Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/2bb338a6-0cc8-30a0-bbb4-97d19e6b3ce8.roa
File:                     2bb338a6-0cc8-30a0-bbb4-97d19e6b3ce8.roa (raw, json)
Hash identifier:          9FY28VIoPUjTswlD0CqTd97rxYWULEFFzC3CuW89dLE=
Subject key identifier:   60:BC:18:9E:9D:74:44:03:FB:FF:C4:F7:0A:21:62:87:01:28:A8:2A
Certificate issuer:       /CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
Certificate serial:       010D0C9F4328584D47C4E6FF01258EF1681E134C
Authority key identifier: 41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/2bb338a6-0cc8-30a0-bbb4-97d19e6b3ce8.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     400647
IP address blocks:        23.183.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:e6:ff:01:25:8e:f1:68:1e:13:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=eccc6c52-347f-417c-9abc-34584602f5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:74:ca:61:4b:22:56:1c:67:ab:aa:57:93:
                    06:08:fb:c9:a0:3b:a9:61:7f:8b:be:81:1a:e8:e5:
                    62:74:54:dc:a6:b0:97:9b:9e:f5:a7:1e:8c:a4:bd:
                    bd:bb:04:f3:f1:8e:31:a1:3a:09:d2:94:d5:3d:b0:
                    c0:1a:91:bd:47:ee:77:07:1d:0b:34:54:06:57:39:
                    e4:48:98:dc:6a:a8:53:df:fa:51:ca:13:52:e5:cd:
                    2a:d7:64:5d:50:7f:88:03:8b:3b:45:2a:69:89:3a:
                    48:50:bd:e7:46:8c:3a:62:4b:c5:e7:fd:f5:e2:54:
                    fe:ba:fa:df:5c:1e:76:b5:d2:03:56:bd:21:6e:5a:
                    de:a0:2c:a3:d9:7f:70:99:b5:d7:a4:fb:28:6c:c2:
                    1e:34:b2:d4:c3:91:e5:13:37:00:34:70:72:4b:0c:
                    66:63:bd:b8:b6:ed:cc:bc:17:5c:99:54:6d:91:d2:
                    4c:73:b9:f6:8f:65:0d:22:9d:4f:f8:3d:45:6e:b0:
                    15:cf:49:4f:59:9d:26:cb:a9:90:6d:b9:ab:12:11:
                    ae:b6:8d:c9:5a:bf:23:d1:a6:7b:2a:1e:28:5d:1b:
                    5d:39:e7:50:a9:24:c0:63:6f:61:6f:98:57:76:a9:
                    7e:e2:3a:6a:b5:d1:7c:38:06:f8:ed:a5:cb:50:a1:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BC:18:9E:9D:74:44:03:FB:FF:C4:F7:0A:21:62:87:01:28:A8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/2bb338a6-0cc8-30a0-bbb4-97d19e6b3ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl

            X509v3 Authority Key Identifier:
                keyid:41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c7:86:31:d2:66:58:52:9c:52:01:62:f9:1e:8c:82:ed:80:
         2b:a3:ea:31:fe:ac:42:e1:ff:13:7c:70:46:12:6d:e9:a0:ef:
         59:88:36:a5:9a:97:32:0b:84:b0:bb:93:36:15:b3:b4:24:e9:
         d4:a4:21:c0:f0:c8:8a:6f:37:84:4c:6d:80:61:3b:b3:2d:91:
         b2:f4:52:5f:62:e9:ee:d1:c0:d1:c0:74:e4:21:b1:a5:92:64:
         b9:8c:e4:88:d0:2d:cc:a3:35:3e:ed:0b:9f:39:fe:22:4b:c9:
         6d:57:6c:7c:66:93:ea:4a:3d:a3:e4:a9:02:3b:98:c2:d5:cc:
         d5:27:ad:43:06:47:74:7e:f8:69:25:8a:e8:1c:1a:b5:06:d0:
         48:ea:bc:c0:16:20:52:30:56:ae:fe:25:ad:04:a4:4d:88:48:
         d4:a2:51:72:d0:f5:92:45:78:6d:a0:2b:94:d2:36:45:f7:c0:
         bc:9b:53:53:be:cd:89:4a:61:c7:2b:7e:7f:33:fc:b3:11:05:
         c4:44:c9:1a:f6:f1:11:d9:d8:ce:d8:43:12:eb:ec:38:85:cb:
         77:db:b7:4f:9b:87:fd:8d:f2:4c:0c:a1:4e:b2:00:47:1f:80:
         19:3b:c1:fe:22:bf:01:c3:76:ff:f0:26:6b:3a:d5:4b:2f:1b:
         1f:61:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:06:13 2026 by rpki-client