Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa
File:                     07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa (raw, json)
Hash identifier:          ndeUeAKqbzXa/8tgGzF5PsllesthdVfHvfBLyk1nTco=
Subject key identifier:   1E:E3:DE:A2:9E:50:CA:75:58:75:BD:B9:32:EE:4E:9E:AC:1D:D4:12
Certificate issuer:       /CN=221e0287-8ab4-430b-9f09-0c45fa8d7713
Certificate serial:       010D0C9F4328584D300A1CE44A4D2B112C4EDE00
Authority key identifier: 1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     398174
IP address blocks:        23.147.80.0/24 maxlen: 24
                          2602:802:7000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:1c:e4:4a:4d:2b:11:2c:4e:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221e0287-8ab4-430b-9f09-0c45fa8d7713
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=8895f167-1bf9-49d8-aa5b-a0b5f83aa1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:b0:b9:18:2d:fa:8f:0d:1d:37:8e:ff:b2:
                    0a:d3:fc:08:95:9b:2d:a7:95:2d:f0:94:09:e1:ce:
                    2a:1a:70:93:66:b1:41:8f:5f:60:f9:db:ed:c7:4f:
                    cd:33:5a:2a:12:7a:c1:da:43:a5:b1:f8:3e:8b:23:
                    d4:16:16:af:3e:50:36:bf:76:09:a0:21:de:19:ee:
                    b5:82:8d:1c:c8:90:20:63:ad:b9:27:61:7c:3f:4b:
                    94:8e:5d:77:41:4b:40:87:46:12:ba:f6:87:f0:c0:
                    19:91:46:fc:26:d1:9a:7f:f4:e6:ce:29:7a:84:22:
                    92:5e:db:6d:d0:e6:d3:e1:59:ca:9c:41:b5:05:dd:
                    2a:b2:6e:95:a3:71:10:09:b6:68:ce:97:de:f2:37:
                    64:65:c6:31:68:1a:d7:87:36:35:85:12:cd:1c:f4:
                    96:15:bc:64:86:e8:7f:d0:80:4f:04:58:fe:f2:74:
                    1a:c0:a4:c7:80:3f:55:dc:d9:c0:25:86:73:19:01:
                    f9:4f:7a:27:d1:62:95:f6:9d:22:36:85:23:54:4d:
                    5b:55:c7:e1:4f:7a:7e:85:4f:7b:60:a6:33:a8:22:
                    c7:1a:33:cf:4e:61:67:84:0a:93:2c:fd:58:bf:1a:
                    06:55:04:5b:56:ef:18:da:f6:eb:bb:05:96:53:f1:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:DE:A2:9E:50:CA:75:58:75:BD:B9:32:EE:4E:9E:AC:1D:D4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl

            X509v3 Authority Key Identifier:
                keyid:1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.80.0/24
                IPv6:
                  2602:802:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:49:c4:ec:e1:c8:b5:c7:48:78:9a:cf:1c:53:84:8b:98:
         a9:1e:d5:9d:d4:87:ef:82:40:ed:21:40:ce:cd:17:3e:98:f1:
         3b:6d:00:0d:89:93:d1:a0:4c:48:f7:cd:6e:fc:5b:67:98:6b:
         22:7a:68:31:0e:e4:a0:25:bc:4b:09:1b:0d:98:8c:d7:6c:f0:
         15:d5:10:fd:ef:10:e0:be:09:30:8c:ac:1f:6c:87:19:bd:d2:
         cb:b0:20:85:e1:61:99:0b:83:b2:0f:3d:9d:b5:ac:20:60:0c:
         07:65:24:58:4e:b6:7e:08:97:f6:2b:d1:e5:88:02:ab:78:5c:
         6b:3b:cf:55:6e:86:95:bc:29:a9:c7:3f:42:9a:b7:fe:58:31:
         11:1f:fd:ba:5b:e9:7c:34:42:d9:c4:94:ae:b7:77:7e:33:7d:
         f1:da:63:4a:5c:3f:91:65:d8:ce:89:8d:97:38:d7:28:12:11:
         f8:f8:44:b8:f3:a3:c1:d5:73:c9:2f:aa:1f:23:52:5f:7e:b8:
         78:c4:48:12:fc:e9:5d:b3:a6:98:1b:63:95:7d:11:da:5f:99:
         ea:ac:f3:ce:c2:83:fe:0e:27:7e:03:27:9b:15:78:b1:69:f3:
         72:eb:e0:15:ad:e5:b6:94:b3:8f:ac:06:be:26:ea:43:57:46:
         fa:6c:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:29:49 2026 by rpki-client