Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa
File:                     188915cb-79c3-3ca3-89d2-581c69426afb.roa (raw, json)
Hash identifier:          8tH0M6blujKVYdsydzRPJwTF/pVoYLDOSAuSk4Gf0Ic=
Subject key identifier:   69:C7:A7:D0:6F:F7:53:65:BC:4F:63:3F:B7:1F:AD:3D:03:8F:DD:6C
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F4328584D2BDA211B876B7A89A900A100
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     197547
IP address blocks:        23.158.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:21:1b:87:6b:7a:89:a9:00:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=17767f9b-a33d-4959-a8d0-d7dee4e7d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:6c:bd:f8:ec:fd:36:c4:0b:13:bb:2e:94:
                    86:c6:87:e9:1a:a5:fc:e9:3b:51:43:b9:7a:bc:36:
                    cc:55:b4:02:2f:2e:42:40:89:6e:13:6b:94:cf:cb:
                    a8:69:af:5a:1f:1a:66:80:c1:ce:b7:c7:9c:74:54:
                    68:6a:5d:4f:15:0f:6f:9d:fe:78:77:0a:68:d9:af:
                    c3:41:8b:5c:d4:9d:08:56:aa:91:c8:dc:fe:c2:98:
                    de:26:45:73:37:ab:c2:61:9b:1a:f4:cc:b4:36:3e:
                    89:bc:2b:f8:50:77:07:f0:83:0d:8d:6a:ba:8c:03:
                    02:2b:36:ae:24:fe:8d:f3:ef:6f:c3:b8:85:03:86:
                    75:ed:fd:07:73:ff:00:0c:98:a1:f0:ac:f1:02:db:
                    f5:cf:34:9a:62:c4:da:93:9d:ad:2c:9e:13:4d:8b:
                    1c:f6:b3:cf:c8:b8:a4:8b:e3:eb:d5:6b:31:92:c6:
                    27:34:e3:58:af:ed:84:51:c2:5e:19:7e:b6:12:7c:
                    28:25:bf:b5:dc:48:7c:d7:78:a3:47:68:30:a2:4d:
                    42:12:58:3d:7b:4d:65:0e:14:85:a9:82:53:35:67:
                    4d:cb:18:d7:d1:df:3f:9a:e1:79:43:e9:2a:42:a0:
                    08:8d:aa:cf:f4:56:af:c7:0b:06:df:a3:6a:a3:fc:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C7:A7:D0:6F:F7:53:65:BC:4F:63:3F:B7:1F:AD:3D:03:8F:DD:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/188915cb-79c3-3ca3-89d2-581c69426afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:f7:40:c6:f1:97:af:23:c4:f1:94:ca:01:fa:75:7f:de:
         8f:78:94:8b:8b:9f:67:7d:75:92:60:a5:7a:73:aa:77:c9:a1:
         99:2b:5e:69:f0:19:a5:9c:4a:13:80:a9:7e:51:4a:5f:3c:4a:
         32:5e:9b:d8:ac:f7:bd:0a:c0:6e:b1:3d:a2:05:67:96:49:4e:
         b6:d4:f5:61:2c:7e:c1:4e:b2:03:ad:fa:94:fd:c8:a6:cc:20:
         c9:a3:03:e2:1e:0a:13:f9:d5:f0:ae:7b:39:3f:da:1c:b7:d5:
         2f:ad:3e:e9:87:e6:6a:8b:3b:2d:ca:c9:54:70:a3:76:a8:a2:
         c8:46:2d:04:02:09:45:07:87:d6:89:a4:98:eb:77:d5:6f:37:
         98:62:ad:c3:53:b9:f4:a0:31:da:a0:81:49:53:dc:9f:4b:70:
         9a:9d:38:d1:22:33:cd:d4:72:8e:91:6c:f2:a2:be:60:9b:d5:
         e5:bb:fb:a8:85:54:84:82:5f:0a:69:c2:4d:73:a2:c6:ca:2a:
         c9:51:60:1c:5f:bc:63:f3:fc:6c:e2:80:34:8e:63:90:09:4e:
         a6:0e:f2:45:f9:a6:32:22:e8:e4:2d:47:37:f8:92:95:ce:96:
         c6:b6:55:dd:1e:44:ea:cc:cd:a8:ea:e0:71:34:84:ff:1e:89:
         73:cc:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:46 2026 by rpki-client