Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa
File:                     cea2ec17-5d07-3b0a-8477-302a4c9631df.roa (raw, json)
Hash identifier:          /GIxRu9DMbEpNJkbh1/SaIj7zfayklgAnikuQtNPBpM=
Subject key identifier:   D2:48:80:6B:27:6F:70:08:FB:EC:40:43:6E:0C:3B:C1:10:78:7B:92
Certificate issuer:       /CN=16b561b0-e462-4e18-a6cf-e910426a13d0
Certificate serial:       010D0C9F4328584D4A8FB8B38E4A325BDDA57A40
Authority key identifier: E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     394590
IP address blocks:        23.144.104.0/24 maxlen: 24
                          2607:ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:b8:b3:8e:4a:32:5b:dd:a5:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b561b0-e462-4e18-a6cf-e910426a13d0
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=8b76e013-f08b-4847-b8eb-55d377ebf03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:76:a9:19:9c:04:ed:1a:8b:55:5a:5b:e2:89:
                    8c:ee:af:23:62:7c:62:b5:38:e1:76:8d:e1:8b:f9:
                    b4:34:ff:d8:14:86:b5:4b:01:df:71:86:b3:53:a4:
                    2c:8a:f9:c4:ee:3a:ce:d5:d0:7c:6f:f3:08:e6:8a:
                    7e:1e:38:ca:16:b0:af:53:c8:d0:3a:d1:f5:8e:c3:
                    16:a9:d6:b7:13:53:a1:66:4a:be:e4:39:d9:93:ad:
                    c6:c4:1d:4d:31:72:16:03:ce:33:97:80:cf:e0:a5:
                    df:be:ce:30:0c:b8:89:13:14:41:36:a1:3f:65:60:
                    ef:82:a5:52:52:c4:91:af:4d:9c:fe:e1:40:a2:b4:
                    ac:cc:a1:ba:6a:6b:95:de:77:d2:32:df:63:70:54:
                    46:7e:76:a7:dd:96:68:2f:c1:1b:2a:f6:12:67:da:
                    5b:91:4c:43:ec:e3:ea:74:3f:d0:3a:3d:c4:54:e9:
                    56:6b:58:7c:9c:4d:75:94:29:37:26:be:61:8a:7b:
                    bb:d8:eb:f7:3a:4f:15:d7:ee:fe:4f:aa:db:bc:88:
                    85:72:8c:7c:e9:58:3c:32:d3:ca:15:6f:66:d9:56:
                    6b:74:fa:e0:23:bd:5f:4e:81:3d:2d:e5:8c:ba:55:
                    92:6e:f4:35:7b:c2:13:4a:b1:7d:74:9f:fb:b4:6c:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:80:6B:27:6F:70:08:FB:EC:40:43:6E:0C:3B:C1:10:78:7B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.crl

            X509v3 Authority Key Identifier:
                keyid:E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.104.0/24
                IPv6:
                  2607:ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:a3:07:4a:3b:ab:c4:42:a3:0a:8f:3a:05:88:e7:85:29:
         77:5e:53:25:c6:83:0c:f2:4e:f9:02:71:e9:f3:2d:9a:48:a9:
         e2:9f:20:b6:81:1a:80:7b:f5:c2:d4:41:0d:86:27:29:78:75:
         89:35:31:94:a5:ca:8c:05:50:9d:40:00:0f:66:f0:81:89:58:
         c6:15:bc:7c:eb:bd:21:6b:60:90:65:21:48:84:73:a7:06:4a:
         34:ec:b4:9e:0d:13:36:d7:9c:0c:b9:06:82:fa:8c:89:de:dd:
         ac:eb:86:e6:ba:f1:ec:a7:0d:3e:76:51:8b:60:b2:69:7c:dd:
         04:2d:4a:a3:ea:b4:c6:fd:97:d5:cb:c5:01:21:93:69:79:fe:
         b0:8d:b6:fd:88:4b:03:5e:ec:d9:1c:ca:83:68:df:af:86:7f:
         85:0f:d9:08:ce:8b:98:4f:a0:db:9c:2e:92:f4:60:e1:e2:13:
         c9:b7:86:f0:6d:78:56:a4:9c:2a:fb:f8:2b:8b:71:3b:6e:fc:
         08:c1:43:ee:e9:70:5e:2c:71:9f:ae:9b:9e:43:e6:70:07:40:
         a8:da:82:9e:11:7e:1b:76:98:cd:6b:5e:94:67:af:9e:9f:5d:
         26:be:b0:8f:7a:84:b5:72:ba:16:23:72:b9:12:ce:3a:ef:73:
         d8:9f:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:23:00 2026 by rpki-client