Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8c2cb16c-5460-30dd-9178-3223db431c9e.roa
File:                     8c2cb16c-5460-30dd-9178-3223db431c9e.roa (raw, json)
Hash identifier:          MzpXX8AKWZG24W4UgAG10XOus/uKyy5wvKDeS6dr1e4=
Subject key identifier:   EA:DE:48:88:67:6A:1F:65:0C:E8:75:5C:A9:7C:F1:11:14:69:74:4D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D44FA6F4238B3F33DAE87C800
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8c2cb16c-5460-30dd-9178-3223db431c9e.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        173.230.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:6f:42:38:b3:f3:3d:ae:87:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=00217128-0dab-4e2d-915f-baceb4473a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:e0:b2:f1:14:b9:b9:61:b6:f1:5b:0a:24:
                    32:9d:c2:2f:9b:c1:c7:9b:91:d8:74:51:67:9b:3d:
                    7c:c9:44:4c:b7:74:b8:a6:cc:d3:84:53:44:c0:7e:
                    b3:f2:18:95:81:3a:d8:d5:43:cc:b8:4d:77:56:38:
                    e2:2c:77:cd:c5:6d:23:eb:61:ed:11:fa:74:13:bd:
                    5e:e5:8b:ec:ca:f5:97:80:be:b7:a9:cb:cc:57:bf:
                    f7:33:ed:f5:83:89:aa:de:1f:16:c6:8e:1b:32:00:
                    84:ab:2d:cf:cb:b2:1c:cc:0e:ec:70:c4:dd:48:c1:
                    52:16:ab:27:a2:01:16:ca:61:6c:5b:c3:d3:d0:fe:
                    bd:38:2a:2d:a8:b5:03:01:3e:90:eb:c3:f3:43:44:
                    98:ab:45:e8:de:72:b2:1f:79:9e:99:50:1f:45:ca:
                    c4:37:39:f9:5c:a2:96:70:a2:4d:25:42:bc:2c:e1:
                    03:8c:0d:0f:db:b4:e4:31:73:a4:56:8c:68:2a:81:
                    2f:cb:e4:5a:79:39:dd:cb:89:70:a2:f9:00:92:f6:
                    7e:f7:a2:a2:85:29:70:85:9a:09:06:ec:20:31:d7:
                    7c:dc:f3:4c:ce:8f:83:a6:83:46:e0:fb:f1:01:09:
                    f4:9b:07:d6:8f:5d:6a:ba:ba:c8:99:39:97:77:20:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DE:48:88:67:6A:1F:65:0C:E8:75:5C:A9:7C:F1:11:14:69:74:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8c2cb16c-5460-30dd-9178-3223db431c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:42:e1:54:a6:ca:e9:eb:08:66:a4:cb:0e:7c:82:b7:b6:
         d3:45:b8:be:73:6f:a1:71:b3:2c:99:b5:aa:1f:6c:d6:9c:8b:
         48:0b:a3:20:08:0e:17:97:5b:82:9d:ff:1a:86:bc:d0:42:87:
         de:93:82:be:10:e4:3e:5a:65:7a:fe:45:17:d3:70:6c:91:88:
         d3:22:5e:4b:85:9e:98:a8:34:2a:79:1a:70:50:52:97:0a:02:
         35:bc:b2:85:19:d5:a0:9c:15:f3:40:08:fe:cd:03:cc:39:d8:
         01:b2:30:1f:f2:3f:2c:7a:f2:6f:2c:b0:86:78:e4:27:5f:8d:
         58:82:e1:7a:ea:87:5e:21:3e:af:aa:e5:ab:8b:ef:7d:47:c1:
         cc:71:58:d9:93:3c:49:6f:c6:cb:6a:01:66:f5:89:b2:7e:74:
         66:9a:94:34:32:bb:35:34:48:81:e5:a6:b3:54:02:c0:e5:ca:
         db:14:2b:99:f4:19:36:dd:8a:65:c7:cd:64:93:30:65:47:38:
         1a:9c:46:4e:84:44:71:de:b8:07:93:f8:6a:4a:b2:a0:38:11:
         f1:76:f0:1a:32:55:7e:c3:47:a3:db:bd:fe:48:ea:41:d0:77:
         85:f3:5d:e3:b8:35:f8:94:aa:e7:ab:91:c1:4c:04:fe:e7:e9:
         d3:05:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:27 2026 by rpki-client