Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa
File:                     7bc53e15-f637-3483-afc1-2123922938d5.roa (raw, json)
Hash identifier:          BeOOCimFft0x4CcLIcBq/0lnPtD0678cdahpO8srjL4=
Subject key identifier:   EA:08:2F:F9:BA:8E:28:96:76:1A:65:B9:6C:90:50:7F:79:75:BB:FA
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584D492A62D3156EB46BDFEF3800
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     62707
IP address blocks:        23.166.224.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:62:d3:15:6e:b4:6b:df:ef:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=27bb2490-47ad-4b7f-a84f-0a46d5be5efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:f1:60:31:71:5c:20:23:d1:df:ad:07:79:
                    22:00:9e:8e:cb:e8:4f:bc:bd:f5:40:29:4d:14:23:
                    b4:50:21:bb:79:dc:8a:c9:14:54:59:1c:3b:61:5d:
                    1e:23:8f:61:d1:8d:77:f2:47:98:92:18:82:35:fa:
                    87:39:71:70:61:fd:cc:39:88:04:3c:18:52:ba:ee:
                    c7:cd:ea:67:44:25:8d:b0:af:5c:29:03:3b:b6:37:
                    7f:28:36:2a:f7:55:bc:d9:57:88:be:00:0b:34:20:
                    cc:63:66:68:26:74:95:9f:2e:d6:03:54:b0:21:5c:
                    c6:0f:88:36:d3:e2:e2:8a:94:e9:9a:4f:b0:20:7f:
                    a0:24:94:89:b2:da:81:c1:1f:85:b0:1e:51:f0:c0:
                    aa:57:d5:db:30:21:fd:03:11:e6:f6:33:4c:fa:fd:
                    fe:68:ac:08:65:c6:60:53:83:d3:ec:71:bc:88:44:
                    ea:e0:a9:8e:fd:55:0a:dd:ea:a1:fc:d8:15:16:cd:
                    df:70:4e:82:fe:05:90:25:e4:dc:c7:10:34:1f:a4:
                    92:b8:f3:08:84:cb:83:72:6c:17:b8:4e:1e:45:c4:
                    68:26:f6:c1:d1:e0:7f:6c:86:3c:c7:5d:02:14:16:
                    91:d5:38:ee:a2:a0:25:bf:c2:72:8e:ce:87:ca:b9:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:08:2F:F9:BA:8E:28:96:76:1A:65:B9:6C:90:50:7F:79:75:BB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:c2:c8:2a:61:31:c3:13:ee:a0:b2:5f:1a:25:76:33:d5:
         1f:a4:b8:13:e4:61:2e:e6:71:0c:15:3e:92:5a:e7:8c:35:f2:
         56:c5:2e:42:c0:c6:bb:73:82:15:b7:68:b3:96:98:8c:d8:7c:
         0c:49:7b:6a:fb:bc:4c:b2:9b:fd:bc:d5:d0:8e:59:c8:97:70:
         c2:2a:d8:71:52:5d:0d:3a:db:aa:1d:8b:2a:5e:78:2c:c5:5c:
         54:72:47:1b:01:f7:dd:47:aa:ae:83:2a:97:f4:52:ab:d7:2b:
         91:47:ec:90:64:03:94:a5:01:70:62:ae:bf:76:6d:87:c5:ff:
         c3:ee:2a:00:78:49:a7:79:37:f5:5a:6e:5b:6c:89:c2:6a:86:
         d0:af:6a:20:09:81:79:bb:f7:3c:31:12:3e:5a:e7:bb:29:c2:
         e5:87:73:14:a2:14:53:6d:fd:20:98:e0:4f:16:ae:0b:0d:7c:
         73:5f:92:b8:d2:32:5a:a7:4d:05:3e:5e:95:39:c3:44:c9:e2:
         ae:0f:2f:67:3a:6b:c7:aa:cf:4d:35:9c:44:c0:2c:ba:43:4d:
         8c:88:dc:2c:96:34:c8:03:3e:c6:c3:5f:d2:e6:0a:8a:fb:25:
         8e:5f:9c:83:3b:f3:7c:b9:8d:ab:c3:da:98:dd:bb:12:3f:36:
         d7:c6:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:14 2026 by rpki-client