Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa
File:                     a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa (raw, json)
Hash identifier:          c0GXT+WwBNURactnkjB4GbUgJIAUwJwHK3HemmQhDPo=
Subject key identifier:   90:89:AA:CA:DD:33:5F:2E:67:A3:FA:50:4E:24:5D:2A:53:7E:A0:23
Certificate issuer:       /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Certificate serial:       010D0C9F4328584DC135C6D771CE0110C7A4E740
Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     30006
IP address blocks:        23.169.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c6:d7:71:ce:01:10:c7:a4:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=8031208a-306b-4a0f-b85d-93cfc9854baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:4c:50:70:69:a4:ef:e5:5f:44:32:84:2c:
                    30:0a:2e:0c:93:02:3f:cf:7a:46:f6:05:c2:8f:06:
                    9d:fe:30:42:3b:1a:ff:8c:f5:bf:e0:f1:85:76:c9:
                    93:39:34:35:cc:6f:7d:c2:c5:a7:f5:1f:91:ea:fd:
                    38:87:3d:52:7c:b0:2c:87:10:59:04:11:77:1c:e6:
                    5d:26:00:22:57:44:84:05:2c:f3:c1:3c:02:c7:ba:
                    1f:e2:d3:57:74:46:e4:21:ee:7a:15:7e:e0:fe:58:
                    f2:7c:18:15:ed:49:d2:ef:21:92:a1:c0:c6:78:3e:
                    95:54:38:db:38:cd:71:27:7a:0e:49:e9:19:c3:29:
                    b4:54:08:9c:b3:d4:d0:12:a6:1b:72:65:fd:cd:f4:
                    b7:c8:fe:01:d8:79:15:34:e1:d0:3c:6b:e4:7c:2c:
                    ff:a8:8c:e3:38:d0:20:a6:86:c5:25:a9:30:55:57:
                    0f:52:3b:f0:9f:08:59:78:3d:e6:06:ce:88:28:95:
                    fa:27:db:89:2f:f2:9c:c2:b3:ff:17:ed:d1:28:cc:
                    b4:21:3f:3e:76:f7:94:3d:d9:6d:d6:2b:27:7b:3c:
                    ea:a2:c3:8c:29:fb:fe:3e:7b:10:de:6a:ac:27:77:
                    b1:aa:b1:02:6f:d7:4e:16:11:6c:ed:b8:20:2a:1a:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:89:AA:CA:DD:33:5F:2E:67:A3:FA:50:4E:24:5D:2A:53:7E:A0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl

            X509v3 Authority Key Identifier:
                keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:2f:68:c3:1c:a0:c5:10:38:e0:20:e1:c0:ea:15:e3:c8:
         d1:4f:01:cb:7c:5c:a3:71:63:e2:52:93:e9:74:96:5f:0f:fd:
         3b:3a:00:fa:2c:d3:f2:fe:f5:14:b5:4f:fd:cf:61:e4:3d:d4:
         db:fd:ca:b9:8b:7b:de:f3:5e:fd:96:11:f6:fc:5e:2c:9c:8a:
         fd:aa:e8:f0:2e:a2:a7:37:f4:bc:06:d7:cb:d1:e4:c2:c2:4a:
         1f:b0:2a:0e:d3:6e:57:38:68:8c:67:af:6f:c9:2c:a8:04:a5:
         36:29:c1:05:d3:83:2e:3d:ce:83:ec:76:ed:d9:1a:1a:e9:6c:
         10:1d:54:0a:2f:c7:de:b2:26:60:e8:29:9b:b8:73:d2:9c:f3:
         52:2d:10:21:c1:c1:5c:3e:05:75:8a:ee:a0:f4:14:0b:36:6c:
         b2:ec:d1:11:11:50:5d:7f:f7:c6:7f:e9:ef:33:5e:94:95:e6:
         59:80:30:a5:15:ea:ff:d8:1e:74:1e:d8:b8:1e:ce:68:0f:cf:
         83:59:6f:0b:9e:79:e5:5b:74:36:c2:bd:e6:97:fd:e6:dd:fa:
         68:42:4a:17:31:7f:ea:44:9c:17:2f:11:c1:56:82:16:f5:b4:
         c5:99:28:7f:14:64:08:c0:cf:36:bd:37:b3:bd:21:ac:2c:f3:
         fe:1d:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:35 2026 by rpki-client