Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa
File:                     1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa (raw, json)
Hash identifier:          PcN4dKSdAnPuo69YBqviSBdMQJsDbI4feFbLiLMg+CY=
Subject key identifier:   00:DC:A7:60:C3:7F:65:C9:EB:32:86:2A:4E:C5:04:E0:FB:7A:87:1D
Certificate issuer:       /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
Certificate serial:       010D0C9F4328584D143D4868E1E94A19CC5452C0
Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     211392
IP address blocks:        23.170.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:48:68:e1:e9:4a:19:cc:54:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=67e90d6a-654a-449f-9aba-5f8a0098c3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:e2:98:ad:25:18:28:68:59:49:53:ea:25:
                    72:0f:b8:28:cd:60:4f:a3:4e:33:02:7a:d4:3b:d9:
                    78:05:aa:8a:6c:41:57:7e:0d:64:50:3a:b0:63:40:
                    ee:f5:21:7e:71:de:f9:58:03:76:58:52:a7:0c:89:
                    74:07:76:4c:18:03:10:3b:92:29:f6:04:2c:d6:51:
                    31:ef:12:a5:60:f6:66:1f:90:12:90:e4:f5:41:67:
                    21:64:34:98:a5:64:a8:dc:06:04:7e:13:cc:9b:d7:
                    21:54:a0:00:53:c7:05:cf:cb:74:33:aa:7e:ee:18:
                    c6:3c:99:5d:eb:e1:35:52:6d:7b:58:a1:28:c4:f2:
                    0d:4b:58:7c:c3:dc:74:68:3c:f4:9d:4a:5c:0c:02:
                    54:9b:fe:4f:f8:98:46:31:a2:79:fa:50:40:30:86:
                    75:7b:a5:1f:cc:a2:59:23:e9:b3:00:d5:cd:52:bc:
                    dc:53:ff:9e:c8:1c:14:9d:44:a8:d3:b8:6d:f6:6c:
                    75:ce:0d:2b:1e:5f:11:bd:f7:bc:f9:38:e7:8a:50:
                    e0:ae:c1:12:dc:41:8c:b7:06:43:be:da:31:44:43:
                    f8:9e:53:64:e8:cc:25:7c:bc:96:fc:70:05:14:ef:
                    d7:53:70:b9:1b:2c:29:50:5f:ad:ae:5d:23:dc:0b:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DC:A7:60:C3:7F:65:C9:EB:32:86:2A:4E:C5:04:E0:FB:7A:87:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl

            X509v3 Authority Key Identifier:
                keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:41:05:45:f6:6f:2a:09:9e:c9:9a:e2:f9:ac:86:16:3a:96:
         6d:29:2b:45:cf:da:aa:41:32:6b:5f:92:89:0d:85:08:c0:a0:
         03:b6:48:72:f6:e7:ca:ed:7b:fc:0a:1a:f8:c7:a9:96:69:f3:
         7d:3f:0c:8c:1e:f2:e1:58:4c:b2:53:a4:16:d1:03:2c:ac:b5:
         81:e4:16:fa:31:48:bf:ca:cf:00:79:12:98:3a:6f:61:13:dd:
         3b:76:20:33:b4:63:23:23:be:99:02:ed:69:0d:8c:e7:e7:4a:
         41:3e:e4:c1:02:6b:e5:7e:22:a6:f7:12:5d:a4:4d:4a:fc:96:
         41:3c:b9:a5:c3:5d:ce:70:f7:23:16:f9:8e:98:4c:1a:81:12:
         b9:79:75:3a:05:8f:f2:7e:34:da:40:b0:30:19:c0:89:a3:92:
         69:41:4a:96:fb:07:d3:1e:d5:93:d7:bc:39:e5:f2:b8:74:a4:
         99:e8:47:4c:ec:6d:7b:4d:23:82:b2:a0:ff:10:a1:4b:b5:7f:
         40:b5:5b:55:68:99:05:72:1d:a8:5b:f0:de:3c:45:28:f0:1f:
         5a:b2:6a:94:b1:0b:8e:3a:2e:37:3c:88:19:a6:2c:75:13:9c:
         ef:4c:03:2c:cd:e2:17:e8:bd:97:a2:6c:a2:18:cd:4f:07:3d:
         3d:aa:3c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:24:38 2026 by rpki-client