Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa
File:                     46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa (raw, json)
Hash identifier:          K6a4YBJh+XNtQoAziZThSp6uS6o/pOyWbd5DLn7zAhU=
Subject key identifier:   87:DF:40:CE:44:FB:3C:E3:E4:C0:17:42:93:90:A0:C9:A0:61:72:9E
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584D100D023D351C0F5798935380
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        23.153.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0d:02:3d:35:1c:0f:57:98:93:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=a9b4e7e7-9713-41e4-95ee-27561871d576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:54:a2:53:f0:84:51:96:ec:58:33:06:b1:af:
                    10:fb:0c:eb:cb:a2:55:b1:74:61:04:aa:fc:78:c4:
                    eb:8a:82:80:fd:49:f3:e2:a2:85:1f:47:64:52:38:
                    96:c9:65:08:84:65:a4:37:55:e0:fe:8e:97:ee:6c:
                    86:21:6a:0f:63:e7:13:49:2e:c6:7f:05:ed:46:b7:
                    66:c6:37:54:09:c4:e4:d2:3b:cc:02:04:a1:f5:8f:
                    b6:94:31:b7:9e:dd:7d:11:4f:8e:a4:94:86:b5:c8:
                    61:d5:81:a8:46:04:af:d4:4f:72:22:28:af:a1:5d:
                    57:1c:f0:8a:9d:06:74:29:5f:2f:93:76:49:dd:5f:
                    ff:bc:60:9c:87:66:a5:24:50:26:b8:cf:7e:36:56:
                    55:bf:5d:e2:26:f5:d8:12:38:9b:5a:89:5f:8c:a8:
                    c3:8a:d8:0c:ca:5d:91:3c:3d:e7:0d:e2:6e:14:8d:
                    14:46:bb:e1:cd:6b:bb:b7:75:7c:84:b3:38:40:ce:
                    ac:e6:6c:22:63:50:10:11:59:c9:aa:ea:1d:9c:3d:
                    4e:38:95:10:f4:3c:5d:be:6a:10:ec:29:bd:3b:1d:
                    ed:7b:8e:1c:fb:0a:4a:63:68:9c:e0:d9:e0:5b:7e:
                    f1:56:1a:6a:0b:9c:c9:3b:00:cb:93:54:10:db:6f:
                    ed:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DF:40:CE:44:FB:3C:E3:E4:C0:17:42:93:90:A0:C9:A0:61:72:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:89:1d:24:d9:4a:ef:59:01:32:97:6f:01:63:6f:2d:87:af:
         23:90:a5:68:b1:d8:97:59:50:5d:fa:f5:d4:3d:8e:ce:b5:8b:
         77:11:02:b9:d3:63:e3:51:da:38:cd:4f:10:9d:5e:d4:1c:f8:
         1d:e2:89:25:8b:aa:6a:0e:14:f3:bd:7c:86:cd:47:e1:20:19:
         8a:45:1b:b2:89:ad:04:21:b3:dc:bb:95:52:ed:6e:fc:65:df:
         96:b2:6f:88:87:42:14:bc:12:77:19:97:9f:4c:8f:8b:ff:14:
         34:35:16:89:4a:78:d6:6b:55:1d:21:38:c0:3a:1e:7a:47:99:
         d3:ae:2f:d3:03:68:3d:32:8d:9f:de:dc:e7:14:a0:55:ef:81:
         36:f7:1e:3a:a4:b7:de:2c:f7:89:eb:2e:4c:f7:63:bc:44:c3:
         dc:6c:6d:36:d4:07:b3:68:04:4e:b1:26:6b:2c:d9:bd:14:c7:
         85:46:4f:2b:a1:66:4a:73:89:1a:ee:91:aa:51:88:e1:29:b6:
         41:46:6b:56:e3:21:fe:cf:15:06:6b:42:10:ac:f2:3d:da:9a:
         7a:67:1a:8c:54:e2:79:45:88:11:ba:b9:44:d7:f5:74:41:77:
         49:a8:a4:0f:e4:de:98:64:8a:ac:22:4f:c7:98:5b:29:4d:7b:
         30:be:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:06 2026 by rpki-client