Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa
File:                     23168d98-beae-3197-8375-14702f665631.roa (raw, json)
Hash identifier:          WQMBccpAisshYzV8yCj0xulDIecWRI+ZiTzg5k9hcig=
Subject key identifier:   A8:F9:F0:1C:BE:26:B1:6F:69:A2:B9:0F:58:FF:48:80:7F:3B:E3:C4
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F4328584D3F64EA4B7446DA0D32AC2FF0
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     3676
IP address blocks:        128.255.0.0/16 maxlen: 24
                          129.255.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:ea:4b:74:46:da:0d:32:ac:2f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=7057f264-6a19-40fe-b357-d02eb87a8803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:b5:16:b4:86:f0:7f:cf:4c:5a:bb:d4:68:
                    b7:53:39:53:19:a7:49:03:fc:18:55:08:1f:86:e2:
                    68:01:75:27:c2:e7:4c:bc:d5:fa:72:ee:d6:14:0a:
                    60:87:df:3c:4e:f4:f0:ab:3b:f8:97:43:73:6e:88:
                    03:33:5e:14:ab:3c:13:f6:5c:54:64:79:9d:a9:d0:
                    6e:e8:15:92:54:ac:34:76:0c:96:87:a4:e6:89:5c:
                    b1:91:18:39:3a:2c:c1:f3:ea:62:df:73:25:7a:a0:
                    75:6f:04:aa:99:05:dc:17:6b:1d:17:fe:8a:20:ba:
                    d1:d7:97:e7:b3:1f:11:e8:fd:0b:33:7b:81:c9:14:
                    a1:a0:64:85:b0:c2:03:90:5c:7f:71:0c:92:e7:c9:
                    2f:b3:37:8f:31:13:b6:89:a4:fa:88:d6:b2:b2:8a:
                    b7:43:7e:a3:35:8e:3e:41:c3:d4:76:5e:10:45:8d:
                    dc:74:3c:0e:a7:4d:0d:8c:16:62:ca:38:1e:3a:aa:
                    00:7c:ff:53:e4:78:70:44:5b:fa:c6:63:3c:6d:87:
                    37:3f:c0:e8:65:1e:c7:f8:14:30:03:75:38:dc:7d:
                    27:a8:73:2a:e2:ef:5b:b5:00:db:b2:74:fd:c2:77:
                    46:57:fc:b7:c1:b4:c4:f6:0e:6d:99:36:99:eb:1d:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F9:F0:1C:BE:26:B1:6F:69:A2:B9:0F:58:FF:48:80:7F:3B:E3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.255.0.0/16
                  129.255.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:23:9c:cc:51:58:36:d2:46:b5:97:5d:b0:1f:9c:09:34:a3:
         fb:c8:2d:0d:28:91:c7:c0:5f:e7:42:4d:cb:03:a2:7b:e2:0f:
         f2:b4:29:fb:ae:f7:39:90:f2:45:9d:50:0b:36:48:15:d7:da:
         fa:32:58:9d:a5:cd:3e:c0:ff:c8:2b:52:85:ef:50:be:e5:bc:
         2a:48:90:38:da:13:bb:f6:09:3d:3d:37:ed:db:25:f8:7d:ee:
         8e:d5:54:14:f8:fb:35:23:c6:a4:e3:ba:19:35:05:98:d0:31:
         8e:bd:70:b5:8b:f6:0c:f0:36:62:5a:71:ff:92:33:cf:e8:b6:
         a8:36:ef:b8:03:a3:bc:a7:5e:23:f6:44:2a:09:ac:b7:fb:95:
         16:32:a7:89:6e:6f:1f:c3:d5:1f:0d:16:90:af:d8:26:7b:92:
         10:a0:b4:a5:f0:25:85:44:57:34:16:bf:e1:b8:8a:98:a3:3f:
         dd:45:8e:7b:f8:19:dc:1a:57:73:88:1b:4e:3c:42:90:97:3c:
         18:90:d4:c3:84:3a:a6:47:93:26:6d:68:93:6e:3d:a8:5d:91:
         3c:d2:14:4f:37:32:0c:93:c6:b7:66:6d:5d:d2:ac:24:75:81:
         fe:42:3f:ce:02:ab:24:e3:4b:40:d9:98:b9:95:70:d8:4e:6f:
         b7:7a:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:17:49 2026 by rpki-client