Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bebd827d-d876-3672-acef-9f2180991226.roa
File:                     bebd827d-d876-3672-acef-9f2180991226.roa (raw, json)
Hash identifier:          79kdEXiGfukeMTaDBSey0fWoYswTXuAcleoz2UXsxOw=
Subject key identifier:   C2:C0:8A:E0:8E:B6:E6:1B:EC:5E:34:D4:88:46:7E:03:AF:77:E0:09
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D44FA739C38EB2018F62E3580
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bebd827d-d876-3672-acef-9f2180991226.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        173.230.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:73:9c:38:eb:20:18:f6:2e:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=58748a2d-f8f6-410b-8a67-7a3bb2bdd0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:a8:b6:e6:3f:e0:88:08:bc:79:43:8f:63:
                    74:9c:6e:01:22:79:09:e7:89:f1:d3:35:30:c6:01:
                    61:38:97:53:58:8c:03:d5:4f:4b:36:c4:1f:18:6a:
                    62:74:b9:42:92:56:fb:e4:49:6f:fd:bf:36:85:f3:
                    5a:88:f2:7f:38:87:6c:3b:68:7e:9c:51:ec:d9:dc:
                    7a:23:c8:4b:d8:f3:2e:29:79:dc:60:dc:de:4c:f1:
                    5a:91:e7:93:89:a4:f7:d4:aa:62:6d:24:32:5e:9c:
                    14:30:2e:f3:41:bc:73:3c:04:ac:30:9c:5c:bd:84:
                    6a:62:79:d5:98:2f:32:5f:66:60:0b:42:31:fd:56:
                    ba:ef:91:af:d6:2d:1c:64:7b:5d:d6:09:58:e9:d8:
                    2b:0c:68:ac:9e:3f:84:2d:48:fb:e5:40:88:55:1c:
                    86:7f:35:2d:8a:99:6a:7c:4a:0e:5d:c4:75:cf:07:
                    a4:d2:e9:f4:8a:10:d2:17:5c:bd:c7:88:b1:55:b5:
                    18:9e:c9:c6:c6:0e:df:4d:fa:f1:52:d1:fd:cb:20:
                    be:e4:8c:ce:8b:39:6e:5f:74:82:1b:69:9e:36:d2:
                    2f:f5:f9:bf:9d:d2:bd:36:f1:4e:c2:52:de:6d:9c:
                    db:11:5e:f6:ae:4d:92:a0:39:78:ef:d6:95:b6:fb:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C0:8A:E0:8E:B6:E6:1B:EC:5E:34:D4:88:46:7E:03:AF:77:E0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bebd827d-d876-3672-acef-9f2180991226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:d9:d4:51:8b:31:7e:d2:23:9a:92:08:14:06:ff:2e:3c:
         7d:23:42:13:73:33:e1:86:f6:e2:51:40:32:b2:26:14:7d:1c:
         8a:96:ac:8b:cb:66:a9:7b:0e:da:94:52:25:66:08:c4:80:82:
         86:b3:04:4a:5c:f4:72:50:fd:01:08:e3:98:d5:64:49:73:22:
         6c:b5:91:c2:e4:73:fe:4a:ac:73:27:28:ec:57:08:c6:d3:af:
         05:5d:dd:85:a9:10:5e:bd:aa:b7:5b:3d:08:a1:29:8c:94:45:
         6e:9c:1c:94:61:dd:79:00:dc:7d:5b:90:ac:d9:d3:e4:b7:17:
         7b:43:c9:dc:f9:93:54:07:5c:14:12:eb:69:01:77:49:59:ae:
         9c:93:6c:01:de:eb:53:99:a7:5b:7d:ec:78:34:23:62:a8:ff:
         34:8c:9c:09:48:52:5a:2d:d1:d7:09:c6:17:fc:fa:46:56:91:
         7d:d8:72:95:56:8b:ea:90:48:2a:c5:9e:92:be:84:0f:cc:cf:
         08:ad:fd:d0:f9:17:44:73:ec:e8:cd:15:f8:a3:ac:b0:eb:b9:
         11:94:c3:57:d8:55:34:fd:43:27:e3:1f:1f:dd:3b:43:af:4a:
         ae:a8:61:49:fb:c7:bb:f0:83:5f:5a:57:c7:0e:64:33:ee:bd:
         90:5d:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:53 2026 by rpki-client