Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc/e9c3cbc7-f95a-34ab-b1a5-d8a4170dc6ce.roa
File:                     e9c3cbc7-f95a-34ab-b1a5-d8a4170dc6ce.roa (raw, json)
Hash identifier:          X9d6nBFHpPB9Al2p5rh9iSNReo57pz/5qRL/f0HhaK8=
Subject key identifier:   22:A3:DF:D6:47:3D:6F:4F:70:12:0E:80:FE:EB:51:F2:93:48:D6:D8
Certificate issuer:       /CN=604830d2-8b31-440a-894d-3f3dd86fafcc
Certificate serial:       010D0C9F4328584D386A65CCFB43077A90021380
Authority key identifier: 4F:62:64:CF:07:50:DD:91:64:DA:FC:5C:8C:EE:CE:1B:FC:48:92:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc/e9c3cbc7-f95a-34ab-b1a5-d8a4170dc6ce.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     46246
IP address blocks:        23.155.224.0/24 maxlen: 24
                          23.247.188.0/23 maxlen: 23
                          192.150.47.0/24 maxlen: 24
                          2602:fe3d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc/604830d2-8b31-440a-894d-3f3dd86fafcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc/604830d2-8b31-440a-894d-3f3dd86fafcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:65:cc:fb:43:07:7a:90:02:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604830d2-8b31-440a-894d-3f3dd86fafcc
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=97ffb0d2-e903-42fc-af46-3e884de0de7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:25:a2:be:ad:e4:d3:5a:d1:14:b3:7c:5f:
                    3b:84:ae:b3:a9:94:b8:48:a2:8a:ee:29:db:63:b9:
                    e8:57:1c:66:a8:cb:bd:b5:98:c3:7d:07:7a:e5:3f:
                    f2:e4:94:a3:19:0e:29:8e:0c:c3:1b:57:ae:00:fa:
                    bd:6c:e1:00:ce:3c:c8:f0:2c:66:97:42:d1:eb:2f:
                    2d:f0:0d:56:ad:24:13:f0:a7:bc:ae:7e:fe:5b:3b:
                    e5:e3:ab:e9:4b:22:ff:d9:73:2f:d0:fb:d8:19:05:
                    3f:c7:c7:ba:c8:eb:65:d7:1e:07:b5:b5:05:bd:b3:
                    aa:83:c3:24:59:2b:32:33:f4:c6:6a:7c:3d:9c:7a:
                    c3:23:fa:9c:36:10:a4:c0:ed:a1:1b:e4:8d:dd:24:
                    7a:cb:9e:34:6a:e0:29:ab:1c:34:f4:66:f6:b5:81:
                    53:5e:01:65:aa:12:6c:91:8c:e6:be:29:43:f7:30:
                    aa:64:92:ae:d3:26:ce:a7:6b:db:02:02:66:12:d7:
                    32:59:36:fe:11:9a:a2:a9:bc:c3:a2:2f:3e:bc:d7:
                    10:a3:a6:74:ec:c4:f6:5f:83:1e:8e:5d:e0:b4:13:
                    e1:30:da:7f:ff:c3:f2:fa:5f:b8:12:3c:fa:59:7b:
                    08:41:e9:7a:6e:39:01:73:8e:dc:03:37:1c:fe:7b:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A3:DF:D6:47:3D:6F:4F:70:12:0E:80:FE:EB:51:F2:93:48:D6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc/e9c3cbc7-f95a-34ab-b1a5-d8a4170dc6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc/604830d2-8b31-440a-894d-3f3dd86fafcc.crl

            X509v3 Authority Key Identifier:
                keyid:4F:62:64:CF:07:50:DD:91:64:DA:FC:5C:8C:EE:CE:1B:FC:48:92:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/604830d2-8b31-440a-894d-3f3dd86fafcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.224.0/24
                  23.247.188.0/23
                  192.150.47.0/24
                IPv6:
                  2602:fe3d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:26:d7:ae:86:32:34:fb:1f:42:50:13:91:a6:f5:03:0f:80:
         b3:b1:4b:de:d2:38:0f:6c:c7:bf:e9:b6:f2:a5:81:d2:e3:ab:
         00:be:47:a9:c6:ee:74:52:93:61:2d:27:9f:da:f8:f6:ba:10:
         18:30:c0:e3:93:a9:25:c5:72:c7:ad:d7:63:30:b4:3c:c4:ca:
         d1:5d:0d:fb:46:8a:81:7d:93:4a:f6:37:cc:f5:f9:3a:2f:41:
         41:60:ab:f1:24:98:fd:21:22:d9:56:6f:09:29:8e:fb:b8:8c:
         68:89:1c:ea:eb:59:b8:c2:f5:de:6a:c7:94:eb:6d:57:c8:cc:
         02:3c:0e:55:97:c2:73:d1:33:4d:c9:64:77:3e:17:b6:4c:7f:
         bf:6e:5a:2c:5d:40:03:97:34:09:74:07:e7:0b:81:d7:6a:3b:
         4d:82:f6:09:4a:15:72:d0:aa:ae:94:92:06:4f:46:cb:17:4c:
         32:fb:51:1a:dc:11:8e:3e:19:a7:93:48:55:40:79:a4:91:92:
         a0:45:33:05:17:06:d7:72:24:41:a7:59:60:04:f6:09:28:ea:
         2e:a7:df:91:ae:7c:b7:ee:eb:15:e8:5b:7d:5c:d6:72:cf:6e:
         db:83:fc:b0:01:9d:87:4b:5f:6e:45:89:54:cf:d4:07:c2:f0:
         6a:5d:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:20 2026 by rpki-client