Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/7bd6bc7b-514d-3e1b-93bd-78fd1008b393.roa
File:                     7bd6bc7b-514d-3e1b-93bd-78fd1008b393.roa (raw, json)
Hash identifier:          7eIqnLmvr4IZixvv3hgJek3Lw7c0NYd6bIXDIam9DOI=
Subject key identifier:   26:72:BD:53:0D:21:02:CA:41:E0:25:48:6D:0C:BE:39:59:DB:78:CC
Certificate issuer:       /CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
Certificate serial:       010D0C9F4328584D386A4E7C6B5112E67D2C9380
Authority key identifier: 64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/7bd6bc7b-514d-3e1b-93bd-78fd1008b393.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     211392
IP address blocks:        23.179.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4e:7c:6b:51:12:e6:7d:2c:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=9d877f63-7357-4943-845b-d64f67d50103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:21:11:97:1f:36:f9:ff:96:88:a6:9a:f1:
                    1f:74:50:c8:eb:f7:ca:a7:48:9c:05:8f:9e:cb:60:
                    0e:a2:a6:41:35:32:7c:8f:ca:15:65:2b:79:ea:59:
                    67:42:e5:43:10:22:d2:03:9b:f1:19:56:b1:b3:64:
                    50:99:06:96:c1:b8:75:8f:ee:d3:b5:ac:09:e9:2f:
                    ae:c3:09:3d:9b:6a:b2:67:66:29:ec:4a:02:7c:d6:
                    7f:d6:9b:6a:34:fd:00:2a:5c:4d:68:93:12:e2:ee:
                    df:cd:ee:33:1c:b7:6f:1b:ae:c5:9a:60:81:6c:2b:
                    43:93:36:85:28:1b:2f:26:56:7c:87:de:7e:c6:00:
                    7e:e7:12:a4:ab:de:a3:c8:37:13:06:05:44:8e:e6:
                    42:01:d7:0e:1c:f7:f8:13:65:e2:b1:94:47:2f:d6:
                    46:69:92:05:81:44:09:b7:f2:bc:c2:72:e8:c1:92:
                    d5:f7:e9:a7:4c:65:00:ab:ff:5a:be:67:9a:2b:52:
                    78:1b:69:81:71:ec:6f:f7:14:bb:e4:8b:23:b1:92:
                    b0:b8:c9:3b:6c:0f:2d:10:a0:a1:c5:68:ed:c7:ee:
                    cb:9d:8f:d7:b3:1a:c2:61:5f:c3:92:ab:f1:bf:31:
                    b0:e1:f3:b1:49:9c:7e:28:b4:36:2e:45:10:6e:1d:
                    ab:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:BD:53:0D:21:02:CA:41:E0:25:48:6D:0C:BE:39:59:DB:78:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/7bd6bc7b-514d-3e1b-93bd-78fd1008b393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl

            X509v3 Authority Key Identifier:
                keyid:64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0b:46:fb:45:74:85:19:a9:a2:18:60:5d:d6:01:e8:e4:13:
         81:11:2d:56:b1:4e:9b:79:88:8a:85:47:6c:2f:1f:ea:d5:3c:
         6f:cc:80:2e:84:35:fc:f4:c3:ea:e4:e4:9b:67:d7:40:e6:b0:
         50:7e:db:2a:65:42:a9:4d:c4:99:48:a8:d9:76:c5:24:70:0b:
         76:c5:f6:98:04:b7:32:6b:94:23:5f:16:e1:b0:fe:4a:31:8e:
         32:2b:1f:d5:f9:51:3f:7b:0d:7b:b8:24:dd:1f:38:43:17:39:
         82:eb:60:32:55:e8:bb:ef:1d:6b:52:04:15:2a:09:d7:6b:87:
         5c:dc:e0:91:ed:ce:f6:ad:d5:6c:e4:9c:b3:e7:df:c8:56:4b:
         ec:d5:ac:e1:da:41:6e:3e:9a:f0:b7:9c:cb:da:b7:b4:a2:fe:
         6a:77:bd:6c:67:77:30:df:c1:50:9d:c7:f9:c3:aa:02:87:15:
         8c:6b:5b:f1:68:10:95:f6:2b:a2:d7:60:16:38:bc:78:37:f6:
         1f:13:14:4b:73:d8:3a:7b:f3:f0:d7:c4:72:15:6d:78:cd:7d:
         87:59:9a:3e:41:d7:cf:fe:2d:ae:55:07:14:80:e4:40:d1:f1:
         90:00:5c:40:43:e2:d7:d7:1d:2c:72:60:ef:99:bd:f4:ad:df:
         5d:0f:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:17:08 2026 by rpki-client