Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
File:                     87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa (raw, json)
Hash identifier:          AOCsduJOTkAAV3UIN7qW2WLYJhaAsFt8JEjzz1iM7c4=
Subject key identifier:   5E:7B:17:2E:0C:A6:47:16:A5:F5:84:13:F5:B6:FA:E0:DE:65:7A:9A
Certificate issuer:       /CN=47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f
Certificate serial:       010D0C9F4328584DADAADE9657122A6F7FF4C900
Authority key identifier: 2B:81:44:23:12:6E:F4:2C:6F:52:A8:3D:66:1C:06:CE:9D:1F:0E:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     11775
IP address blocks:        23.164.104.0/24 maxlen: 24
                          2607:7340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:de:96:57:12:2a:6f:7f:f4:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=8b81cf1b-de33-4f8b-aedc-d6b3e55810d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:84:fa:1b:72:c1:bb:01:c8:c4:1f:2f:31:
                    7f:ac:99:a6:0f:50:33:73:2b:2a:8d:9a:7e:6d:7d:
                    f3:c5:78:90:03:56:7c:b3:06:5d:65:98:d0:fc:cb:
                    a6:71:98:22:52:0d:2c:3b:ef:73:c2:6f:b9:bb:bd:
                    5f:3f:64:8b:43:c1:ba:36:97:e4:3f:de:71:89:ca:
                    68:ca:20:28:40:27:bf:94:4c:05:90:cf:4a:b9:79:
                    05:cc:1e:a9:f7:6c:d9:f3:9c:ad:fc:13:38:88:9a:
                    2e:5c:3d:d1:ce:ce:ff:54:bf:71:02:d1:a0:5c:74:
                    03:04:8d:1b:4b:fa:8a:89:85:a7:b5:f2:15:35:69:
                    f1:4d:07:90:c9:a0:9a:8a:5e:49:6e:3c:97:f7:13:
                    fd:50:76:7c:3a:66:ef:ba:0f:5f:aa:89:4e:f3:40:
                    18:15:fb:f2:3d:39:0f:5f:6a:b3:2c:e3:85:9c:df:
                    a0:a3:01:be:59:85:36:9c:78:8a:7d:8c:3d:69:1a:
                    f2:67:cb:b5:f0:b2:d4:0b:c6:40:0b:47:bc:fd:22:
                    c0:96:fa:f3:4d:05:39:3a:3e:94:9c:bc:43:44:bb:
                    57:3e:7a:3b:ee:e2:ce:9c:06:02:8e:3a:11:8f:99:
                    a1:a1:ae:1a:27:49:fe:33:3c:37:ff:a6:47:30:d9:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7B:17:2E:0C:A6:47:16:A5:F5:84:13:F5:B6:FA:E0:DE:65:7A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.crl

            X509v3 Authority Key Identifier:
                keyid:2B:81:44:23:12:6E:F4:2C:6F:52:A8:3D:66:1C:06:CE:9D:1F:0E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.104.0/24
                IPv6:
                  2607:7340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:0d:43:2e:6a:19:81:f3:2c:0a:3c:ee:26:9f:bf:38:c5:
         74:46:6d:ef:2b:9c:a4:11:6f:85:07:77:d7:1f:78:ec:11:ba:
         35:e5:9f:4d:91:c0:d8:f0:e6:fe:78:eb:bf:fb:f0:bb:f6:44:
         61:f2:be:70:af:ce:7b:0c:70:d9:aa:35:08:18:e6:94:23:78:
         d8:52:d6:ea:99:65:52:a2:96:90:e6:58:0c:ed:db:e1:fd:a3:
         93:89:3c:36:62:d2:21:19:3c:11:f6:aa:c4:7f:88:ac:1a:eb:
         0f:d1:ca:ce:b3:94:29:90:df:ad:2a:64:d8:67:35:ff:d6:b2:
         bd:f3:73:4c:56:6e:f9:3b:e7:1c:d5:18:a4:4e:46:00:0d:7e:
         6f:8a:03:7d:4d:ff:4b:83:33:5d:52:d0:3d:b2:e7:3b:2a:c2:
         49:40:99:3b:d6:3b:61:36:19:dc:b2:c1:d6:fd:01:e1:6e:49:
         f5:7b:06:59:9a:69:cc:c1:a0:27:ce:54:5b:84:a0:c3:56:40:
         6d:a3:a5:f9:64:79:c2:7b:86:21:24:97:06:09:0b:b6:25:f9:
         33:2b:cd:74:99:47:c9:cd:b8:3c:a9:ed:75:66:0d:3e:46:00:
         16:f8:75:55:d3:7d:b8:3e:d7:45:45:2b:fe:ab:5c:8d:34:b8:
         27:a5:ff:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:35 2026 by rpki-client