Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a2bcaa36-6b27-3e77-b4d1-ccfba18d808e.roa
File:                     a2bcaa36-6b27-3e77-b4d1-ccfba18d808e.roa (raw, json)
Hash identifier:          9ubGr6RmwfjCRUyI8o6X6Yq9nT7DKSA60RE5N61/1Ko=
Subject key identifier:   5C:BA:A0:C5:EA:E5:1B:FC:F5:DA:BA:1B:EA:C0:DB:FB:2F:F5:D0:00
Certificate issuer:       /CN=a24c9f40-601b-4bb8-8c62-250bf812fea9
Certificate serial:       010D0C9F4328584D14AF5E8078321D9DD18DF780
Authority key identifier: 46:D4:B2:A8:A7:A7:BA:3B:72:D6:6D:9E:48:23:5B:CE:83:6F:16:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a2bcaa36-6b27-3e77-b4d1-ccfba18d808e.roa
Signing time:             Fri 06 Mar 2026 17:51:05 +0000
ROA not before:           Fri 06 Mar 2026 17:51:05 +0000
ROA not after:            Thu 04 Jun 2026 16:51:05 +0000
asID:                     1097
IP address blocks:        23.152.68.0/24 maxlen: 24
                          2602:81c:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a24c9f40-601b-4bb8-8c62-250bf812fea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a24c9f40-601b-4bb8-8c62-250bf812fea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:af:5e:80:78:32:1d:9d:d1:8d:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24c9f40-601b-4bb8-8c62-250bf812fea9
        Validity
            Not Before: Mar  6 17:51:05 2026 GMT
            Not After : Jun  4 16:51:05 2026 GMT
        Subject: CN=643a9372-174a-46b4-9df1-9cfdf2579af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:d4:d3:f2:a4:2a:10:ef:6a:01:04:7f:f0:
                    7d:c4:67:25:40:90:d9:23:cb:27:ff:70:4b:d6:1b:
                    a3:aa:34:5d:6f:17:db:76:d2:b9:37:e0:bd:fa:02:
                    41:b2:23:0e:55:08:dc:1d:39:f3:e8:bf:2b:3a:8a:
                    c3:65:ad:15:41:27:bf:f7:f9:2f:2e:01:fb:04:9f:
                    b7:81:5e:65:bb:a4:0d:5c:76:81:34:d3:de:86:15:
                    9f:fa:0f:43:3d:0c:98:ac:4c:2d:57:8e:6c:77:ea:
                    5f:07:53:a5:10:29:01:74:c7:66:74:d0:24:af:e9:
                    5c:9d:a9:b6:4d:01:5c:34:12:32:45:00:ee:f9:f8:
                    37:cd:a3:ba:82:6e:13:98:2d:9a:60:9a:d4:f0:57:
                    1f:01:9b:b5:3c:77:30:3c:2d:f8:6b:d9:4c:91:0d:
                    4b:ed:b8:bd:32:72:cd:8c:bd:b2:41:6b:84:43:07:
                    48:a7:f3:f1:92:5f:ed:aa:2b:81:ef:db:b0:95:01:
                    17:ee:6d:aa:36:0c:30:5b:f0:c1:da:e5:19:0e:f7:
                    da:a7:34:51:e0:f7:14:5a:57:ea:d7:f3:82:d0:92:
                    ea:8e:d7:e8:b4:ab:bf:d9:dc:d8:32:15:26:70:7d:
                    d3:70:94:ff:80:ba:00:d6:5b:63:cb:77:b4:4d:e2:
                    3f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BA:A0:C5:EA:E5:1B:FC:F5:DA:BA:1B:EA:C0:DB:FB:2F:F5:D0:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a2bcaa36-6b27-3e77-b4d1-ccfba18d808e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a24c9f40-601b-4bb8-8c62-250bf812fea9.crl

            X509v3 Authority Key Identifier:
                keyid:46:D4:B2:A8:A7:A7:BA:3B:72:D6:6D:9E:48:23:5B:CE:83:6F:16:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.68.0/24
                IPv6:
                  2602:81c:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1a:52:96:8b:83:65:32:c2:c9:e7:03:55:af:f5:ca:20:11:
         af:97:dc:5e:9a:d8:27:90:ce:06:5a:78:e8:15:33:a2:95:6c:
         7f:7c:53:55:e8:58:2c:c3:b0:02:a4:87:e3:39:a7:48:08:24:
         b1:e1:e9:e8:4f:2f:94:0b:0f:ad:d7:e5:bb:a0:e9:a3:ec:1d:
         51:74:96:00:c5:3c:76:62:62:84:cf:90:b5:5c:19:82:3c:17:
         63:c7:c8:0d:c9:84:92:b2:d9:2b:15:21:43:0e:07:6f:2d:d6:
         cf:da:0f:82:d3:6f:93:b0:d9:92:02:dd:4f:38:90:cc:66:2f:
         f9:e1:0f:16:c3:47:f2:85:a9:2f:b9:25:22:d6:4f:06:05:23:
         d8:cc:67:23:1b:9a:78:1b:8d:24:f2:56:4f:4b:b8:6f:e8:b9:
         19:3a:c5:59:25:59:3f:d8:ba:07:66:71:3d:ec:7a:7c:83:5c:
         4d:6e:93:0d:15:26:dc:c4:bc:89:29:69:63:b9:cf:24:20:2b:
         a3:c8:43:ad:66:e6:df:58:76:f3:a7:a6:c2:77:f6:5a:27:48:
         a4:d8:da:48:cb:a2:d3:85:70:71:df:e2:f4:c7:a4:29:58:b7:
         ed:56:c1:d7:41:8e:e5:ad:ac:c2:b0:aa:ff:d4:0e:12:6d:92:
         7d:09:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:12 2026 by rpki-client