Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b4d6370e-6438-3eb6-9436-3eb4f921959f.roa
File:                     b4d6370e-6438-3eb6-9436-3eb4f921959f.roa (raw, json)
Hash identifier:          1gmNkZGijt6JS3Uq29SuqXBBn7rOo6IXvPbLYa7FNxU=
Subject key identifier:   CA:CA:30:A3:C6:BA:49:FC:BF:38:3C:C3:92:CE:FE:6F:BF:09:D8:DE
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584E210EF557AB05DF1D52D9C240
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b4d6370e-6438-3eb6-9436-3eb4f921959f.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        23.166.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f5:57:ab:05:df:1d:52:d9:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=74a5d91c-92ac-4d68-8879-09175a393c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:0e:1b:14:3b:c2:77:1b:ed:bf:b1:b2:a4:
                    78:1f:e1:ab:a7:ba:ac:cd:f9:86:ec:a3:6e:f2:2d:
                    de:bd:6c:5d:ae:0a:98:e6:2c:57:ed:21:d8:a5:f1:
                    c8:c6:38:e6:e0:0e:01:12:ff:ea:aa:b0:eb:a5:53:
                    9e:4d:04:da:3b:e6:97:4d:e4:43:e9:6d:f2:d5:8a:
                    fd:8b:3a:6c:3b:40:89:f6:d2:2a:b3:54:18:ff:4a:
                    30:e3:1f:d7:c5:14:7b:d8:ea:70:83:4a:ca:ee:17:
                    79:13:26:d9:3b:98:84:4a:fe:5a:c3:33:da:70:f7:
                    e4:2a:bd:c7:42:f0:70:cb:1e:51:e1:ff:f2:c5:ad:
                    1c:64:fd:4e:aa:4b:9a:ba:43:56:c7:2b:16:36:99:
                    bb:85:17:0c:c4:58:d1:6c:ef:69:ad:75:5d:ed:ed:
                    0a:8e:35:23:63:8e:ea:90:c3:78:c0:80:03:8b:73:
                    f5:5a:af:e0:54:a0:a5:7c:5f:a1:68:66:53:da:c6:
                    ec:8a:65:10:d9:95:5a:5c:eb:d3:e9:4f:5a:ed:2f:
                    ea:97:51:42:b8:62:8f:15:63:df:f6:3f:01:b9:34:
                    56:4f:2b:45:97:82:a1:f1:42:43:ad:9a:64:19:46:
                    f9:91:1f:e4:69:29:da:85:20:d2:19:29:a7:21:92:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CA:30:A3:C6:BA:49:FC:BF:38:3C:C3:92:CE:FE:6F:BF:09:D8:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b4d6370e-6438-3eb6-9436-3eb4f921959f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:56:36:8e:6f:a1:f2:5d:f7:58:8c:26:b2:4b:5a:d3:89:5f:
         70:95:ed:8e:61:35:fb:c8:9e:b3:4b:4a:f6:95:fd:df:87:8d:
         c4:ee:83:0c:6e:af:c0:88:0f:de:30:f4:7e:73:d8:db:28:7e:
         e2:cc:b5:69:69:cf:44:58:87:61:c5:34:e7:63:13:b5:1d:1b:
         21:02:ec:06:ac:da:f6:4f:6c:7b:87:eb:f0:fc:7e:25:d1:27:
         78:91:ca:db:1f:ee:ad:4b:77:4d:28:11:1d:9b:31:5b:23:c6:
         8d:9e:03:3b:a1:1f:87:b7:57:96:3d:04:24:99:e4:ab:1c:58:
         d3:f6:70:32:38:bd:f8:14:85:96:16:9b:dc:0d:28:79:10:c5:
         de:b2:a1:fb:c7:2a:15:99:7f:6a:dd:60:fb:a7:44:22:35:fc:
         47:a7:32:37:4f:c1:de:93:40:d1:f9:7c:ae:30:6d:d5:e6:28:
         2c:9c:0b:22:96:a6:33:f0:fd:72:e5:c8:11:e7:cc:9f:73:c8:
         83:e2:ab:2a:bf:7d:66:6c:64:74:5a:fd:e4:57:a8:a3:f1:b4:
         47:32:52:f7:99:f2:37:82:e4:ca:6d:df:36:d3:4b:aa:3c:7f:
         1b:b9:6e:7d:72:c3:97:f7:35:2a:52:40:a4:a1:02:c5:17:3a:
         69:c8:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:36:02 2026 by rpki-client