Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/2bdb07f9-78e3-3889-8254-7e7a6dd12115.roa
File:                     2bdb07f9-78e3-3889-8254-7e7a6dd12115.roa (raw, json)
Hash identifier:          woa3s3PGOGlkkR1vMD6or9+tzPVSwrpHRxF46XtuAyQ=
Subject key identifier:   3C:24:22:05:50:3C:7A:E1:0D:02:56:F7:DD:02:85:40:0C:F4:82:AF
Certificate issuer:       /CN=68acbe9e-7969-4867-8c30-4486b8a16196
Certificate serial:       010D0C9F4328584DCDC5A85519E1BF9B6CC6F400
Authority key identifier: 60:A1:19:29:47:F5:B3:73:65:B3:E6:5A:CC:46:BE:76:0D:05:6B:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/2bdb07f9-78e3-3889-8254-7e7a6dd12115.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     211686
IP address blocks:        23.134.116.0/24 maxlen: 24
                          2602:f6ee::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/68acbe9e-7969-4867-8c30-4486b8a16196.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/68acbe9e-7969-4867-8c30-4486b8a16196.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a8:55:19:e1:bf:9b:6c:c6:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68acbe9e-7969-4867-8c30-4486b8a16196
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=a543847b-4545-4866-9486-a1172b773e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:f6:73:18:3f:a9:94:90:f9:ad:c3:35:b8:
                    f6:69:26:91:a3:8b:22:18:95:16:80:49:a0:24:90:
                    9b:4e:a5:fc:a6:bc:f1:49:4a:18:7d:11:ad:c9:e4:
                    b1:d1:eb:c8:ac:01:83:75:47:ea:93:96:78:d5:2f:
                    8d:c7:44:87:4f:89:1a:60:f2:ca:10:6b:57:1a:50:
                    e2:ca:f4:bd:fc:17:dc:18:9b:6d:80:cc:d3:8f:76:
                    22:6c:a1:92:75:3a:82:80:c1:f1:27:f2:06:9a:33:
                    f0:1e:79:41:be:f0:5b:95:53:f3:aa:98:32:6d:76:
                    f4:46:ec:dc:24:13:55:ac:c6:d2:76:e9:a4:04:6d:
                    3f:bd:e4:ac:d4:bb:27:85:85:64:f3:e4:50:e6:c7:
                    ff:fa:ac:8c:cc:36:c6:3d:b6:70:6c:68:cf:43:22:
                    c7:d6:d4:4b:c4:c6:36:28:84:1d:15:f4:23:a0:36:
                    69:94:71:fe:a0:f3:47:d0:37:65:6c:b9:e9:f8:d1:
                    31:00:c5:1a:24:c8:ee:2d:37:bf:4d:cb:04:2d:d6:
                    50:48:da:03:4d:2a:79:1b:df:48:f4:9e:00:b8:f7:
                    c2:e1:8b:ed:41:1a:45:d1:d9:41:7c:c1:d4:dc:1d:
                    70:99:f6:b4:d5:1e:da:fa:29:06:62:3d:f9:26:b9:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:22:05:50:3C:7A:E1:0D:02:56:F7:DD:02:85:40:0C:F4:82:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/2bdb07f9-78e3-3889-8254-7e7a6dd12115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/68acbe9e-7969-4867-8c30-4486b8a16196.crl

            X509v3 Authority Key Identifier:
                keyid:60:A1:19:29:47:F5:B3:73:65:B3:E6:5A:CC:46:BE:76:0D:05:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.116.0/24
                IPv6:
                  2602:f6ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:40:b3:5a:a1:7b:1d:b3:69:86:50:08:27:35:09:2f:8f:
         01:30:ce:6b:62:79:e2:31:61:27:ef:e4:00:e9:53:2f:17:03:
         f8:3b:dc:cd:7b:5d:66:7c:5a:fc:65:7b:57:91:2a:54:12:42:
         fa:ae:f6:98:15:12:43:f4:2a:bc:3e:35:91:e0:87:af:b2:e9:
         35:24:8b:96:76:46:f0:49:4b:29:75:4b:ce:0b:75:4c:6e:fe:
         fb:98:80:a5:91:dd:e6:c5:d2:b3:58:07:a1:74:f1:8c:3b:95:
         98:64:12:93:4d:86:f5:da:e7:6d:91:2d:11:fa:25:b0:41:ba:
         4f:16:55:7a:f1:76:7e:e4:12:eb:af:4f:af:f3:31:20:a9:b8:
         81:5d:4b:bb:96:81:59:9c:6f:d7:b9:43:d3:f3:10:75:7d:26:
         b0:4a:df:33:6f:7d:01:30:a6:77:7a:69:9c:7e:1e:4a:65:2f:
         6e:ce:c8:22:48:5b:e6:b0:3a:ec:8b:9c:b7:32:84:19:6e:26:
         76:32:b9:47:9d:fc:56:0f:c7:4d:de:b6:49:2a:6a:bb:c3:74:
         fa:23:3b:d0:ed:14:f1:24:53:fa:42:aa:e2:81:99:38:25:92:
         a8:9f:25:13:08:21:2c:31:76:7b:e2:6f:1e:0d:a3:96:7c:5e:
         9e:25:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:55 2026 by rpki-client