Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa
File:                     7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa (raw, json)
Hash identifier:          nyhvXFSUlulx8+rof4iwpNy8jqHTlcbOHnb9WKlJQQ8=
Subject key identifier:   9C:86:5D:D3:BA:9C:AA:63:92:6E:61:D6:79:C1:C2:22:83:DC:61:FE
Certificate issuer:       /CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
Certificate serial:       010D0C9F4328584D2BDA254919639C8AFB868580
Authority key identifier: 78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     27520
IP address blocks:        23.189.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:25:49:19:63:9c:8a:fb:86:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=eef33510-20ca-4553-bdfa-02cfa3511e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:6b:e4:e1:46:c8:56:ab:d5:16:90:8c:7c:
                    0d:94:10:ab:d8:fa:4b:03:e3:e7:9c:34:49:b4:13:
                    52:63:c7:2f:30:de:f4:c4:be:de:42:b1:6d:1a:12:
                    25:1c:4c:c6:42:57:d7:ea:75:96:24:b3:da:63:ad:
                    33:00:c0:5f:8f:d6:c1:f6:4d:0c:cb:5d:53:5c:f5:
                    2a:38:8c:88:39:65:a9:0a:f8:13:f6:93:da:80:37:
                    62:fb:ff:b7:21:93:45:79:1c:1f:b4:d8:35:43:70:
                    d7:7e:eb:7a:93:0f:03:26:61:f9:25:b4:82:17:a8:
                    40:67:38:72:fc:33:12:85:78:83:b4:b0:f8:41:6c:
                    9a:01:14:20:f4:92:6c:de:9d:ff:49:1c:cc:55:2b:
                    ec:a6:6c:f8:cc:33:77:b2:50:18:b8:64:49:6d:1c:
                    dc:46:f8:d4:69:5c:a1:e9:f6:50:9e:31:e9:b5:b8:
                    f8:40:0b:53:3c:9d:bd:cf:1a:ec:a4:98:84:d1:a5:
                    62:1e:2b:5b:9f:dd:50:1b:e9:58:57:8c:bb:7c:78:
                    c7:74:d6:eb:1c:06:c9:da:18:3e:97:37:3c:f9:c8:
                    cb:60:d8:fd:ab:59:9f:16:3a:b1:d5:ca:1f:62:40:
                    9a:4e:dc:d8:c8:e9:ce:e1:80:a5:af:c2:8b:f9:dc:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:5D:D3:BA:9C:AA:63:92:6E:61:D6:79:C1:C2:22:83:DC:61:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/7c3bfe8f-9f9d-3fd1-93ff-7a5562a153ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl

            X509v3 Authority Key Identifier:
                keyid:78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:d1:99:29:ee:66:37:14:16:50:55:11:9d:17:ec:a3:32:
         e5:54:e1:7d:30:02:43:cc:d1:37:98:74:1c:54:1b:d8:3b:f3:
         36:06:e1:1c:82:18:ed:6e:a5:b3:a7:db:36:a4:03:98:46:5c:
         79:6b:e2:c4:0b:36:3a:97:6e:73:a7:9f:27:db:e3:8b:6b:98:
         94:a3:57:52:0c:68:11:7a:03:ee:93:d1:0c:ee:18:24:58:b8:
         78:44:3a:0a:cb:69:29:f1:74:19:be:35:5b:00:e2:ca:8d:4f:
         0f:e5:ab:1b:50:ab:ea:5f:a3:17:03:bf:42:f9:8e:4b:24:ff:
         be:4b:d3:fe:c4:9a:d7:05:26:fb:eb:e1:d1:25:0c:91:2b:3b:
         49:66:6e:d2:c3:0b:46:12:ae:82:27:fb:74:fb:81:43:b1:86:
         1a:a4:d5:1e:41:41:bc:0a:41:87:34:98:51:a8:d8:c5:03:04:
         21:f3:6c:c9:f9:cb:27:01:ad:c8:c9:70:d9:6c:11:e6:2e:ac:
         9b:00:0f:50:96:0a:05:6c:b2:1f:2c:af:49:e8:a8:98:80:29:
         84:87:90:fd:d1:d4:73:ac:22:06:22:09:cc:53:e2:91:95:40:
         7e:b0:7b:d6:79:5f:fa:3f:e7:57:c2:67:7e:6e:c1:cc:2a:e2:
         4f:00:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:15:28 2026 by rpki-client