Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/41b4cbed-46ca-3e9d-abe2-bae0682b1e94.roa
File:                     41b4cbed-46ca-3e9d-abe2-bae0682b1e94.roa (raw, json)
Hash identifier:          YYwnl+XNnC8lNDFQP8vL7W1QpMFWaC3Q2cECIiWiviw=
Subject key identifier:   B6:AD:F7:DA:0A:1B:E3:62:5F:5D:4D:E1:BC:6B:2E:5A:3B:7A:68:F3
Certificate issuer:       /CN=6dfff02f-dae5-4c2d-82e0-ead9ff605625
Certificate serial:       010D0C9F4328584DC4B7E6BBB2DF0208648D6500
Authority key identifier: 32:E9:92:02:61:D0:1C:9F:93:4D:4C:55:2C:89:7A:F0:C5:CF:E6:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/41b4cbed-46ca-3e9d-abe2-bae0682b1e94.roa
Signing time:             Fri 08 May 2026 19:10:33 +0000
ROA not before:           Fri 08 May 2026 19:10:33 +0000
ROA not after:            Thu 06 Aug 2026 19:10:33 +0000
asID:                     400639
IP address blocks:        23.160.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/6dfff02f-dae5-4c2d-82e0-ead9ff605625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/6dfff02f-dae5-4c2d-82e0-ead9ff605625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:b7:e6:bb:b2:df:02:08:64:8d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfff02f-dae5-4c2d-82e0-ead9ff605625
        Validity
            Not Before: May  8 19:10:33 2026 GMT
            Not After : Aug  6 19:10:33 2026 GMT
        Subject: CN=b2f6fd1c-9121-4803-b1b2-c7ffc5f47c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:36:dd:bf:bf:fc:08:73:6e:ec:3f:11:48:
                    5e:f9:4c:20:88:65:8d:57:35:53:b1:77:a7:32:14:
                    8e:e5:e9:d7:d2:9d:5a:c0:c5:23:17:a5:ff:b7:a1:
                    76:1c:8d:c6:59:3a:6f:27:c3:b5:e7:40:30:2a:b0:
                    d5:31:24:9a:c2:8e:9d:af:2f:e1:8f:89:3b:8f:37:
                    36:93:e0:d6:68:9a:0a:ae:fc:e9:a9:9a:26:b8:af:
                    c4:38:ce:2d:0c:a0:32:a3:10:b8:72:52:71:a5:e7:
                    d2:a6:97:9b:bf:ab:93:e5:a8:4d:2d:61:c6:d9:ca:
                    3f:5e:26:eb:e6:6c:d5:43:b9:9d:e8:9b:0e:8b:3b:
                    9c:39:25:b4:4f:2d:57:c9:64:c9:82:fe:51:05:89:
                    51:87:12:cd:2b:43:6e:d7:18:c9:22:26:90:09:90:
                    7f:8a:3b:71:77:6c:58:5e:94:28:f9:7c:00:9b:c3:
                    bd:9f:f9:4c:8f:05:09:1f:2b:86:d9:b2:d8:f2:ff:
                    4c:c2:3e:e0:d4:06:9a:40:b7:a3:6e:bf:8d:ef:87:
                    95:35:e1:16:a0:9f:08:7b:df:a5:dd:4d:3e:bc:6e:
                    c9:28:0c:45:03:97:27:ad:78:b5:25:70:13:d4:fc:
                    39:87:88:90:55:d9:27:24:ef:42:40:b7:fc:34:83:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AD:F7:DA:0A:1B:E3:62:5F:5D:4D:E1:BC:6B:2E:5A:3B:7A:68:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/41b4cbed-46ca-3e9d-abe2-bae0682b1e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/6dfff02f-dae5-4c2d-82e0-ead9ff605625.crl

            X509v3 Authority Key Identifier:
                keyid:32:E9:92:02:61:D0:1C:9F:93:4D:4C:55:2C:89:7A:F0:C5:CF:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:03:c7:bc:01:f0:15:dc:a9:16:3a:c6:c6:6f:7f:cd:5e:21:
         63:8b:da:10:36:ba:d1:38:e1:23:80:b0:a7:a6:6e:32:fd:b7:
         c9:aa:0e:fb:55:ce:86:61:c4:16:02:59:2f:e8:88:63:06:a2:
         39:89:e2:30:20:85:44:2b:65:f3:df:dc:f0:24:31:34:6b:bd:
         ee:b4:90:91:2f:13:fc:21:ad:da:47:b7:21:21:e9:f7:5a:8c:
         e5:40:09:a9:84:c0:5e:79:81:0b:e7:e0:9d:39:50:db:93:04:
         fd:ae:ac:11:49:ef:76:e3:86:a0:cf:a0:0f:bd:7d:72:26:67:
         d8:97:e6:52:f1:b2:b0:b9:67:df:20:93:18:25:ff:c4:7c:7b:
         2a:3f:e4:5e:00:2d:e0:83:a9:d3:de:f2:b2:3e:f0:6e:bb:09:
         34:b0:c5:23:d2:07:00:60:fd:d4:7c:51:f4:1e:61:28:00:f5:
         23:26:f1:54:1a:cd:ba:02:41:2c:f6:d5:82:88:5a:90:f1:5e:
         45:31:40:46:4a:82:76:33:ec:16:23:51:cf:e4:1a:87:8f:76:
         95:e6:5e:85:58:73:70:6f:3c:ed:e3:19:b2:e6:5c:23:8a:b3:
         d7:c7:88:12:3d:24:2d:81:d7:e7:ea:38:30:f8:a7:55:5b:f2:
         08:45:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:28 2026 by rpki-client