Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa
File:                     afecdebc-ec0d-30da-8631-4209f266e536.roa (raw, json)
Hash identifier:          SI8lrTM1nOqOJbbTlmEKKNnrkM1On5ViKzmfy2vuaSQ=
Subject key identifier:   1B:6A:50:AA:EB:A3:48:54:A1:59:C6:D2:A0:CC:34:EC:65:03:5E:AE
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584DD0905396A9A0B87A2608BA60
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     393336
IP address blocks:        23.163.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:53:96:a9:a0:b8:7a:26:08:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=7a02cb54-4e1f-4c8a-b001-c14ace1747de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:ff:63:ec:6b:99:30:af:53:a1:98:5e:09:
                    68:50:d8:80:00:82:f5:2f:b2:9d:2a:c8:05:39:e0:
                    b1:a8:f8:f6:4e:4e:be:c4:1b:9d:05:21:99:d1:03:
                    f4:f9:59:77:11:0e:8b:7e:81:89:ca:35:3b:f4:82:
                    67:09:08:eb:5d:a1:5c:85:61:f7:b7:59:f9:77:62:
                    f0:fd:69:b7:66:4c:da:b8:86:34:1d:46:c8:79:89:
                    6b:6f:bf:08:6a:6b:3f:15:d1:35:e1:3a:33:8e:72:
                    8d:e8:79:14:f0:68:2c:f4:1b:2a:f9:5f:91:4f:bf:
                    c8:8a:68:a3:e2:29:d1:fc:04:c6:ad:ff:c9:21:c6:
                    40:90:a4:b5:57:32:4f:62:c4:18:9b:d9:5c:75:e3:
                    36:55:2a:12:23:2c:59:68:bf:7a:1d:09:9d:2b:12:
                    92:9c:4b:65:ec:f7:f9:39:8b:0d:a5:0c:03:6a:50:
                    34:6e:2e:85:66:64:91:1f:58:a0:11:3e:62:e7:a6:
                    50:d0:e4:43:93:22:2c:b1:8c:52:78:e6:4e:9c:21:
                    de:e3:8c:b0:32:17:78:e0:ea:fa:9d:10:f2:9e:99:
                    2e:fb:93:8c:3c:e7:bd:04:aa:d5:8f:4d:ca:8f:bc:
                    e6:fb:f6:6a:ed:33:55:df:95:a6:e6:4b:58:22:6c:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:50:AA:EB:A3:48:54:A1:59:C6:D2:A0:CC:34:EC:65:03:5E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:11:f5:57:6e:a5:4f:1a:1b:e8:f8:63:e5:a4:47:96:d7:
         93:97:4e:dd:98:dd:76:af:e9:f2:27:5b:5d:0c:49:5f:a4:22:
         3a:a1:9e:06:86:91:cf:96:f8:ed:1e:20:41:64:48:8b:08:90:
         34:52:10:a6:d2:46:cb:3f:6a:2f:ad:04:92:49:cc:43:12:f4:
         dc:8d:36:f1:9e:aa:65:66:cb:8f:27:89:1a:bb:bd:24:73:3b:
         61:58:2c:9e:c9:df:3b:1d:a1:b4:81:e7:76:3c:5f:ed:60:22:
         05:4f:0d:cd:2b:92:4f:e2:ba:09:cc:a2:f0:c5:24:4f:71:40:
         ee:7a:dc:55:81:8e:43:d1:2f:37:f4:39:30:bf:4e:62:7f:47:
         a2:a5:57:d1:93:40:3f:8d:1f:ff:06:5a:6f:49:a1:07:e8:bc:
         7b:bc:bb:52:a1:20:2f:50:89:a1:e5:98:1f:a8:71:6f:41:1e:
         c1:0a:7e:16:22:3b:a9:65:44:89:85:70:92:d1:85:f3:d0:1b:
         97:c3:6e:0d:a4:23:3b:f0:93:17:48:9e:b7:68:72:e7:32:c7:
         85:7d:85:73:c1:9a:e3:bb:1e:ed:cf:22:e5:63:9b:6d:48:90:
         b5:92:1a:33:b7:8a:ce:25:98:a5:a8:36:ed:7f:19:18:6e:f5:
         1a:fd:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:48 2026 by rpki-client