Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/d8a27e6c-a021-3ddf-88d2-9eb2237406d5.roa
File:                     d8a27e6c-a021-3ddf-88d2-9eb2237406d5.roa (raw, json)
Hash identifier:          rmNKpGV6H02OLWqOs8AU51JGWpJw4Kz72aK5S6nd3B4=
Subject key identifier:   18:10:FD:64:99:2B:E7:08:1F:49:12:ED:10:67:D6:52:E5:2E:2D:1A
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584D186CFC9F2965BCA85E3E4000
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/d8a27e6c-a021-3ddf-88d2-9eb2237406d5.roa
Signing time:             Sun 08 Mar 2026 02:00:31 +0000
ROA not before:           Sun 08 Mar 2026 02:00:31 +0000
ROA not after:            Sat 06 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        207.202.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:18:6c:fc:9f:29:65:bc:a8:5e:3e:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Mar  8 02:00:31 2026 GMT
            Not After : Jun  6 01:00:31 2026 GMT
        Subject: CN=3acd28aa-dcc6-4320-92f3-a5fdcd73623e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b6:72:ca:7f:f3:80:1a:9a:d9:fe:01:53:64:
                    37:df:ee:26:c6:54:32:15:4c:73:1e:fb:9a:2d:11:
                    cb:da:94:15:d8:1e:83:9b:51:7a:95:39:e9:a3:5f:
                    23:49:1e:ce:34:1d:9e:a1:60:d4:9c:f5:c3:36:4c:
                    93:50:14:85:81:2f:d3:50:38:47:57:ff:b1:4c:4a:
                    4a:59:3d:55:46:cf:bc:24:70:25:ff:76:10:d9:21:
                    b8:50:0e:87:57:f5:b4:74:18:f3:f7:50:46:88:c7:
                    0b:bf:8e:8d:7f:23:c2:dc:71:a9:ab:d3:38:33:ee:
                    2f:15:48:c3:3e:78:b8:df:43:42:0c:80:c0:8f:17:
                    e6:66:81:0c:9f:d8:90:5c:1c:9d:d8:1c:4e:70:06:
                    1c:e6:b8:6c:b3:c5:07:ef:d1:93:2e:16:8b:51:85:
                    2c:a3:fa:fe:ea:8d:06:44:ea:5f:8f:66:ef:e1:7a:
                    5f:8d:91:42:43:9d:69:4b:27:4c:64:cb:13:22:02:
                    da:c0:5a:b8:c0:d3:e6:e6:3b:95:32:d7:ab:d8:62:
                    b3:84:0a:a8:4f:ca:85:00:88:5b:6f:49:e1:18:ea:
                    f8:77:ff:4e:41:e0:83:4f:b1:30:84:73:ed:bc:34:
                    c0:d3:b9:87:99:9e:53:00:be:45:d3:f6:61:76:88:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:FD:64:99:2B:E7:08:1F:49:12:ED:10:67:D6:52:E5:2E:2D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/d8a27e6c-a021-3ddf-88d2-9eb2237406d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:4a:e7:ae:f2:81:c9:20:06:8b:09:e9:b8:b4:cd:a1:44:
         53:4e:66:80:a7:ab:d3:71:8f:77:5b:e8:84:47:92:6c:93:ce:
         83:4c:8a:f4:4e:8e:2c:9c:f1:f6:4c:e3:2a:f6:ba:f9:13:8b:
         bd:84:d2:47:ea:99:06:28:5e:0f:0e:47:1c:04:c6:d4:5c:7c:
         80:79:82:d0:7b:23:cb:16:8e:a4:ce:82:a7:57:6f:9c:50:64:
         29:8c:a0:c3:74:98:65:bc:7b:3a:d6:d3:77:91:5a:2a:aa:51:
         bf:9e:8b:f1:9f:94:e2:a8:cb:4d:76:54:cc:30:a2:12:7a:54:
         b0:53:b4:fa:6f:a6:0c:97:53:1b:81:00:e3:d2:1e:10:09:a1:
         6f:e8:d2:c4:aa:96:10:16:fd:68:42:de:df:ab:7a:c7:7a:6b:
         7e:1b:94:e0:8d:0f:7c:e8:8e:9e:6c:a8:c4:a5:08:83:16:c6:
         8c:7b:25:06:f9:5e:16:16:13:0c:ad:56:e2:15:a1:3a:d0:19:
         fb:6e:50:99:9c:2d:1f:e0:dd:5f:41:48:57:80:a0:62:c9:9e:
         87:01:85:9f:3d:43:a0:3a:1b:69:41:bc:35:f3:57:66:01:47:
         50:ef:d4:5b:af:1a:0b:87:63:a3:c3:d4:87:ae:40:10:d4:c7:
         5a:28:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:55:17 2026 by rpki-client