Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa
File:                     6758e236-250b-3365-a146-9e1a9f1e2a79.roa (raw, json)
Hash identifier:          mGVP/W0TSnymMVMHUG90LZdjSxpC4Xiu7wpQYEIRSZ4=
Subject key identifier:   CA:B5:76:7D:52:C0:33:C5:12:BB:C0:1B:9E:C7:9D:C6:0E:D5:CA:1D
Certificate issuer:       /CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c
Certificate serial:       010D0C9F4328584D2BDA1EDAB98432C50C939580
Authority key identifier: 0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     25819
IP address blocks:        23.181.112.0/24 maxlen: 24
                          2602:fc6d::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1e:da:b9:84:32:c5:0c:93:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=8e929e89-7fe7-4ada-b82a-a1489cd9b64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:81:d3:87:f3:ec:b1:64:2e:b7:df:60:de:
                    a1:bb:8d:59:9b:cd:b8:02:23:b9:6d:d8:f2:8f:ac:
                    39:63:4f:34:72:5d:04:df:c5:1d:37:4f:dd:b1:64:
                    e9:38:97:38:60:fa:5d:c6:84:f0:e5:b2:35:eb:62:
                    ca:88:d7:10:06:d9:c9:9e:9d:a7:ee:04:4f:5a:96:
                    cd:98:ac:64:b3:ce:6c:56:1e:ca:5a:16:d8:62:66:
                    2f:81:66:74:cf:5d:6f:9c:88:01:f7:83:cb:71:ff:
                    f0:32:44:06:49:46:ca:e2:12:88:29:c4:53:7b:1f:
                    39:1f:5f:0d:08:22:9a:bd:ca:2e:38:3f:9f:9c:5b:
                    68:e9:28:5e:8f:35:ee:c5:16:d4:fc:56:a6:27:42:
                    5d:e3:45:75:35:33:60:e3:81:b8:25:09:33:44:61:
                    ff:92:7f:fc:99:89:ca:a7:da:49:03:9c:92:5e:e2:
                    57:39:13:9e:c2:1b:f7:6c:fb:2f:46:cb:c6:95:5c:
                    7c:0e:89:c5:f0:e8:2e:33:26:8b:54:fb:83:4a:3f:
                    ba:4c:dd:ef:94:bc:0e:71:c0:01:2b:89:d8:bb:12:
                    60:1a:3e:b3:8e:f3:32:c0:fb:07:a3:88:c2:56:76:
                    18:0d:bc:cb:7c:3f:48:e8:2b:02:8a:04:ea:af:1c:
                    0c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B5:76:7D:52:C0:33:C5:12:BB:C0:1B:9E:C7:9D:C6:0E:D5:CA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl

            X509v3 Authority Key Identifier:
                keyid:0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.112.0/24
                IPv6:
                  2602:fc6d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:cf:f1:24:ae:4f:cc:24:fb:0a:cb:f6:07:60:c9:02:1b:
         b8:ba:13:ed:03:55:82:56:22:6d:33:34:0f:02:d3:c3:e8:42:
         53:de:7d:44:79:e1:3d:19:73:b8:c6:fb:1e:73:95:d4:46:b5:
         82:02:f3:15:ff:d2:6b:d1:97:81:a3:06:45:e2:77:d6:07:96:
         f6:82:23:c2:e3:dd:51:06:bc:0e:23:98:38:3c:33:70:55:27:
         4b:50:0c:2f:2f:5a:e6:2b:06:f9:82:e2:94:3d:7d:31:72:b6:
         11:43:53:2c:9f:c9:38:54:e9:38:7c:81:1f:ba:87:e8:23:c2:
         62:41:7d:b2:da:63:10:73:03:7a:e2:36:c2:38:3a:e0:5b:77:
         0f:16:51:57:13:cf:d4:0d:10:02:83:e1:b0:03:6e:70:41:88:
         d8:fc:07:69:ab:ee:65:d7:7d:0e:8a:1e:c5:6a:64:a7:f9:a3:
         7a:ac:50:3a:e0:13:68:ba:1f:dd:8f:59:d2:f2:25:b5:50:54:
         25:6f:50:d4:75:00:96:85:65:47:db:db:33:8d:69:b2:2b:da:
         2e:e7:78:d7:57:71:df:d6:db:71:9b:63:44:5d:b1:5f:9c:bc:
         1e:24:74:d9:42:d1:f5:b8:b3:cc:5f:f6:b8:0b:5f:02:84:73:
         11:cb:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:40 2026 by rpki-client