Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6152557b-1253-3e99-9a17-7aaf7684968c.roa
File:                     6152557b-1253-3e99-9a17-7aaf7684968c.roa (raw, json)
Hash identifier:          YhzLoCrH0SwrHAt0dYhu+ooioFlHhuPjadZibkJE0nM=
Subject key identifier:   99:EE:CA:1D:10:5B:49:18:7D:6D:ED:55:73:3F:88:A6:6B:71:10:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D4A8FA2B91717C9A73C531780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6152557b-1253-3e99-9a17-7aaf7684968c.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     21342
IP address blocks:        23.56.160.0/24 maxlen: 24
                          23.56.161.0/24 maxlen: 24
                          23.61.199.0/24 maxlen: 24
                          23.67.52.0/24 maxlen: 24
                          23.201.98.0/24 maxlen: 24
                          23.201.99.0/24 maxlen: 24
                          23.201.101.0/24 maxlen: 24
                          23.211.61.0/24 maxlen: 24
                          23.211.132.0/24 maxlen: 24
                          23.211.133.0/24 maxlen: 24
                          23.216.52.0/24 maxlen: 24
                          23.216.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:a2:b9:17:17:c9:a7:3c:53:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=9a08e099-cf20-46a9-a030-e3e244fe4c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:93:30:85:ea:2e:fe:06:b1:dc:65:96:1a:4f:
                    89:5d:62:0e:6d:8f:45:32:88:53:9e:6a:0a:d1:cb:
                    f0:9a:08:a3:96:a8:74:0a:56:65:e7:b6:a8:20:00:
                    1a:46:bb:be:cd:cf:7e:c7:14:8e:59:bd:96:0a:c7:
                    52:30:9e:84:76:45:7c:92:2d:39:79:f6:25:af:62:
                    f6:47:29:ee:2d:ec:df:5e:90:8f:5a:70:d9:c8:5f:
                    09:ac:18:da:cf:56:22:46:3b:65:9c:df:48:2a:4a:
                    18:97:61:5d:34:c1:ed:46:70:59:20:e9:34:f5:5e:
                    7d:97:b1:41:7e:36:a0:af:94:29:a5:22:6a:2d:f6:
                    02:4d:63:ca:8c:02:93:1a:03:59:b6:89:ac:3b:32:
                    9a:fc:5d:da:7f:37:f5:3c:92:90:15:49:f4:d7:d2:
                    13:5b:c5:04:f7:ca:1c:ec:3f:b4:69:4f:14:61:e9:
                    1c:5e:13:a1:24:51:c5:7c:fa:88:28:90:9c:2f:ed:
                    95:20:52:ae:c6:bf:1c:28:0a:1d:61:01:8e:b1:8a:
                    d7:96:0e:ae:e5:77:95:6b:ba:82:c7:79:4e:35:8f:
                    76:34:34:e7:78:b0:08:83:8b:01:d7:b8:d8:69:ef:
                    90:ba:82:ad:a7:cf:a0:7c:00:61:42:e0:83:0e:a2:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:CA:1D:10:5B:49:18:7D:6D:ED:55:73:3F:88:A6:6B:71:10:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6152557b-1253-3e99-9a17-7aaf7684968c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.160.0/23
                  23.61.199.0/24
                  23.67.52.0/24
                  23.201.98.0/23
                  23.201.101.0/24
                  23.211.61.0/24
                  23.211.132.0/23
                  23.216.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:28:0c:41:c1:fd:8c:d2:65:93:7c:e2:95:f8:4d:53:a4:dd:
         b5:cc:af:94:1d:fc:ba:95:7d:37:99:5d:d8:22:b4:0f:e4:a7:
         f0:d1:69:8a:ac:74:1f:4d:07:e1:fd:bd:f3:af:89:eb:05:f9:
         e2:59:74:79:a6:92:1a:63:73:cb:1f:eb:ee:3c:4a:dc:f1:94:
         82:1d:11:83:1b:ee:1f:ea:f2:56:c5:04:57:d8:1a:ef:71:5f:
         97:31:99:06:f7:44:2f:b5:18:8e:8d:a5:49:eb:03:e4:37:4d:
         7f:c4:1e:ae:f7:92:91:3e:52:46:5e:31:d2:e7:f9:3a:2f:f4:
         be:47:73:74:c4:85:ca:6a:03:ce:0f:93:5e:34:6b:4b:5b:45:
         26:8d:fa:cc:92:e8:ba:64:96:02:8d:86:d0:4e:04:e0:a3:3d:
         c1:8d:06:e0:4f:4b:4d:c7:80:30:5f:e1:58:4d:aa:46:79:8c:
         9a:08:d3:b6:5b:5c:05:12:5e:8b:30:c2:01:ab:89:4a:78:52:
         62:71:e5:3a:36:32:3e:cc:10:3b:a7:4e:b1:3a:a3:e3:25:d3:
         f2:a2:b9:e7:76:52:5c:ed:7c:d0:e1:b3:8a:4d:e1:ea:3d:93:
         a2:a8:a9:bc:f1:6b:c9:e0:4b:19:ac:2e:80:59:17:e5:a1:be:
         ea:99:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:42 2026 by rpki-client