Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa
File:                     a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa (raw, json)
Hash identifier:          LoVHdFqleLAVgUZOB3DMHFN9zKQz4f69+A2lYybhTDA=
Subject key identifier:   C6:BE:41:E9:E8:09:02:86:C7:AD:60:49:54:AD:01:C4:85:AD:FF:BC
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584E1A14440A4F499BD7F7602580
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     0
IP address blocks:        63.215.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:44:0a:4f:49:9b:d7:f7:60:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=28502faa-ecfc-4e02-a010-f794a8458302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:28:2b:f1:78:cb:bd:08:f6:35:c2:df:47:
                    a7:e7:f3:21:69:f3:ab:35:9c:c6:47:ee:12:6d:55:
                    cb:64:0c:c4:27:e8:33:61:ba:2a:3b:11:77:84:3e:
                    5e:49:b7:66:07:53:09:e8:58:4c:de:7b:47:0f:7c:
                    4b:18:d8:21:35:9d:9f:df:d0:4c:eb:79:ce:25:0d:
                    e0:42:0d:70:9a:b3:1a:c4:0c:21:88:8e:43:b1:d9:
                    6d:40:21:79:2d:52:2e:aa:d0:68:ef:4a:70:3e:a9:
                    2f:d9:60:18:8a:3f:18:0d:1f:a6:55:58:64:9d:0a:
                    34:53:23:a8:35:a0:84:12:db:8f:80:a5:34:b6:c6:
                    86:26:a9:6a:10:3b:bd:05:01:16:ef:20:c5:15:6d:
                    da:25:13:ef:5a:fe:c2:cb:f4:9d:b9:eb:33:10:8e:
                    02:00:29:ba:7b:1c:f5:b0:b8:c6:8b:02:3d:fd:bb:
                    73:d2:a0:8c:67:4a:6e:0b:4b:58:d2:81:9b:eb:85:
                    01:78:69:8a:46:a5:32:d1:f8:f1:5a:dc:04:21:7f:
                    fc:60:a1:cf:38:6e:6c:7f:35:f9:28:e6:50:ec:e2:
                    eb:dc:c3:e4:50:17:aa:d2:61:b6:4a:68:d9:76:cc:
                    54:3c:5b:c0:69:81:c0:76:43:8b:65:1e:5e:fa:d2:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BE:41:E9:E8:09:02:86:C7:AD:60:49:54:AD:01:C4:85:AD:FF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.215.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:2b:ea:08:d2:37:37:24:08:13:4a:50:6c:e3:0d:7c:6e:
         ff:1b:5d:63:fe:64:57:59:19:9a:49:30:31:c5:62:8e:4e:bf:
         3e:25:33:3a:53:e6:36:05:3f:20:76:06:88:97:b8:d5:75:ad:
         9b:04:79:06:35:63:1e:1d:d2:05:7f:61:6c:56:a8:5a:a7:0e:
         6c:48:96:3c:5c:c8:99:0f:b3:84:f4:16:af:94:f9:38:f4:8c:
         c6:48:c4:f1:1c:73:2a:20:5d:3d:10:2b:29:62:d4:05:47:8c:
         55:26:55:94:c8:94:75:59:66:f0:0a:17:77:cf:95:ee:b5:2d:
         65:8e:12:90:83:34:61:7c:49:31:0f:6e:b0:5a:ec:d6:ad:58:
         ef:71:df:8a:fd:75:90:0e:9d:6b:a9:70:97:a2:ea:0f:72:9e:
         ae:70:b0:ac:e1:50:6c:4b:90:b2:9c:02:d5:07:53:19:8d:da:
         5c:aa:1b:ef:a5:2e:a1:68:c5:b8:98:82:26:dc:07:45:45:4f:
         a4:78:54:bb:fb:cf:bf:1c:8d:6f:b7:29:24:26:93:06:42:ae:
         73:f5:53:16:8a:60:d7:9f:1f:8b:32:df:5b:49:97:b4:21:a9:
         8f:02:fb:30:10:3f:9b:aa:42:17:8c:59:7e:b8:36:71:63:a1:
         67:87:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:05 2026 by rpki-client