Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa
File:                     9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa (raw, json)
Hash identifier:          v/J6YICJmHiGIvrrp3wCEbhHuYLYlHw8ocMsB5DQE2w=
Subject key identifier:   69:42:8A:3B:88:A5:2E:A0:34:95:CE:35:F1:C6:94:27:0A:D0:59:C7
Certificate issuer:       /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
Certificate serial:       010D0C9F4328584D237A0ECF12631EAB81092100
Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     395494
IP address blocks:        23.139.104.0/24 maxlen: 24
                          72.19.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:0e:cf:12:63:1e:ab:81:09:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=caf5753c-5d55-493a-a7e1-8c54ffaa369a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:8f:43:86:32:81:65:6e:67:4d:11:ab:d9:
                    e6:0f:98:70:54:41:f7:59:ca:c6:3a:23:28:b5:75:
                    1b:d8:2e:9a:c7:8c:0d:6e:cc:84:f6:55:dd:a7:2d:
                    ba:f3:d2:56:5b:b5:64:a0:6a:58:d2:03:ac:f8:d7:
                    ef:41:05:55:c5:b0:f8:28:5c:0e:ea:93:15:4e:8b:
                    93:f7:f1:4c:64:e5:90:20:20:71:71:cb:c0:6a:c0:
                    3b:0e:91:91:c0:3b:6c:e8:c6:2e:11:09:0c:3b:cf:
                    e8:4f:a1:61:b7:ca:fa:35:a4:a9:8d:02:58:74:2d:
                    4f:b2:44:eb:40:b4:38:fd:a3:1e:dc:9b:b7:07:24:
                    bb:f7:60:b7:21:0c:0e:60:a2:26:f3:4c:30:cc:7f:
                    7a:50:74:f7:84:6c:b4:34:69:1a:84:cd:02:de:01:
                    bb:cf:85:30:ea:9f:ca:71:70:d4:c3:20:1d:28:5a:
                    7b:5e:7f:ff:73:26:58:a8:89:9e:3d:19:b7:98:11:
                    6f:85:09:5f:97:61:b2:3f:f4:d1:cc:27:c6:3d:67:
                    32:76:8f:81:52:8b:e7:7d:08:7f:0a:97:b4:fe:73:
                    1a:a7:a7:b9:17:a2:2b:04:8b:8d:d8:8f:8d:0c:49:
                    f1:4e:2f:59:ed:4b:6d:91:2f:89:06:6d:69:27:84:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:42:8A:3B:88:A5:2E:A0:34:95:CE:35:F1:C6:94:27:0A:D0:59:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl

            X509v3 Authority Key Identifier:
                keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.104.0/24
                  72.19.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a8:ac:3f:37:dd:f3:ad:63:a9:28:38:55:fc:83:c2:aa:75:
         e0:05:19:88:88:f8:f6:6f:98:68:88:99:90:52:fe:fb:b5:7c:
         40:78:3c:9c:88:f1:1b:90:43:ff:1a:10:65:b7:49:36:55:37:
         2f:3b:87:0a:92:47:1d:90:1d:ee:7b:f9:b9:7f:ba:17:4d:f2:
         69:21:6e:e3:dc:3c:18:3c:84:39:a7:ef:5f:57:c8:7e:3a:18:
         e3:f5:53:6d:9e:c2:64:00:23:37:cb:62:4c:47:c8:6d:ab:56:
         23:b9:9c:c6:73:33:85:f4:e9:50:a8:3a:3d:4c:a6:23:72:6f:
         c7:f9:1c:77:69:f9:b6:a0:f7:31:0b:5d:b9:c0:94:b8:ee:7e:
         b4:2c:f9:7a:81:01:14:79:b7:68:9d:50:bd:09:2a:07:1f:46:
         94:a6:7e:d6:a6:81:01:cd:64:17:26:0a:36:af:18:4c:75:22:
         73:bd:c3:c2:1c:cd:22:75:c5:3f:94:d4:3f:29:14:0f:7b:f9:
         85:b8:6c:70:c6:88:53:b7:60:62:e2:d1:e0:6e:e2:ca:6b:27:
         e3:28:3a:39:14:29:2f:73:e4:ef:70:c9:b9:8b:7a:7a:14:44:
         45:82:a8:b6:40:94:d7:ad:22:1f:9a:87:11:88:e4:2d:27:f2:
         1b:24:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:18 2026 by rpki-client