Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/928f831b-f598-33c5-a75d-54644a0d189d.roa
File:                     928f831b-f598-33c5-a75d-54644a0d189d.roa (raw, json)
Hash identifier:          VNs3q0vcWcIWHWpL2oa2zfctbgSU+ttXRxrfSpDCRMY=
Subject key identifier:   FD:AC:EC:90:93:8C:EB:6E:7B:92:9A:7E:1C:F7:47:67:1F:FC:86:E3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D237A5F2C5A8B4AA776E91700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/928f831b-f598-33c5-a75d-54644a0d189d.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        23.84.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:5f:2c:5a:8b:4a:a7:76:e9:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=7fd40867-c95f-4870-aad5-f804a6c99c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:0a:36:11:9f:2c:f1:bd:eb:23:ad:6d:9a:
                    82:be:fc:df:75:78:b0:d1:cc:af:0f:11:b9:3a:d4:
                    f5:fd:ab:65:6d:41:4f:cc:92:19:8e:65:d9:7f:a0:
                    8a:47:88:ef:18:e2:f3:31:a7:d4:f6:ab:e8:60:be:
                    b0:77:3d:d1:45:bf:76:a3:f8:91:86:cb:35:81:fd:
                    f2:8d:8f:f1:4d:f6:f9:ce:cd:d4:f7:7d:cf:b6:a5:
                    de:3a:5c:e6:f6:ff:43:09:1c:3d:76:40:e9:54:d8:
                    71:45:7f:0d:6d:29:7a:54:71:52:91:5b:ae:0f:e0:
                    48:a4:40:ff:52:92:dc:d2:25:44:ba:28:54:62:60:
                    8f:00:62:5f:a1:38:b1:2c:1c:2d:2c:e4:90:ef:20:
                    f9:a1:2b:10:b4:0e:8f:82:f6:9d:ff:a1:db:b6:30:
                    3f:8b:09:09:f1:f5:a2:a4:68:e7:eb:52:28:41:cd:
                    0f:a2:ac:64:4a:cc:9d:43:11:83:a6:93:2e:cc:0d:
                    ee:cc:c5:0b:75:ee:5a:b0:d9:2f:e8:42:7f:fb:7f:
                    60:bb:69:45:92:e0:30:db:a7:78:86:ee:b2:6c:de:
                    2b:09:ce:91:ff:0f:26:94:a7:33:08:bb:38:a0:0a:
                    a1:1d:bf:29:a2:3d:9e:de:56:ba:5d:ca:2b:0e:e9:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AC:EC:90:93:8C:EB:6E:7B:92:9A:7E:1C:F7:47:67:1F:FC:86:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/928f831b-f598-33c5-a75d-54644a0d189d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.84.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:89:e9:86:c8:2a:2d:6f:a6:36:b0:08:bc:ea:da:98:7e:16:
         e7:9d:b6:a8:6b:9f:05:90:bd:fa:56:8c:68:c6:81:5b:2b:c9:
         ea:83:ab:a5:f3:5c:e8:66:54:51:cc:a2:c8:2c:c1:73:60:d0:
         27:89:0c:45:3c:ab:50:4d:3c:36:67:0a:c2:ac:06:b3:97:ee:
         c8:4c:d0:1f:0a:11:63:58:c3:66:bd:7c:10:56:75:aa:81:2d:
         5e:64:88:4a:99:17:2a:b9:bf:dd:ef:d2:8c:f6:41:02:1b:38:
         59:03:bd:c7:2c:6d:71:7d:85:49:3b:20:7e:81:a5:83:dd:33:
         44:29:47:df:d8:ec:46:af:7e:08:17:d7:98:dc:04:b2:90:7e:
         1e:94:f4:24:d5:96:04:e7:61:b0:2a:57:72:1d:88:a9:41:97:
         26:70:6e:fd:c3:aa:5a:a3:26:fc:ef:6f:23:05:c2:d3:69:6c:
         8c:fd:01:4e:c5:99:f8:24:02:1c:4b:cb:b0:96:63:ab:c9:ba:
         bd:7e:50:a1:92:04:de:30:4a:86:66:4a:1a:b1:67:ee:92:15:
         03:8f:6b:0d:7a:eb:87:db:7b:8c:cc:9f:b6:b1:cb:ec:7a:4d:
         04:62:2b:14:6d:73:3a:d0:65:0c:c0:13:d0:28:cf:2c:19:26:
         26:fd:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:09 2026 by rpki-client