Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e65b38-1478-3e15-bcc6-d9c14bef2464.roa
File:                     23e65b38-1478-3e15-bcc6-d9c14bef2464.roa (raw, json)
Hash identifier:          D6xC1JkbYYXJ9yuQgAy0NYJrVQUWjA//HYZ1PCffskQ=
Subject key identifier:   4A:81:E2:FE:DC:36:03:2F:F2:88:0B:D5:28:C8:12:C8:82:3A:ED:75
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D892FC907E9005434D080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e65b38-1478-3e15-bcc6-d9c14bef2464.roa
Signing time:             Fri 06 Mar 2026 15:38:27 +0000
ROA not before:           Fri 06 Mar 2026 15:38:27 +0000
ROA not after:            Thu 04 Jun 2026 14:38:27 +0000
asID:                     81
IP address blocks:        192.101.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:89:2f:c9:07:e9:00:54:34:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:27 2026 GMT
            Not After : Jun  4 14:38:27 2026 GMT
        Subject: CN=b9cdd936-dc5e-4d8f-9f2d-778046299919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:35:ab:64:42:bb:a6:66:c4:32:e2:54:ca:
                    4f:e2:47:38:22:e9:dc:c5:9e:18:dd:b3:87:41:04:
                    d4:77:19:dc:c1:1b:f3:6f:23:0b:5f:fb:4e:1f:2b:
                    e2:96:55:db:21:b1:1a:fb:d8:42:cc:ba:7d:60:ab:
                    04:16:a3:92:b4:7d:50:98:d3:03:98:3b:3e:86:b7:
                    7a:6e:06:fc:25:9b:18:24:cb:77:b8:97:78:0b:83:
                    1b:5c:ff:cf:94:04:4a:de:c3:35:b1:4d:17:3e:b5:
                    55:48:00:c4:b6:53:37:48:ad:47:7f:e8:1f:53:1d:
                    d5:77:02:67:f0:32:c1:ec:8e:81:bc:5c:3b:70:ca:
                    07:27:df:7d:bc:17:d2:76:3b:40:e4:66:9e:fa:c5:
                    31:ad:9e:7c:96:d6:55:f6:d1:e7:dc:31:39:1e:98:
                    77:8c:63:66:df:6b:61:2a:14:9e:f6:c8:a7:cd:4b:
                    69:9d:c5:c4:04:86:ed:ef:53:db:19:3d:92:57:28:
                    7d:40:bd:f2:16:47:d0:27:e0:32:08:1f:34:42:ff:
                    aa:d5:75:0e:3d:a3:f8:44:00:d8:71:19:22:f3:10:
                    20:c5:0b:b1:3d:f1:c2:75:99:65:19:f1:c0:f8:db:
                    80:9c:e1:c3:2f:b0:65:ad:07:9d:85:75:4a:80:c4:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:81:E2:FE:DC:36:03:2F:F2:88:0B:D5:28:C8:12:C8:82:3A:ED:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e65b38-1478-3e15-bcc6-d9c14bef2464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:21:92:90:ec:20:ba:ef:7c:1d:72:e2:04:dd:fa:2f:06:
         c6:98:b8:7d:bc:c1:f2:a4:a9:9b:fc:b9:d3:63:fb:49:d2:bd:
         dd:92:73:73:76:58:06:32:f5:dd:ff:24:05:7f:bb:b4:d8:93:
         74:dd:ca:90:8e:ea:2f:cb:56:66:31:80:0f:fc:4e:28:0e:72:
         fd:dc:57:61:73:00:99:dd:15:ea:8c:a3:43:0b:d0:c5:a3:7d:
         ab:e8:6c:e3:0b:2e:e2:8a:06:a2:ab:78:6b:ac:14:a6:af:fd:
         bd:dc:4b:88:f1:2c:6d:a3:1a:94:23:3a:de:be:2d:4b:ae:ae:
         a3:93:fd:0b:01:3f:60:7d:64:ac:ad:4f:1a:f1:3c:b4:26:33:
         cb:dd:49:ce:8f:10:8a:07:50:28:e3:57:eb:89:de:09:2f:cb:
         e3:23:45:e1:a1:49:c0:f1:6e:72:e2:3b:2b:a2:25:62:68:6a:
         ca:c9:27:07:45:b2:ab:4c:6d:47:00:8a:18:af:b8:92:d7:ce:
         ae:7e:2c:51:7c:08:66:1f:c9:f8:08:9a:14:49:12:76:00:92:
         5b:65:09:cb:60:97:11:1e:61:47:85:3c:8a:b4:7d:c2:ff:bd:
         c2:d5:ca:06:a4:fa:60:0a:a7:7e:4d:7b:d6:8d:20:ae:7b:53:
         55:2e:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:46 2026 by rpki-client