Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/6fd46740-2fef-3494-b255-0c1aef4d0bd6.roa
File:                     6fd46740-2fef-3494-b255-0c1aef4d0bd6.roa (raw, json)
Hash identifier:          rFX578s6euGxHqFzN5VmH8jf7KluTwwTLxieGk20nxQ=
Subject key identifier:   AE:45:D1:C3:A3:A8:6B:E3:0B:70:C3:47:D6:15:38:0E:D2:94:52:77
Certificate issuer:       /CN=c281b0a3-3805-4846-a1fe-91a9aacd11a8
Certificate serial:       010D0C9F4328584D3DFF867D0EADB60D18E85A00
Authority key identifier: AE:5E:68:44:B7:7B:5E:CA:7D:7A:55:AC:7D:9E:F4:69:26:48:0D:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/6fd46740-2fef-3494-b255-0c1aef4d0bd6.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     20071
IP address blocks:        23.138.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:86:7d:0e:ad:b6:0d:18:e8:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c281b0a3-3805-4846-a1fe-91a9aacd11a8
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=16fd3936-8cca-4758-9063-bafd36c364c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:62:96:73:13:f0:ef:e1:26:0e:55:b5:a4:
                    e8:38:af:28:8b:5f:ea:81:6a:d8:a9:e5:e5:c4:fd:
                    ab:c5:60:c1:f2:9f:cd:ff:aa:92:70:cc:b6:8a:64:
                    ec:35:14:3a:b1:5b:9f:af:ce:75:80:2f:8d:ae:8e:
                    58:0c:fa:ea:a3:b0:89:9d:c4:ac:51:00:90:23:59:
                    21:35:5a:72:1d:fb:47:7c:3e:00:85:5e:09:5d:44:
                    d4:91:cc:a5:ed:b3:7c:a2:c4:0f:3d:56:a8:9a:69:
                    19:65:d5:2e:96:68:2e:e4:1f:9a:df:06:05:7a:b4:
                    af:54:d2:14:7b:93:bc:d6:1d:7e:5c:48:10:bc:b8:
                    20:91:92:db:a7:6f:9d:87:92:19:4f:c4:bb:ed:c9:
                    61:b0:12:dc:87:d9:4e:a6:1e:2d:ae:8e:08:7a:75:
                    ed:fa:67:d1:23:3a:49:f9:be:a8:9a:e5:7f:9c:ae:
                    e4:4c:82:de:29:f4:4b:69:42:c6:b2:30:27:88:cc:
                    10:1b:b1:35:1c:8c:45:0b:4e:fa:02:4f:0f:8a:dd:
                    c5:20:74:4f:80:fb:0b:f2:68:62:84:07:5d:86:5f:
                    8d:d8:73:6a:9a:ff:50:1d:b7:b1:1c:e2:fb:c0:37:
                    5c:36:8e:aa:5c:16:c3:7c:42:93:fb:fa:89:0c:76:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:45:D1:C3:A3:A8:6B:E3:0B:70:C3:47:D6:15:38:0E:D2:94:52:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/6fd46740-2fef-3494-b255-0c1aef4d0bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5E:68:44:B7:7B:5E:CA:7D:7A:55:AC:7D:9E:F4:69:26:48:0D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:f7:77:87:f3:6f:6c:56:b1:46:60:85:27:92:9b:e5:2c:
         66:6c:c3:09:3a:d2:87:d0:a3:2c:2d:fb:76:67:84:40:e7:99:
         04:39:bf:d1:de:f2:46:fa:eb:63:40:68:16:44:63:3b:ea:a7:
         f1:c1:60:c7:e2:f8:33:08:30:25:3a:70:c5:dc:c8:7c:1a:1f:
         11:f6:1c:b6:94:50:04:0c:5b:41:7a:58:5c:bb:38:e5:0d:28:
         99:3e:c2:1e:ee:9f:4d:bd:46:ad:87:17:71:c3:e6:b0:a7:1b:
         8b:6f:86:ac:62:c1:c0:90:cd:ce:ee:d6:e9:ec:86:bb:8d:83:
         26:0f:8c:bc:1b:0f:69:51:c8:9c:61:98:02:33:17:f4:7a:5b:
         3f:0d:9f:5a:3f:63:0a:8d:3e:fa:0b:a4:c3:ba:b7:b4:0e:41:
         43:cd:6f:82:e7:3f:85:c5:2d:2e:03:4a:e5:a6:38:ba:bf:62:
         16:dd:53:49:5a:26:73:1e:32:2b:5e:d6:2a:d2:ea:af:9c:43:
         67:b9:c8:c5:2d:1a:2f:55:f1:f0:a7:e8:2c:72:7b:3f:b8:51:
         5b:b5:61:0a:19:e2:29:04:73:c8:74:d7:1f:cc:6f:29:64:15:
         80:fc:a7:d5:6a:1c:48:d5:0c:68:38:74:60:1a:ba:9e:ef:e0:
         cb:76:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:50 2026 by rpki-client