Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/79d542c1-7535-313b-a2a3-2996cfb5b87f.roa
File:                     79d542c1-7535-313b-a2a3-2996cfb5b87f.roa (raw, json)
Hash identifier:          bR+SplncAd04Yp5AhKfQs2U5s0PqRmZPH+uMkvR4ggM=
Subject key identifier:   C3:31:95:6A:D7:8A:58:9D:83:66:28:14:E5:40:BE:21:6F:54:84:EA
Certificate issuer:       /CN=fbdf8030-f526-45ac-a17d-e304c3d89f05
Certificate serial:       010D0C9F4328584D2BDA1C23316A74B8DD031740
Authority key identifier: 91:B4:F2:70:69:98:07:8E:00:C1:19:CF:93:55:11:0A:66:46:E8:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/79d542c1-7535-313b-a2a3-2996cfb5b87f.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     63023
IP address blocks:        23.162.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/fbdf8030-f526-45ac-a17d-e304c3d89f05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/fbdf8030-f526-45ac-a17d-e304c3d89f05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1c:23:31:6a:74:b8:dd:03:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf8030-f526-45ac-a17d-e304c3d89f05
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=a35dad7e-8049-475a-b76d-cf383a7d9a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:00:62:00:85:5a:b4:54:ad:ff:97:3b:cb:
                    f8:74:17:be:f0:5a:1d:c7:6b:10:08:c4:47:05:fa:
                    dd:44:df:1b:b0:d3:79:b1:55:26:c1:c8:c3:c6:99:
                    ad:4f:af:a4:28:c7:88:64:08:01:4d:cb:84:ab:ff:
                    fb:91:e4:a0:94:21:f0:69:65:42:5b:97:bb:22:a8:
                    5f:34:f4:2d:9d:bc:3e:e5:62:7d:26:92:73:b0:fd:
                    ae:57:f3:95:9b:36:ab:59:4d:01:8a:3f:d2:11:17:
                    d6:57:f5:23:fe:b3:11:38:ee:a3:3b:24:8f:9a:bd:
                    0d:84:63:f0:31:e9:a0:31:c1:ac:be:8f:3f:92:75:
                    a6:e7:ab:d7:44:50:3a:5f:b5:84:d0:64:1a:27:f1:
                    da:3d:19:8e:4e:bc:c5:11:26:76:89:fa:3e:ec:a4:
                    32:e6:57:06:14:be:4f:57:dd:d0:34:27:04:53:da:
                    29:90:70:1f:6f:71:cf:53:87:e8:d1:00:d3:a8:83:
                    14:a2:58:e3:48:7d:69:76:a7:17:9d:eb:f7:a7:0c:
                    28:5d:7e:ff:4a:7b:20:ed:f2:b3:85:76:11:88:df:
                    99:c8:65:fe:61:89:d7:5a:8f:97:36:9d:62:73:0c:
                    21:c4:df:83:94:7e:4c:e1:c3:ad:91:93:c0:83:bb:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:31:95:6A:D7:8A:58:9D:83:66:28:14:E5:40:BE:21:6F:54:84:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/79d542c1-7535-313b-a2a3-2996cfb5b87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05/fbdf8030-f526-45ac-a17d-e304c3d89f05.crl

            X509v3 Authority Key Identifier:
                keyid:91:B4:F2:70:69:98:07:8E:00:C1:19:CF:93:55:11:0A:66:46:E8:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbdf8030-f526-45ac-a17d-e304c3d89f05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:93:df:e1:b9:ac:98:62:19:a5:56:9d:11:17:de:7d:d0:94:
         b4:63:19:89:0d:06:38:94:4d:44:a2:1c:e5:ce:8f:fc:a4:94:
         de:e0:22:ec:65:29:f9:58:c0:bc:36:6f:82:4b:af:f6:d4:7b:
         2c:3e:cd:eb:88:be:b7:ee:6e:64:4f:b9:3c:b9:b9:77:88:80:
         2b:55:a0:aa:f1:7f:84:1e:b0:57:df:04:0b:01:76:52:af:c3:
         e5:88:bb:10:9e:fb:9e:96:78:c0:4b:71:57:a6:1c:54:28:b1:
         f7:90:a2:3c:31:a9:57:75:63:d9:c9:d9:4c:11:84:d7:89:96:
         2a:84:2f:ff:3f:91:cf:32:13:a0:b7:64:e9:d4:b7:c0:e3:d4:
         af:b6:56:ff:70:74:46:dc:bc:85:5d:e3:95:9f:da:f0:08:f7:
         f0:b0:bd:6b:e2:d0:b3:f3:2a:bc:df:5f:c5:f6:35:62:b9:1a:
         87:08:25:96:5a:e6:be:07:fe:9c:8f:36:8e:00:94:93:09:db:
         d5:12:86:b2:63:f2:36:b3:0f:be:34:94:ea:ba:ae:09:bf:86:
         29:5d:90:aa:47:76:17:04:09:d2:ab:ab:84:36:20:f6:78:69:
         29:d1:a9:5e:7d:4a:b9:31:8f:8d:08:16:a2:20:58:d6:f1:f9:
         e5:3d:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:45 2026 by rpki-client