Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7bbfbab-5611-376e-9823-f2dd0113e42b.roa
File:                     c7bbfbab-5611-376e-9823-f2dd0113e42b.roa (raw, json)
Hash identifier:          86R+jvZk+/arK14hLrsqoQyn0geXrbodUoh23EnBTxM=
Subject key identifier:   9C:B6:F3:7C:B9:47:B4:E1:69:82:AB:F8:8B:F4:12:AE:C5:B3:3D:81
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1F4A2EAE2FF7802355C09080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7bbfbab-5611-376e-9823-f2dd0113e42b.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.215.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:2e:ae:2f:f7:80:23:55:c0:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=c7c93804-dc0c-476f-9154-0773e502fa8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1e:42:6f:d7:89:d8:0c:19:09:a5:14:41:ed:
                    f3:79:4e:dc:1d:76:99:e5:19:4d:53:34:e3:c2:25:
                    1c:2e:f5:75:7c:4b:f0:4f:70:8a:cb:f8:4d:fb:14:
                    d9:2a:be:4c:a2:47:84:68:eb:78:c2:a4:5a:42:d4:
                    3c:0f:19:85:55:1a:10:9a:cf:29:a3:77:0c:14:0d:
                    ad:9b:56:3a:fa:4c:ca:60:a1:81:c9:bc:69:d5:62:
                    69:44:94:49:72:c8:27:7f:4c:b7:b9:6b:37:6e:80:
                    e3:56:20:e0:5e:45:c7:3a:2f:b7:b6:e9:18:60:2b:
                    c2:1d:7b:5b:24:2e:f1:25:bb:61:b6:0a:05:69:9f:
                    df:6e:0d:74:c6:90:8c:de:8d:2e:14:c5:94:73:2d:
                    78:cb:29:a6:dd:c8:4e:dc:da:b1:c5:c4:98:61:86:
                    f3:97:22:f4:81:d4:3b:b1:74:bf:19:5b:38:68:91:
                    7e:e1:c0:b7:16:ff:88:64:a0:ce:8e:0c:44:c2:6d:
                    25:6a:57:64:55:ac:5d:c0:6b:f6:eb:a0:86:c7:71:
                    98:bb:3c:ae:0f:ad:5f:c1:fa:55:c9:1f:59:79:6d:
                    6d:9e:16:bf:e7:9c:10:3f:d0:42:95:c0:05:8a:87:
                    42:bf:7d:e1:8a:85:49:1f:e0:4f:0b:79:4a:de:7f:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B6:F3:7C:B9:47:B4:E1:69:82:AB:F8:8B:F4:12:AE:C5:B3:3D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7bbfbab-5611-376e-9823-f2dd0113e42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6c:2b:ee:88:41:40:32:5c:2e:b0:96:46:b8:51:23:4f:7c:
         8c:73:cd:1f:ba:24:23:59:3e:e3:ef:51:d7:5c:27:45:1a:11:
         50:d2:68:28:8e:93:7c:1d:ea:90:e7:e5:b1:6a:f6:08:02:2f:
         e0:59:90:ec:4a:1d:c9:25:87:dc:e5:39:4b:db:90:43:4b:e6:
         89:2a:a6:90:12:f4:a2:6e:b5:ea:65:9d:7a:2c:8f:e4:d4:04:
         d0:76:f9:0e:50:fc:bc:70:e2:02:ce:87:d0:f8:34:70:e0:b0:
         31:61:1f:ae:dd:3f:c4:88:c7:5c:69:de:39:e0:9b:fe:1c:94:
         a6:ad:be:ec:04:0d:49:19:83:0e:de:3a:f4:14:08:2a:83:0b:
         55:f1:09:90:a1:7f:6d:b8:48:6c:00:e4:c2:77:7f:8c:14:c9:
         c7:67:fa:4f:21:ae:ff:78:1c:15:29:00:6b:47:6e:a8:17:5e:
         73:bb:a6:e8:da:03:d1:13:29:2f:f8:f1:79:46:46:9c:d8:3d:
         23:55:dd:d6:93:58:f6:2b:97:a2:15:81:d2:83:30:4b:51:f2:
         a0:32:ce:b0:d8:a6:b4:36:45:fa:f2:98:87:07:82:35:f2:b5:
         39:70:22:11:e0:50:67:1e:81:02:61:9c:3d:25:3d:f6:d7:12:
         66:3d:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:10 2026 by rpki-client