Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa
File:                     c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa (raw, json)
Hash identifier:          Pty7HBGq7ZFgXUJqPfpDkx8V7pXcVrLOyPIQNABNIbw=
Subject key identifier:   6F:3B:B4:A7:0A:FC:CD:5F:AB:04:FD:3B:6F:06:E1:59:FE:02:35:F1
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584DEC7B2BD9FD54C13EC208EA40
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     29802
IP address blocks:        23.179.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:2b:d9:fd:54:c1:3e:c2:08:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=cddc0205-505d-4662-b0b1-a04f76c8d67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ec:2e:42:50:f5:25:71:e8:ed:79:6c:86:4b:
                    0c:26:e8:7b:57:1e:c2:b9:31:32:f8:6c:ae:f6:66:
                    6c:c6:a1:e6:c1:bb:05:13:13:43:23:2a:16:3e:07:
                    f2:38:f4:f3:b3:6e:cc:61:b1:05:85:84:aa:b4:8a:
                    6f:73:fe:b7:3e:10:89:d7:68:4d:d9:6e:fd:fd:99:
                    44:e5:86:52:7b:5f:2f:c8:18:12:2e:d3:a6:bb:d7:
                    8c:4a:a3:5c:ba:e0:5e:33:f1:f8:c1:b3:ef:a7:4f:
                    e3:68:cc:00:cb:3a:84:06:6a:19:72:09:14:12:8a:
                    b6:cc:b3:07:9f:71:2d:b2:51:8e:b3:67:5f:f6:ac:
                    25:ad:ef:c0:98:26:ab:21:77:b9:b9:cf:c2:1e:86:
                    8c:c5:ff:b3:c3:49:fe:09:7d:39:e1:14:ec:92:50:
                    35:7d:75:58:23:96:2f:59:e6:20:24:97:5c:3e:69:
                    1d:28:47:e2:06:c7:00:d9:23:e8:22:5b:b7:1c:8f:
                    d4:5f:99:a6:2c:f3:d4:5f:a7:8f:b1:7a:88:11:49:
                    01:28:3e:ab:b0:75:8e:b4:ec:8b:f9:72:d9:76:56:
                    0f:6a:f1:d6:87:93:a8:ff:51:3a:7c:d4:2b:50:6b:
                    a7:d8:26:06:aa:a3:a2:2e:37:bd:b1:62:cc:29:75:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3B:B4:A7:0A:FC:CD:5F:AB:04:FD:3B:6F:06:E1:59:FE:02:35:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:19:50:52:92:6a:7d:71:88:4a:da:53:b4:a2:ea:f1:89:9d:
         e7:00:eb:e3:7e:d0:01:d6:98:94:44:b8:81:18:8d:f6:17:ee:
         67:85:9a:e4:44:a7:ee:55:6b:84:90:c6:93:bb:bd:14:3a:cd:
         d4:fe:a3:09:13:c2:d6:04:2a:5f:db:5c:e7:f5:2d:6b:92:86:
         96:11:05:ec:c3:21:42:df:b4:e3:f3:6c:47:47:9e:41:ef:be:
         81:20:42:26:8f:39:f7:1c:bf:9f:94:be:4c:df:6a:90:63:a6:
         68:dc:c8:17:0d:91:a1:72:a0:77:59:0e:13:b3:83:c9:f0:72:
         a7:a3:87:e9:95:56:fe:d6:9a:65:77:7e:64:f1:29:12:fa:cf:
         5f:24:e6:4b:cf:43:29:58:13:fb:9f:d5:1f:c6:c2:35:4b:fd:
         93:ff:e5:00:51:5d:db:b4:6a:4d:01:df:9b:0e:93:d4:86:50:
         90:c3:1f:25:98:ca:35:a9:36:82:38:10:ad:d7:1f:0e:58:ec:
         6c:1a:94:86:bc:1c:5d:2e:04:3d:e9:2a:9a:7f:b5:77:5d:a9:
         03:dc:5f:67:16:4b:89:2e:48:d0:8a:ae:70:91:32:9e:fd:35:
         eb:94:d3:d5:c5:c2:0c:71:d4:7d:24:0f:db:0b:64:94:8a:c2:
         19:af:a7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:28 2026 by rpki-client