Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/16ac4549-fc50-3b0d-91a8-d781d85c987c.roa
File:                     16ac4549-fc50-3b0d-91a8-d781d85c987c.roa (raw, json)
Hash identifier:          PNmhGMRj4QoPeNUdewTU9nZE2DESDY/00BPKQ/VohpE=
Subject key identifier:   6F:D4:CB:70:F7:A4:20:3B:0E:36:07:20:F1:B0:22:B3:28:2F:7B:DC
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584D24DFA34FAE068ECD0326F800
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/16ac4549-fc50-3b0d-91a8-d781d85c987c.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     11870
IP address blocks:        167.23.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:a3:4f:ae:06:8e:cd:03:26:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=6f8df3c4-e1bc-4dcc-8a68-be6f0b138341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:75:61:ee:32:77:a5:a0:e1:dd:d0:db:ff:
                    95:d8:d7:80:87:1a:3c:b4:21:04:b4:15:e7:26:c3:
                    c4:9a:83:0c:42:09:44:20:7a:a1:d5:e7:dc:ba:ac:
                    c6:38:e4:8e:06:37:db:76:b2:f8:74:06:b1:f7:7f:
                    9d:1b:b3:7f:92:71:8f:86:e1:15:7f:1b:01:5f:da:
                    07:7a:09:e3:ed:13:9e:85:61:0e:5c:7e:9b:43:d8:
                    2f:52:a5:b9:e5:ef:4e:4f:d0:4f:14:ee:ae:f2:71:
                    69:05:1b:a3:1e:7b:ae:92:66:ff:58:ee:c8:3f:b0:
                    de:40:86:70:cc:54:83:47:3e:a4:6d:ba:b9:92:29:
                    1f:b9:ad:07:f8:c7:09:86:bd:c4:a2:0c:57:28:17:
                    79:e2:d8:0c:82:0d:38:c5:6c:27:74:05:53:95:e0:
                    8d:44:0a:f7:88:c6:18:c5:6d:31:b5:88:50:42:00:
                    f3:6d:0f:cf:b1:59:3e:b7:05:88:f4:f8:9b:3a:1a:
                    15:8a:bf:9f:58:dc:f2:5b:85:ef:61:5c:69:3e:e9:
                    f5:5f:0f:b2:41:5b:ff:65:bf:a3:a4:c5:93:5b:f6:
                    1e:97:58:ff:c7:57:da:57:84:4c:66:6a:74:28:b6:
                    14:c6:01:60:e1:84:72:ff:72:c6:f7:7d:50:d2:f4:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D4:CB:70:F7:A4:20:3B:0E:36:07:20:F1:B0:22:B3:28:2F:7B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/16ac4549-fc50-3b0d-91a8-d781d85c987c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9e:12:51:cb:41:f0:4a:51:15:82:9b:7d:15:06:dd:1b:e6:
         35:54:6b:a5:c3:f2:40:ae:80:97:af:86:12:90:90:07:50:55:
         05:28:04:ea:0c:27:4a:66:3a:5e:f8:ad:f4:8c:01:37:90:e6:
         a5:4b:10:1f:be:ae:78:2a:aa:99:e7:31:5b:07:35:76:2c:8c:
         cc:0b:14:f4:2a:e0:df:a6:fa:9d:79:64:95:37:8f:65:69:c9:
         4a:10:06:54:7e:22:10:0c:8a:33:a4:b1:0f:10:de:d6:b5:a8:
         4d:8d:30:69:08:1a:83:25:37:59:ac:96:1c:12:33:10:41:76:
         32:c8:1c:cd:6d:97:14:63:85:08:b7:e3:9f:67:a6:54:d5:2a:
         75:7f:1a:ff:16:27:a8:a7:5e:28:b4:d0:c2:ca:d4:db:7b:4b:
         04:09:d7:98:57:a6:c2:78:02:51:b6:82:bb:de:24:30:c8:07:
         4d:fe:75:92:bd:ce:21:5c:3c:c4:5a:47:16:c8:28:33:42:0a:
         c8:35:5a:9b:d2:0e:90:f4:19:35:ad:35:7f:ec:40:6a:c3:b0:
         d6:34:f6:ad:6d:0e:a7:37:f3:ea:39:8f:9d:ec:41:87:d5:5c:
         e4:61:eb:9c:22:49:c8:d7:13:ee:90:1c:c5:d4:de:46:9a:7f:
         8d:54:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:11:17 2026 by rpki-client