Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa
File:                     16782b21-eed6-3014-9710-b3c789353a34.roa (raw, json)
Hash identifier:          sFpJml6IvV1U4SpTr4MrOTFZAFxEabYrTjRtcMX02VQ=
Subject key identifier:   4F:EE:E3:BD:3D:30:1C:BA:E3:89:AF:D8:EF:C9:50:19:96:37:8A:FE
Certificate issuer:       /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial:       010D0C9F4328584D359FA7356C6155ABFFEC78A0
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     397709
IP address blocks:        23.148.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:a7:35:6c:61:55:ab:ff:ec:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=c97ac74c-21a9-4d7d-9a8e-1104a31a7690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:7e:ad:42:78:43:4e:f5:96:29:04:f4:93:
                    33:6e:10:39:92:6d:97:00:72:5e:26:ff:ec:e2:14:
                    c6:ae:f6:62:14:6e:ec:fe:dc:ce:f6:c3:a7:7e:6a:
                    49:c0:d9:77:ca:d5:6f:27:a7:81:ff:db:19:0e:17:
                    9f:6f:19:e9:e6:fa:0b:fb:7d:a4:31:00:6b:b4:03:
                    51:14:97:63:5f:06:eb:f3:de:31:d9:ce:93:d4:51:
                    78:16:a2:83:be:1e:03:a0:2b:4c:97:0a:10:65:c0:
                    7f:8a:f7:55:2a:86:7c:9e:9c:76:b7:1c:69:b1:ba:
                    95:ba:73:9f:79:01:24:19:9f:30:8f:49:82:fc:10:
                    09:dc:5f:00:e9:8f:1d:34:db:81:a7:1c:2e:9c:79:
                    60:4e:5f:c1:ab:94:6b:bd:8f:eb:eb:37:ae:38:76:
                    b9:14:f6:87:cb:fc:9a:d8:82:3d:f4:dc:4c:d9:53:
                    2a:a8:de:ef:e7:d7:0b:c1:c4:c4:e8:b7:c0:4f:39:
                    81:b9:8e:57:40:58:e1:a8:27:11:65:1b:05:97:49:
                    98:2c:16:eb:ff:8e:c9:da:22:24:70:92:0b:68:01:
                    72:4e:79:b5:9f:9a:f7:11:d8:31:5b:64:6f:51:4a:
                    a4:4f:a6:ca:03:6d:ee:f7:5b:0a:ce:12:96:44:0e:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EE:E3:BD:3D:30:1C:BA:E3:89:AF:D8:EF:C9:50:19:96:37:8A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl

            X509v3 Authority Key Identifier:
                keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:0f:b3:7c:06:8a:22:a8:0b:75:8f:44:00:28:b7:d8:e9:
         5a:9d:02:31:34:08:30:0a:79:4f:3f:7a:76:11:78:f0:7a:85:
         68:1f:dc:d3:9b:bf:44:ce:2e:50:94:83:ad:31:19:50:f1:b3:
         f2:56:1e:73:29:ad:9e:0f:fb:43:a4:ee:ac:ce:e0:c6:51:1a:
         cc:68:8e:ae:5e:4f:28:24:a0:6d:a1:94:8b:49:cd:80:e3:66:
         87:04:2a:6c:03:db:9f:1e:db:f3:f6:5c:70:ca:82:59:4c:31:
         70:bd:46:96:a8:05:0d:a5:d8:b7:12:ed:10:e4:ff:44:e6:1a:
         7e:ef:a2:ef:70:27:7f:52:17:ba:a3:b0:6b:a9:ee:88:6e:73:
         07:38:20:5d:69:14:d5:66:b2:97:f8:fb:ac:f6:87:95:bd:be:
         db:3e:b9:4e:07:4c:f7:b9:72:17:67:6d:83:73:38:7b:75:10:
         73:40:40:a8:2e:e5:bd:f5:d0:0e:6a:fc:35:08:65:3b:ae:ba:
         06:90:df:a5:5b:eb:04:d4:57:da:87:de:d4:b0:7e:4b:1a:8a:
         2b:46:1a:88:a1:d7:de:87:42:19:14:bd:d1:44:71:b0:c9:8a:
         cb:8a:07:d9:9c:cb:86:85:74:d4:da:10:82:09:a7:59:c6:30:
         c5:c9:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:23 2026 by rpki-client