Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa
File:                     c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa (raw, json)
Hash identifier:          k2qWckWregdZrtYkEbygrKNs7joUcESYaXfj9AzHmxI=
Subject key identifier:   44:22:EF:CE:85:BA:95:98:E2:56:37:68:DC:B5:80:F7:14:5F:E2:4A
Certificate issuer:       /CN=55263d01-2075-432b-94d1-01f0c1c34295
Certificate serial:       010D0C9F4328584D100CF3F20B9F32BC9283FE80
Authority key identifier: 2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     401631
IP address blocks:        23.133.68.0/24 maxlen: 24
                          2602:f71f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:f3:f2:0b:9f:32:bc:92:83:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55263d01-2075-432b-94d1-01f0c1c34295
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=622bdabc-54b8-4d1e-9d98-2efa5942b91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:ef:9e:e8:fa:a6:a3:8f:18:ee:36:99:5a:
                    f9:84:96:04:0d:ff:5c:97:d7:8e:4c:45:80:3d:27:
                    79:40:64:dd:76:1e:87:5e:bf:55:c2:0f:8f:f1:a2:
                    10:5b:b6:c4:ba:ab:f2:77:dd:a3:32:3e:03:2a:b3:
                    99:c6:82:aa:c8:ad:3d:fa:70:30:92:f5:7c:10:f0:
                    25:46:45:53:82:68:9b:be:77:41:64:93:dd:ed:74:
                    b8:64:3e:bc:cf:d6:10:a0:2e:32:1e:1b:aa:16:3c:
                    f2:27:de:b0:e9:f3:42:2c:69:2a:a8:0e:74:02:34:
                    f1:00:dd:37:c3:21:71:63:f2:a1:ce:b8:41:93:91:
                    c5:de:40:b5:f0:29:57:06:b5:bd:a8:01:69:8a:1e:
                    f8:22:a6:42:d2:14:b0:32:9f:87:23:96:25:d1:25:
                    62:72:f2:b1:8d:f7:a8:4f:53:b6:68:80:5a:11:c9:
                    ed:2e:d8:99:a2:9f:dc:ed:2f:2a:95:c4:12:46:97:
                    c2:02:9f:ab:00:63:13:28:01:d0:b0:2c:93:c8:2a:
                    2c:b9:e7:fb:43:8e:69:0c:3c:9e:b5:97:84:d7:b8:
                    ce:c0:54:ef:46:03:48:44:c0:78:12:f0:2f:5f:8e:
                    37:51:34:c7:98:15:b1:60:0a:71:c6:42:17:dc:ea:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:22:EF:CE:85:BA:95:98:E2:56:37:68:DC:B5:80:F7:14:5F:E2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl

            X509v3 Authority Key Identifier:
                keyid:2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.68.0/24
                IPv6:
                  2602:f71f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ab:e9:30:99:7b:ca:de:c2:f4:fd:56:d9:7a:04:7d:20:3e:
         df:e6:0e:d6:3e:59:2c:27:f8:6e:28:3a:fd:c8:f7:56:ca:47:
         1a:5e:df:7f:9d:cc:2b:86:ca:8a:c6:f7:d5:d9:81:0f:c7:29:
         ab:66:0c:36:25:97:ae:d0:bd:29:5a:d3:16:45:ab:e6:00:11:
         4d:d1:6e:6a:75:45:bf:ba:21:e1:dd:81:c3:01:8e:13:61:28:
         c0:0b:6c:23:20:5e:ee:0a:ca:6a:68:b0:21:8a:bf:b6:3b:70:
         3c:d0:d5:2e:27:0a:35:e6:82:34:1f:6a:95:57:ba:e3:c1:fc:
         a7:24:46:d0:86:0b:89:1a:af:ab:e2:f4:e8:fb:39:9d:87:f5:
         e9:09:b5:87:3f:b2:58:37:95:b9:02:b0:1c:72:79:95:b1:fc:
         bb:95:1a:c4:d4:a3:d5:01:c3:c2:3c:91:5f:9e:e9:20:e8:13:
         25:ae:cd:cd:22:39:a4:59:5b:3a:ff:01:b0:34:a8:30:5d:11:
         2f:85:bf:33:aa:9b:a9:8b:69:13:40:80:94:8f:9e:a7:d3:df:
         d7:d4:d9:f1:cd:85:58:a5:34:c8:9a:cd:6d:c3:8a:02:59:7b:
         e5:73:21:38:5a:f4:93:87:7d:d8:1c:71:71:7f:33:fe:3b:fa:
         19:df:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:38 2026 by rpki-client