Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa
File:                     0ef2162e-9403-3c27-863e-e2a113212b22.roa (raw, json)
Hash identifier:          KYtH22CWiNvqsp9y6XnfaWLhEvMZJxsvksMYjHHd0Cc=
Subject key identifier:   25:29:31:88:6E:D1:8A:76:0B:C5:0C:3B:9A:54:02:52:79:02:DB:E8
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584D746FBEB4A12A12C53B944B00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     18809
IP address blocks:        64.215.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:be:b4:a1:2a:12:c5:3b:94:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=081f0de2-cf78-4479-8869-91957c27dd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:7e:ac:c8:8a:23:5b:08:bc:e0:fd:53:37:
                    2a:32:e6:08:0a:7a:ba:88:34:e8:ec:14:8e:02:1a:
                    73:ec:dc:9f:a0:8c:16:fa:3b:f9:ec:ab:6e:ee:8a:
                    39:4d:a5:d8:71:6d:35:b7:76:54:a2:8e:8c:7f:1d:
                    58:4d:fc:8a:95:cb:86:fc:0f:69:32:4a:b6:85:b6:
                    54:25:07:c2:91:a4:e4:e7:a8:1c:a4:50:5f:41:89:
                    3c:4b:e6:67:83:3b:ca:ac:3d:05:75:8a:2a:f1:46:
                    ee:0e:4c:86:2d:c8:ca:73:63:5f:aa:a4:10:0a:72:
                    13:c8:12:d9:e3:c1:8a:c1:cd:5d:06:dc:a2:cb:60:
                    eb:7f:03:ea:6d:86:0c:d4:b3:c5:96:73:39:21:2d:
                    51:7d:70:51:e6:94:3d:ce:9c:56:bd:86:96:17:bb:
                    10:5b:56:b7:d7:ea:4c:1c:ed:22:44:17:94:60:8d:
                    3f:01:ab:04:1c:dd:3b:44:b3:da:ee:cd:c3:0f:ad:
                    65:28:83:a9:7a:c9:fc:92:e7:af:71:b0:6e:d8:8a:
                    e1:f6:76:75:96:c2:ba:d6:fc:c0:10:0b:74:b1:06:
                    43:bc:2a:4d:22:80:52:a3:18:96:05:7f:8e:6f:33:
                    6b:ac:37:5a:cd:4f:e0:87:9d:00:fb:4a:d7:37:ef:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:29:31:88:6E:D1:8A:76:0B:C5:0C:3B:9A:54:02:52:79:02:DB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.215.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:22:88:0f:49:b7:d6:56:cc:f2:90:2a:5a:68:64:3d:f8:13:
         ae:03:8c:a8:78:0d:b0:34:35:6f:17:07:63:be:fc:34:1b:a5:
         1b:3a:61:ab:5e:99:72:5b:f4:47:6a:a1:9e:7e:c5:8f:a9:e5:
         9f:21:37:d6:89:55:e9:fc:66:da:f0:b1:36:9a:5c:1f:d9:2a:
         c0:77:91:a1:fd:2e:b4:cc:df:8f:d5:af:78:a0:7d:43:9a:81:
         31:7f:95:ec:e7:98:fc:98:45:d0:78:dd:35:91:91:50:51:93:
         97:1a:9f:c2:43:40:b2:e3:04:1e:e2:f6:3d:11:a4:a4:33:6d:
         a1:e5:b7:80:44:e0:18:31:06:a4:15:f8:72:d7:8a:1e:9b:2a:
         e1:8c:1f:24:8b:ca:0d:70:ce:38:7e:ab:cb:3e:56:42:04:1c:
         c9:24:de:29:6b:a7:19:4f:85:5c:c7:2b:fb:0a:35:e4:d1:81:
         bf:1d:ca:df:3f:0e:2e:1a:f7:5e:73:21:57:bc:ad:a5:c4:b4:
         9f:b9:d7:83:d5:9c:94:bf:4b:2b:42:77:24:ce:f6:77:17:8b:
         c7:11:fd:f6:54:1e:de:7d:37:53:17:dc:04:4b:6e:2e:b1:0e:
         5a:aa:2b:82:32:66:1c:c4:8a:1f:28:82:2c:84:1e:38:b7:ff:
         bd:d4:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:16:30 2026 by rpki-client