Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/09fa84aa-062e-3bcc-abfa-c0b84609588c.roa
File:                     09fa84aa-062e-3bcc-abfa-c0b84609588c.roa (raw, json)
Hash identifier:          xxeexBz76urnyW2YT1bDTqqvaf/yJ/8N4mMm8+9O3ik=
Subject key identifier:   37:85:CF:E2:9A:C1:0E:26:BB:A0:B3:BB:9B:F7:BF:E5:88:C5:0C:D5
Certificate issuer:       /CN=cc2eea8d-110c-4205-9610-0faeedf6481e
Certificate serial:       010D0C9F4328584D492A3E924DEBBDF706C5AF00
Authority key identifier: 5C:50:12:13:F4:B8:FC:DB:3B:51:1E:AA:31:9B:E6:8E:45:4B:08:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/09fa84aa-062e-3bcc-abfa-c0b84609588c.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     214483
IP address blocks:        23.150.156.0/24 maxlen: 24
                          2602:f4ae::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/cc2eea8d-110c-4205-9610-0faeedf6481e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/cc2eea8d-110c-4205-9610-0faeedf6481e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:3e:92:4d:eb:bd:f7:06:c5:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eea8d-110c-4205-9610-0faeedf6481e
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=d9e7bdc6-b9fc-4a84-bfec-b7ac279725e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:59:de:8d:6b:ed:b0:75:9c:9e:36:27:be:
                    8d:70:ca:5b:98:55:19:a0:33:3f:54:07:2e:ad:61:
                    ce:a5:76:d4:a8:88:69:a0:1d:33:4c:ab:3f:78:d6:
                    0e:3e:1c:4f:00:e2:83:f9:b5:a7:36:d9:e5:f6:1f:
                    35:1c:26:36:c1:64:fd:dd:1d:58:f6:ec:b2:24:7d:
                    8d:1b:23:bf:b6:f8:43:09:d6:95:59:da:b5:da:7b:
                    2f:af:25:d0:9d:12:2c:4f:63:a3:d4:f5:82:13:32:
                    fd:52:95:19:fd:81:5e:1f:03:3a:97:bc:91:be:10:
                    b4:6d:95:27:f3:e1:4f:0c:0a:38:54:0f:d6:be:ef:
                    dc:b4:ae:e0:a6:82:68:61:76:3d:5d:73:d0:41:3a:
                    ca:14:1c:68:f3:bc:e8:13:59:87:e3:50:db:29:68:
                    75:f5:15:fd:95:30:65:39:65:22:80:98:81:c6:fe:
                    11:8b:ba:ef:b7:bc:bf:1f:47:cc:8b:ad:dc:28:36:
                    47:e0:53:5e:ef:c8:93:73:54:0e:62:cc:5c:68:ad:
                    81:6e:91:d4:96:17:a6:b2:4e:c1:73:1d:c5:ef:1e:
                    a9:64:ec:4a:ae:dc:d0:45:73:04:85:be:77:02:92:
                    de:2a:8c:f2:7c:30:de:73:b9:d8:61:26:7e:a5:45:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:85:CF:E2:9A:C1:0E:26:BB:A0:B3:BB:9B:F7:BF:E5:88:C5:0C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/09fa84aa-062e-3bcc-abfa-c0b84609588c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e/cc2eea8d-110c-4205-9610-0faeedf6481e.crl

            X509v3 Authority Key Identifier:
                keyid:5C:50:12:13:F4:B8:FC:DB:3B:51:1E:AA:31:9B:E6:8E:45:4B:08:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc2eea8d-110c-4205-9610-0faeedf6481e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.156.0/24
                IPv6:
                  2602:f4ae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:fa:17:b5:99:6b:2d:5d:51:6f:c4:5b:97:a6:7c:fd:be:56:
         35:c7:4b:dd:c9:a1:58:57:0f:e0:11:40:5d:06:9f:33:29:2e:
         44:f5:74:6a:7c:92:7a:97:95:fb:89:91:dd:95:78:6c:6e:9e:
         da:c3:d7:b2:b1:7d:a9:d7:d8:55:6a:a4:15:e9:49:a6:cb:b9:
         40:34:f1:3f:73:29:b3:03:9a:f7:8f:18:11:92:15:d7:db:c6:
         60:65:e5:74:bb:0a:43:b2:f4:d0:f7:9a:fb:87:12:cb:5e:99:
         d6:05:8f:f8:27:4a:8d:17:84:a6:02:00:41:42:70:03:40:d9:
         ce:40:88:76:de:fa:81:ef:04:a5:ad:86:fa:13:a5:be:ab:00:
         e8:92:c5:b0:2e:ba:84:7d:99:5c:72:4a:31:47:f2:f7:9d:fa:
         d8:28:36:cf:fc:f0:06:e6:97:54:ee:95:a4:a3:61:13:0c:04:
         59:db:52:8f:ea:d3:8e:34:c6:ce:6a:ad:be:10:e3:e0:77:4a:
         10:0c:ad:29:d6:38:e3:3e:19:25:b9:35:31:a5:80:79:92:ae:
         6a:ca:80:fb:31:43:aa:64:10:33:d8:a3:37:54:e4:16:ea:b0:
         25:d4:dd:f2:50:36:70:30:5e:93:eb:c7:7c:50:93:1d:55:1b:
         80:5e:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:00 2026 by rpki-client