Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/9a5b3b3a-b5e9-35ee-bcc0-f334a83ffc01.roa
File:                     9a5b3b3a-b5e9-35ee-bcc0-f334a83ffc01.roa (raw, json)
Hash identifier:          NpM3n02y9KW8atoRESc1tvPmuVieNAR0Esw6tEqYOGQ=
Subject key identifier:   04:FC:1F:26:51:1A:79:C8:E1:57:48:8C:0B:EE:33:05:75:45:75:14
Certificate issuer:       /CN=4e4d5dc0-6ca6-42f2-9772-3d414d369a85
Certificate serial:       010D0C9F4328584D40CA405F783DD3E2591B5640
Authority key identifier: 47:08:75:1F:56:29:B8:0B:48:DE:E0:EB:AA:58:58:CF:81:68:FF:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/9a5b3b3a-b5e9-35ee-bcc0-f334a83ffc01.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     30382
IP address blocks:        23.142.32.0/24 maxlen: 24
                          192.67.68.0/24 maxlen: 24
                          198.51.8.0/24 maxlen: 24
                          198.98.14.0/24 maxlen: 24
                          207.229.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:40:5f:78:3d:d3:e2:59:1b:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4d5dc0-6ca6-42f2-9772-3d414d369a85
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=f4c989d4-b553-4bfb-906d-549e30e535a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:01:97:85:00:38:fc:0c:36:f2:6c:d3:1b:
                    c2:75:46:08:41:96:20:df:a6:74:6b:20:d7:b2:55:
                    07:c0:5f:42:e2:2b:ea:ec:d1:86:15:0c:36:57:f2:
                    c6:00:b7:10:58:5f:c4:97:28:45:9e:fc:b7:92:7d:
                    26:59:9f:3e:05:45:58:9b:cd:29:57:0a:3a:6c:42:
                    85:11:38:76:39:b5:12:34:fe:35:51:bd:42:ce:49:
                    99:a1:28:b6:5e:d8:9e:9b:57:a6:9f:16:ca:89:8f:
                    86:de:14:36:1a:c0:09:25:2d:0e:b1:7b:12:5e:a7:
                    b1:63:4c:04:72:67:b6:26:d5:ff:34:d6:37:21:de:
                    e2:93:53:47:4a:61:de:0a:78:e8:c1:cd:96:9c:d6:
                    bf:4b:0d:2b:af:d0:fa:d4:c2:ab:4b:8e:ed:f4:a9:
                    3b:77:11:46:eb:d2:35:a3:80:e8:85:38:f5:b0:33:
                    d0:37:90:94:16:b0:72:ae:ea:4d:4e:ae:e8:f4:b1:
                    eb:2c:a3:4d:35:95:01:e0:28:9b:a8:3c:67:ab:e8:
                    63:2a:b3:23:61:42:59:3a:42:4b:af:98:74:1e:25:
                    68:af:01:81:f1:d8:15:d2:3d:60:3d:51:2b:76:d8:
                    7d:7b:c8:66:57:6c:6e:b1:98:5d:68:b6:a9:67:2d:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FC:1F:26:51:1A:79:C8:E1:57:48:8C:0B:EE:33:05:75:45:75:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/9a5b3b3a-b5e9-35ee-bcc0-f334a83ffc01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.crl

            X509v3 Authority Key Identifier:
                keyid:47:08:75:1F:56:29:B8:0B:48:DE:E0:EB:AA:58:58:CF:81:68:FF:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.32.0/24
                  192.67.68.0/24
                  198.51.8.0/24
                  198.98.14.0/24
                  207.229.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5f:45:40:48:d4:25:8b:5b:96:ef:3f:35:c5:13:97:43:a8:
         a9:03:a7:75:21:3c:d2:b9:e8:70:1c:79:8d:54:eb:6a:99:da:
         e7:10:ac:7c:f0:f7:4f:58:15:f1:66:9a:f1:df:f2:c6:c9:c3:
         9e:17:2e:0a:6d:e4:01:6a:f4:d8:ab:93:9c:84:13:65:6c:0b:
         9d:f8:87:de:42:bb:3a:50:eb:39:d4:9e:1c:15:c4:46:36:14:
         48:53:2d:72:82:06:1c:da:fe:9b:ba:97:c1:28:77:34:e0:5e:
         7e:da:29:41:b3:27:8f:17:f1:9d:43:d1:a7:26:40:98:d8:3e:
         65:47:1f:d7:2d:fc:41:99:d8:5a:5e:e9:3f:39:e9:13:19:4b:
         f2:8b:3e:d4:66:a9:e3:fe:bc:05:a6:ba:e4:a0:b9:6a:96:60:
         f4:64:0c:2b:e1:cf:36:14:51:ad:4b:dd:89:3b:99:e9:fa:9a:
         ab:e7:97:57:8d:cd:80:fb:20:37:71:c6:15:77:67:dd:ee:f5:
         da:60:03:4e:d7:bf:83:cf:2e:0c:2f:ff:32:21:37:41:34:e7:
         c9:4b:6a:9a:8c:cd:85:51:4d:5f:39:c3:81:54:99:bb:c0:f0:
         41:35:ec:7d:93:e7:7d:54:5b:6f:03:f0:0e:0d:d8:7f:7e:3a:
         f0:57:aa:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:10 2026 by rpki-client