Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa
File:                     796457a9-5a46-3973-a18c-008402e30cc8.roa (raw, json)
Hash identifier:          HnyAYSKPHmd9NkpLkmp6dBENZhvduzhCIDdkxc8pjQY=
Subject key identifier:   E2:38:A9:8A:B1:57:71:EC:3D:7C:0A:66:E9:DE:56:E2:DF:C1:F1:DD
Certificate issuer:       /CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
Certificate serial:       010D0C9F4328584D386A4E8CB13112DAF8C10940
Authority key identifier: 64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     59117
IP address blocks:        23.179.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4e:8c:b1:31:12:da:f8:c1:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=84efbbba-56e1-43f4-8a1a-d936bc3a8ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:1e:94:be:2b:c4:df:78:10:40:48:5c:0e:
                    d4:bf:3f:c8:1f:17:0b:a5:e6:b9:9c:71:64:06:31:
                    d2:72:a0:10:9d:38:ae:99:cb:20:3e:d9:e1:60:89:
                    9b:1d:7a:8a:92:71:6d:10:97:b2:4f:89:16:4e:18:
                    db:d9:47:bc:ed:02:66:ec:cc:7f:09:04:79:10:6c:
                    3b:4a:96:2e:28:8f:45:d7:a9:46:e5:74:e8:8c:58:
                    1b:f7:9c:c8:8c:92:84:e0:9b:08:93:43:ba:f3:96:
                    78:f5:51:5e:4e:4a:bf:ac:bd:5c:90:22:24:ab:aa:
                    2f:f6:f2:2f:94:3d:46:f3:db:57:a9:f7:73:16:71:
                    83:ae:88:db:18:27:47:b6:d5:aa:52:1b:66:12:e2:
                    67:d2:2b:98:64:6a:bf:10:94:fd:42:dd:ad:2f:01:
                    a2:ad:45:fd:bb:e9:71:f4:42:ff:2b:b8:33:d3:24:
                    d3:d3:9e:39:b2:17:c2:45:0b:12:b3:e1:7b:d2:bf:
                    e0:d5:c2:ec:7e:6d:22:eb:14:da:1f:85:ab:fe:42:
                    37:eb:15:6c:89:80:69:55:bc:6a:dd:09:28:56:ee:
                    3b:45:30:2c:e7:55:bd:aa:55:44:7b:4b:21:03:3b:
                    07:be:18:14:82:c7:ce:86:bc:96:3d:b0:23:ba:f0:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:38:A9:8A:B1:57:71:EC:3D:7C:0A:66:E9:DE:56:E2:DF:C1:F1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl

            X509v3 Authority Key Identifier:
                keyid:64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ce:ad:cd:06:ca:ce:d4:8b:e0:41:76:43:14:93:8f:65:31:
         d0:d0:fe:f9:76:88:1f:cb:a2:6e:7d:3a:fc:ac:c2:92:e2:d5:
         5a:54:98:f8:60:ae:da:7a:38:ea:8d:26:14:dc:80:2b:35:f7:
         a4:30:30:04:e0:85:4b:94:2f:71:cd:03:d1:48:2f:19:b1:82:
         bf:d7:99:93:c2:27:8f:35:d7:f6:da:3a:39:ad:3a:fe:e4:b7:
         5b:ba:f5:c3:db:fc:0f:b0:61:25:f7:6f:f0:4e:43:b5:04:ac:
         0b:52:29:54:06:a3:e2:20:32:25:f1:a3:e8:f2:9b:93:9e:ca:
         8b:7e:fe:b8:47:23:65:2f:80:05:f2:1d:46:20:1a:85:84:28:
         ee:4a:ea:6f:ea:15:9c:fb:2a:78:b8:bc:7c:d5:b6:b9:a0:53:
         ef:0b:94:d8:a2:c2:ec:0f:a3:3c:b9:e2:19:ad:fb:9f:59:4f:
         21:85:ca:c6:b9:2a:f9:c7:8e:81:8b:29:2e:20:b0:d9:f2:9c:
         f0:9c:0f:e9:6d:eb:ea:9d:06:09:e7:d8:f7:96:01:09:1d:9a:
         97:49:f3:49:d6:f9:24:21:59:35:36:0d:af:50:7d:df:cb:79:
         28:9d:a0:cc:16:a2:b0:f3:a4:1c:2c:97:97:e6:60:bc:02:04:
         44:16:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:06:02 2026 by rpki-client