Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa
File:                     03ba8790-6437-3edb-9920-2755aa532085.roa (raw, json)
Hash identifier:          bBt2ZJKsXXwx7Y4Ml0h9Svcsqb81ZL82KU6XQGRKXuw=
Subject key identifier:   0A:ED:81:0A:21:3B:B1:DD:47:5D:A3:B4:43:BE:2D:97:16:0C:89:8E
Certificate issuer:       /CN=6cfa06d7-0867-402b-ab91-a8affe4fb964
Certificate serial:       010D0C9F4328584F454280FCD185984B1DA16780
Authority key identifier: DD:20:70:BB:F2:5F:0C:43:B6:EA:69:47:C2:C6:8B:46:BA:56:17:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     63023
IP address blocks:        23.158.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:80:fc:d1:85:98:4b:1d:a1:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfa06d7-0867-402b-ab91-a8affe4fb964
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=c8c70068-f5f8-49b7-95da-9bb9fa6c448a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:b7:fd:c2:88:ce:3c:9f:32:d1:22:d8:b5:
                    f3:41:63:0a:1f:66:38:06:71:0a:bc:d8:d3:77:85:
                    37:95:1a:90:ac:a1:7c:13:60:ad:f6:88:c4:07:ab:
                    ce:7d:72:2b:dc:9b:a5:4c:50:ef:8e:b6:ac:a0:b4:
                    f2:36:24:b0:65:a2:c1:d5:1a:4c:40:98:43:99:26:
                    1c:a1:aa:65:f4:3e:43:a7:94:75:cb:94:e1:82:9b:
                    40:64:fd:d4:8b:e7:76:67:40:ba:5c:82:ae:81:fb:
                    a4:c1:f4:35:ae:5f:ea:9c:9d:a1:2c:b8:15:86:36:
                    54:e6:ce:ee:a3:ea:af:55:95:21:5f:f3:b1:48:bb:
                    47:b0:08:50:7f:86:ce:09:2a:83:9b:77:0b:f6:90:
                    5e:28:3c:34:45:e6:fa:74:79:ff:2c:63:76:1c:0e:
                    f8:e3:c1:50:ec:75:e3:f7:dc:51:d1:3a:06:b3:e6:
                    f2:20:17:53:f7:f7:4a:cc:4f:73:d3:7c:45:65:9a:
                    50:6a:ee:54:63:84:db:65:7e:27:58:3b:e3:91:b4:
                    fc:16:0f:10:c9:85:71:29:b9:57:4b:24:c7:06:f4:
                    1a:b3:e5:bc:c8:50:8e:b8:f4:fc:95:6d:8a:2d:c9:
                    d4:38:1c:da:7f:03:22:ee:f0:6f:55:08:8a:86:67:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:ED:81:0A:21:3B:B1:DD:47:5D:A3:B4:43:BE:2D:97:16:0C:89:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.crl

            X509v3 Authority Key Identifier:
                keyid:DD:20:70:BB:F2:5F:0C:43:B6:EA:69:47:C2:C6:8B:46:BA:56:17:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:99:5f:dd:9e:34:31:59:a0:d4:1c:f1:32:e8:d4:f3:8e:a0:
         e8:99:8f:f8:fe:a0:db:5b:e2:7f:b9:a7:d6:74:3c:4b:52:a7:
         6f:3d:d3:4b:72:c2:9a:57:2b:ae:2b:d8:9b:82:58:09:e4:10:
         e6:db:bf:d5:0f:c8:19:d3:a7:2f:0f:ef:97:56:67:b8:e5:73:
         0f:1f:41:ed:77:07:03:74:0f:b0:48:78:cf:98:24:fc:20:18:
         56:7e:51:50:e3:06:47:1f:8a:fe:2c:e1:45:c4:ce:78:b7:47:
         fd:5b:30:fa:6b:31:3a:1a:b8:f0:79:c8:6a:2a:f9:63:5f:a2:
         3f:61:53:8e:c9:d3:1c:73:51:75:bf:b8:37:86:06:fb:3b:02:
         b1:86:00:a1:42:56:8e:8e:74:06:74:52:31:b6:43:e8:89:7a:
         5f:e0:1b:01:af:29:6b:f2:09:9e:fd:5c:69:92:47:e1:32:95:
         94:73:17:b2:44:1b:4a:86:93:64:fc:25:f5:36:dc:88:a1:3c:
         e4:4a:76:64:21:ac:14:2d:bb:c3:d4:65:ad:e0:19:27:dd:f1:
         14:82:9f:40:35:f5:3d:d9:31:29:d0:9b:bb:e6:a1:15:71:e6:
         61:98:38:0b:88:43:fd:66:65:f9:a9:32:60:2a:20:a4:2e:27:
         ac:1a:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:58:43 2026 by rpki-client