:d7:23:78:2a:39:27:bd:47:
         5b:3b:ce:d9:14:d5:c2:4b:72:39:4a:a1:9a:74:05:85:b6:e8:
         64:ba:e6:bd:24:f8:0a:6c:8d:94:7e:67:28:27:55:98:9e:cf:
         36:7b:58:d3:f2:dd:1b:5d:e6:22:55:87:58:a2:79:13:aa:df:
         01:9c:93:c2:d3:6f:95:b1:bf:cd:ed:c8:0c:cd:37:da:3e:99:
         81:f5:d2:6d:d4:02:10:bd:a4:33:8f:f6:4b:d9:b8:20:fb:10:
         7b:2d:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:12 2026 by rpki-client