Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa
File:                     7c79eb9f-d88c-3305-8247-4977e174ee96.roa (raw, json)
Hash identifier:          isGFJBlKpB7UkjCr8iFusgwKgaIMg4CQecfKEaXo8po=
Subject key identifier:   63:9A:72:8C:C1:1A:F8:A8:82:31:4A:0E:F7:94:C4:44:AF:3A:C2:8E
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F4328584D6AAAAC12F07431D3F1DA6040
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     399525
IP address blocks:        23.185.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:ac:12:f0:74:31:d3:f1:da:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=6aa62258-ec6b-443a-a0eb-a3c9b2890af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:a3:67:26:c2:5e:bb:fa:b0:3c:da:25:ab:
                    1c:de:8b:71:08:3f:da:9f:b8:77:4e:2c:5c:df:20:
                    71:82:01:78:17:03:d4:68:25:51:b9:70:5c:45:50:
                    5b:80:32:c3:bf:64:be:1d:7a:77:4f:74:8f:89:b0:
                    65:fb:98:34:07:ad:27:d9:f0:32:a7:42:e0:c6:0b:
                    47:0b:61:bf:ed:db:02:33:87:e0:1e:f1:df:4b:1a:
                    84:b3:c9:72:a5:c7:26:4e:5e:ac:0c:03:f7:ba:63:
                    a3:02:39:e7:df:c6:fb:38:67:93:8f:03:1b:36:c9:
                    83:ee:d2:03:3f:31:a9:9a:f1:4b:e7:10:f7:4e:5b:
                    f4:4b:18:ab:a8:82:0f:07:64:65:13:1b:af:05:ab:
                    56:95:c4:d5:bd:f1:73:33:31:02:ca:68:a1:78:2d:
                    28:ff:25:e2:1f:2b:b6:23:ef:d3:1f:de:2f:08:49:
                    5a:76:59:9d:1b:a8:46:77:63:8a:1b:7a:11:3d:fc:
                    ab:df:f5:e4:8c:df:fd:76:dd:8b:80:dc:42:2c:4a:
                    d3:47:8f:7b:32:c7:70:29:f0:8e:94:fa:57:ee:b8:
                    9c:95:f3:99:cb:71:4f:a3:d1:df:5e:54:cb:88:e9:
                    3e:20:b7:46:6a:0b:f4:ea:61:98:62:55:71:6a:c7:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9A:72:8C:C1:1A:F8:A8:82:31:4A:0E:F7:94:C4:44:AF:3A:C2:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/7c79eb9f-d88c-3305-8247-4977e174ee96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:70:42:45:bc:ce:72:8c:a9:de:a7:ca:14:f5:c1:7e:12:5d:
         7e:ee:98:a3:e1:06:8b:c6:4e:18:96:96:37:4c:d9:fd:d8:8f:
         94:f3:3d:89:b1:e3:a8:6b:dd:2f:d3:c3:5f:cf:1c:7b:15:0e:
         b5:88:4f:ce:10:8d:52:d7:34:34:8f:d3:4f:14:ca:9d:1f:69:
         70:19:b9:30:bb:c2:71:b0:d7:a1:a8:ad:87:28:08:ab:d5:90:
         47:02:b4:c1:ba:37:c7:d4:a0:26:f2:92:df:01:24:22:bc:7b:
         2a:2a:59:6d:7d:ca:be:65:f0:cd:f1:be:8b:a7:a0:82:34:91:
         0c:c1:8e:3d:17:e9:2e:e7:16:b9:52:d9:99:8b:ef:4b:bc:eb:
         f1:45:54:f6:b5:68:56:af:3e:53:3a:b9:19:f4:61:9f:cb:98:
         56:40:4d:08:13:86:5a:43:51:82:3a:04:10:38:37:e8:d6:1e:
         31:57:5a:8f:c3:6f:93:93:95:65:26:e4:ac:60:c6:ad:07:a8:
         d1:79:17:bf:cf:34:9b:67:18:5f:68:46:43:c3:ea:45:c2:a4:
         cb:f8:5e:12:9c:44:25:cc:a0:2b:ba:98:1c:29:f5:b2:29:5f:
         66:f3:43:09:75:73:05:fa:7d:4e:a3:10:68:5d:36:38:69:9e:
         cd:58:6a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:03 2026 by rpki-client