Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/6c1b2c6c-aa81-33e3-aa0e-9a5088027b65.roa
File:                     6c1b2c6c-aa81-33e3-aa0e-9a5088027b65.roa (raw, json)
Hash identifier:          9+sgpY54aRQxYFs+8+cZHfqDNpMZ1eK8MryBVTCYZ9k=
Subject key identifier:   79:12:F8:6B:05:12:43:C8:84:C6:DF:AE:18:C4:39:10:D7:97:F4:EE
Certificate issuer:       /CN=69233f52-8a17-4eb0-ae6a-62c861686718
Certificate serial:       010D0C9F4328584D44FA62353FDA7B6A9B486500
Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/6c1b2c6c-aa81-33e3-aa0e-9a5088027b65.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     401937
IP address blocks:        167.253.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:62:35:3f:da:7b:6a:9b:48:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=9c1cb3ab-e929-49b7-ba2e-645ba48c8a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:54:43:3c:16:32:5b:b5:0d:d5:3f:e7:d4:
                    07:32:80:36:87:a6:2c:18:b0:1e:99:53:e0:65:69:
                    0a:1a:92:1c:4a:1e:fb:73:86:03:ba:41:6b:cf:df:
                    7c:58:30:28:da:02:cb:00:69:36:23:68:ac:93:0e:
                    62:ba:15:4a:48:a0:c8:20:64:56:58:97:a5:d2:54:
                    c7:9f:94:a9:44:99:9b:98:bd:b5:35:1e:72:b5:d1:
                    0f:81:de:73:65:1b:e2:76:ee:e3:f5:d6:2c:6c:f8:
                    a5:1b:2a:cf:aa:03:ca:02:6b:cd:a5:60:e3:76:56:
                    13:ad:2a:d9:89:d2:b1:98:35:14:26:65:dd:0e:cf:
                    19:86:5e:df:ac:19:02:c2:d9:f2:92:be:6f:99:dd:
                    a4:97:92:28:6e:2e:99:1c:a4:e2:b0:85:28:41:bc:
                    e0:6a:27:4d:da:87:b9:40:f6:98:ba:11:36:c9:b3:
                    d7:4d:b9:86:a9:73:ba:65:ee:d6:be:ae:8a:92:83:
                    16:68:6d:fb:3f:cc:8c:f2:b4:d3:6a:9b:48:ed:cc:
                    ea:7b:93:e2:4f:67:3c:1b:2f:71:e5:61:cc:fb:57:
                    7a:5b:0c:1e:76:f8:58:ce:38:d2:54:5a:44:02:11:
                    7f:9c:cb:de:1c:2e:fa:29:8f:79:f2:d4:0c:71:32:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:12:F8:6B:05:12:43:C8:84:C6:DF:AE:18:C4:39:10:D7:97:F4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/6c1b2c6c-aa81-33e3-aa0e-9a5088027b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl

            X509v3 Authority Key Identifier:
                keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:4f:35:94:21:ad:0e:f2:1f:15:cc:2f:a5:49:18:f8:9d:
         7f:95:8e:cc:12:93:3c:5c:47:83:f2:92:86:e7:86:27:99:d9:
         eb:9b:88:73:4c:5d:dc:33:62:f6:1a:19:4d:5a:a0:45:b1:58:
         57:22:5f:34:7a:fe:da:e4:bf:59:80:22:e9:ef:05:36:48:d9:
         a1:18:67:b9:c5:48:54:a5:13:c5:73:9d:33:fc:92:1c:1b:65:
         e0:7b:f3:ed:f4:f5:e0:a4:9d:98:fb:14:82:68:c1:13:8d:d5:
         11:f4:b1:8c:f3:4f:45:38:e6:37:e6:b5:4b:cf:65:7a:f6:91:
         5b:51:2b:9e:f6:fd:94:38:1b:51:84:c0:ce:5c:25:26:ee:f1:
         b9:99:15:55:bd:4c:21:82:22:1c:b5:67:0f:93:62:e7:6b:85:
         64:c6:83:f6:82:9e:05:52:d6:96:69:89:e1:c1:82:a3:f1:03:
         e1:b9:85:e0:c4:b7:48:4f:26:12:54:86:5b:13:45:85:66:1e:
         30:8e:97:aa:56:fc:1b:6f:37:d9:b4:9a:95:1b:a5:2d:4c:85:
         85:c1:e3:05:49:32:d8:47:46:ed:37:90:53:46:85:c1:81:34:
         1e:eb:c0:74:12:4a:ea:b5:26:b5:ec:4a:61:6c:f1:82:3d:3a:
         de:6f:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:14 2026 by rpki-client