Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/568cec6e-9f00-3363-bce9-e472a78e32a3.roa
File:                     568cec6e-9f00-3363-bce9-e472a78e32a3.roa (raw, json)
Hash identifier:          DgKgCf/9almwx6sGJA+vywkoiJW2Ci5JZpaOjX99vCc=
Subject key identifier:   4B:1B:E8:E3:5C:5B:45:35:65:D3:3C:E4:0D:AF:0E:3D:66:59:32:21
Certificate issuer:       /CN=e0dd35b2-9124-461e-adea-17906cb49705
Certificate serial:       010D0C9F4328584D27AA090C14E32BA60354A560
Authority key identifier: 42:59:56:81:9E:CB:EA:62:C6:17:E7:07:7A:5A:1E:3C:50:4C:EA:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/568cec6e-9f00-3363-bce9-e472a78e32a3.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     36741
IP address blocks:        23.157.32.0/24 maxlen: 24
                          131.143.156.0/22 maxlen: 24
                          192.86.81.0/24 maxlen: 24
                          2620:12e:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:09:0c:14:e3:2b:a6:03:54:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dd35b2-9124-461e-adea-17906cb49705
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=6ee5049c-9200-4df0-afd1-b95b17cbb769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:f7:be:36:2d:a6:98:2d:75:41:6c:b7:37:
                    a9:58:d6:8f:b9:58:9a:2b:94:10:8d:36:13:90:14:
                    a0:3b:b3:54:e6:e2:f5:24:ff:7f:20:1a:3c:3e:a1:
                    f9:e6:ef:2b:e3:38:67:3c:90:ed:05:b8:9e:94:a2:
                    eb:02:31:60:56:a9:89:e0:3d:d7:ed:44:2b:de:c1:
                    56:dd:45:ac:78:82:98:be:dd:10:6b:fb:07:c4:46:
                    b0:ec:69:2c:14:a9:d9:54:93:6a:37:8e:f7:72:45:
                    ae:d9:26:f9:d2:1d:2d:d0:27:bc:5f:a8:8a:7b:7f:
                    aa:19:fc:67:9d:de:76:85:cf:5b:98:fc:f7:59:9e:
                    f4:b0:bd:7d:d2:e9:87:be:8f:51:b4:f8:2a:df:7f:
                    9c:c8:2e:1f:bd:5c:e4:7b:ea:c8:a4:87:c0:60:75:
                    61:dc:c8:6b:81:d4:a5:43:a5:f5:3b:bf:1c:4d:2b:
                    21:ed:04:bd:93:aa:6f:8b:7c:47:bc:53:33:40:6c:
                    3d:c3:84:5d:bb:b6:cf:3c:d6:70:5f:28:8a:f0:75:
                    62:df:6d:32:ae:3d:aa:2b:a3:97:58:b4:f0:c0:05:
                    49:6a:8e:73:60:6e:81:cd:c4:f6:e9:37:d8:97:21:
                    e5:38:c0:c7:49:3d:2f:bd:e0:68:f2:fd:2e:92:f2:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1B:E8:E3:5C:5B:45:35:65:D3:3C:E4:0D:AF:0E:3D:66:59:32:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/568cec6e-9f00-3363-bce9-e472a78e32a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705/e0dd35b2-9124-461e-adea-17906cb49705.crl

            X509v3 Authority Key Identifier:
                keyid:42:59:56:81:9E:CB:EA:62:C6:17:E7:07:7A:5A:1E:3C:50:4C:EA:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e0dd35b2-9124-461e-adea-17906cb49705.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.32.0/24
                  131.143.156.0/22
                  192.86.81.0/24
                IPv6:
                  2620:12e:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:24:4b:a8:7d:98:8c:02:26:96:59:ce:07:61:41:46:b6:
         90:f4:78:f1:f7:95:c5:db:2a:01:7d:4e:d1:a4:dd:cf:ae:3a:
         28:03:3c:0b:c1:fe:25:e7:a5:3f:07:7a:7c:86:78:03:1c:20:
         15:32:f2:85:bf:ff:05:f8:29:2a:d3:b1:f6:8b:c9:97:b1:e7:
         f3:f1:e6:bb:29:78:26:6f:d0:99:b0:4e:44:eb:49:da:db:69:
         65:ff:22:de:15:82:fe:de:d9:52:4e:0d:a0:65:8c:a2:19:1d:
         dd:6b:c7:4d:c5:54:c4:25:3a:2d:1f:29:ab:24:4c:6e:5e:cd:
         bf:ff:f7:99:be:f4:2e:62:3c:10:a7:e2:20:a4:0c:3d:bb:35:
         ca:11:22:e3:92:ea:97:dc:67:84:84:c9:f4:4b:d1:89:01:f4:
         f3:24:3b:16:ee:64:52:fa:8b:a0:5e:a3:15:5a:e0:ef:c1:42:
         f3:58:aa:a3:dc:2e:c2:13:bf:21:b6:86:09:95:1f:e2:02:d2:
         b3:ff:58:37:99:7e:bb:b1:fd:68:bd:42:6f:6a:86:33:75:19:
         4b:77:c5:31:f0:b9:2e:8d:c6:af:ad:8c:8f:42:5a:87:7a:ac:
         bc:67:80:2b:8a:ad:36:a8:02:4a:89:93:00:7e:28:3c:fd:07:
         07:84:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:17 2026 by rpki-client