Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa
File:                     15d664b5-17e1-32df-bb65-4665ea1a0284.roa (raw, json)
Hash identifier:          BbLlGajI3Lp2sDoXUli4O3z5FjyxfVJ0EiKH0wYJKRQ=
Subject key identifier:   97:19:E1:E2:33:CC:39:6D:5A:91:77:70:6B:0D:AD:B7:A0:63:11:DC
Certificate issuer:       /CN=563a7f22-13a9-45ac-b309-56ee9c8904ce
Certificate serial:       010D0C9F4328584D3FBDC928C92004151B249CC0
Authority key identifier: 3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     401840
IP address blocks:        23.143.108.0/24 maxlen: 24
                          2602:f5c6::/44 maxlen: 48
                          2602:f5c6:10::/48 maxlen: 48
                          2602:f5c6:11::/48 maxlen: 48
                          2602:f5c6:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:bd:c9:28:c9:20:04:15:1b:24:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563a7f22-13a9-45ac-b309-56ee9c8904ce
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=07aa5164-e72a-4ea0-95ea-81b972cb5916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c2:18:7c:c4:ac:bb:6a:1b:e9:94:a4:e5:05:
                    99:dd:75:be:ef:aa:84:bd:86:62:6f:c4:82:29:16:
                    e8:61:cf:4f:00:9c:f4:78:5e:2d:73:42:f8:26:2b:
                    83:07:58:83:ef:21:c1:ba:94:10:0c:0c:84:18:4a:
                    6c:05:d2:61:3c:fd:33:a8:bf:b0:a3:ec:03:04:3e:
                    e5:26:0e:72:bb:f5:b7:13:61:42:3c:f1:a8:d0:f6:
                    c6:d4:1d:ca:14:24:41:ea:e5:4f:ed:27:62:82:93:
                    41:bd:ae:7f:f0:b4:b1:eb:76:6c:2e:26:ef:5f:4f:
                    1e:c0:9c:32:65:48:cb:c9:80:b9:ba:34:74:97:20:
                    cd:6d:f0:c9:d1:00:72:60:73:6b:f2:60:f7:94:34:
                    b8:9d:74:23:97:b3:ee:4b:c7:5e:a2:88:a5:5b:59:
                    90:c6:9b:bc:a6:47:b9:b9:81:b6:5e:3f:60:83:5b:
                    d4:33:5c:21:bd:90:58:4c:f9:e6:b2:9c:d7:52:8c:
                    c8:3b:54:94:32:21:c7:ed:a3:d5:c3:9a:81:ea:49:
                    c4:c2:a4:da:b2:51:79:6d:4b:70:08:0d:95:0c:3c:
                    b5:75:2d:f7:e7:d2:c5:f1:a4:ae:f8:99:2a:8a:1d:
                    b3:f2:d8:36:cb:80:ae:69:97:f2:03:b7:47:dd:df:
                    2d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:19:E1:E2:33:CC:39:6D:5A:91:77:70:6B:0D:AD:B7:A0:63:11:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/15d664b5-17e1-32df-bb65-4665ea1a0284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.crl

            X509v3 Authority Key Identifier:
                keyid:3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.108.0/24
                IPv6:
                  2602:f5c6::-2602:f5c6:12:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:e5:ba:5f:88:63:ad:41:c7:8f:72:be:e2:b3:e5:a4:5c:d8:
         d5:94:a9:cb:81:a4:ce:26:4f:c6:44:ff:c3:11:f1:bb:51:ab:
         33:24:6d:20:7b:83:82:37:d9:f0:36:44:76:f8:37:95:64:a7:
         6a:0a:f7:7c:ac:93:e8:3c:b9:ea:80:20:f0:86:23:ac:a4:7e:
         db:e5:3a:4c:4e:e8:5c:18:c8:3a:ef:17:8c:6d:1a:59:b4:55:
         bf:03:18:14:1e:b8:d5:aa:a8:33:65:20:6b:ec:eb:a7:5b:83:
         49:92:74:7c:d9:5c:e4:32:63:9f:17:dd:86:d9:af:3c:1d:a3:
         90:76:e6:e9:b2:14:ab:04:1c:be:e1:05:72:0f:b1:d9:d8:ca:
         e1:91:f9:96:93:2b:55:2e:f8:ad:14:4f:7e:c9:b8:e6:59:d7:
         2b:fe:6f:84:da:88:de:39:fd:ea:20:33:39:72:95:4d:0e:67:
         c2:cf:ed:46:76:5e:9f:f1:61:5a:9f:e4:b6:26:5b:4a:dd:a1:
         fc:cd:c3:d2:5d:21:0a:8e:52:e5:47:47:de:cd:1a:47:7a:76:
         0f:af:52:38:4c:88:94:75:2a:19:57:a0:a2:38:c7:ac:ef:89:
         e3:5c:2c:fb:ee:ea:5c:4f:2e:24:e0:49:9e:73:62:58:5d:ef:
         32:b6:2c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:08 2026 by rpki-client