Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa
File:                     1af27fcc-c087-3992-bbed-aa65a2857848.roa (raw, json)
Hash identifier:          b2asyRGn0mCCTsfd3W+OLahmVEDxH8HLAomgN8baK+s=
Subject key identifier:   26:C3:3D:AE:91:34:97:89:1B:54:A8:F6:10:67:B2:D9:4A:89:9C:17
Certificate issuer:       /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251
Certificate serial:       010D0C9F4328584D6EDA681DE24FE714CD4CD8A0
Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     23297
IP address blocks:        23.130.44.0/24 maxlen: 24
                          2602:f780::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:68:1d:e2:4f:e7:14:cd:4c:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=06b05479-5588-464e-8f37-6174728be68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:24:d3:6f:30:7f:20:66:96:20:7e:c1:1f:
                    ba:1f:33:ba:33:fe:1f:1f:68:03:e8:c6:b1:c1:6d:
                    32:73:5c:b8:b2:d5:53:f5:9a:5d:d8:98:88:bf:21:
                    22:da:6e:67:a7:c0:24:ee:12:5c:8f:43:9c:20:5a:
                    19:25:f5:04:f5:f7:31:fc:11:72:0f:91:52:18:4b:
                    69:fd:d5:1d:53:c3:1b:1f:88:2e:24:96:7a:d0:f5:
                    c9:42:ac:13:2f:61:9e:ce:46:07:81:23:f8:e5:24:
                    ed:1a:27:9a:1a:83:c7:66:48:8c:0f:bf:85:9a:be:
                    18:ee:0a:3b:97:f3:9c:fe:8e:a6:74:36:2e:19:d4:
                    de:61:2f:23:55:95:52:f6:5c:55:76:e6:7d:67:f8:
                    7a:8f:19:30:4a:bd:06:1c:6e:66:9e:a3:1c:65:4b:
                    a3:42:8a:73:1e:4a:1c:3c:85:3a:bc:3a:e3:4e:00:
                    76:2c:d7:54:8c:b6:d4:73:e8:24:ea:5d:e1:29:74:
                    46:6c:bc:29:52:ea:0a:fd:7f:1a:89:9e:87:49:34:
                    00:27:61:fd:37:9b:39:db:dd:91:93:e3:52:94:f4:
                    4d:04:f2:db:84:51:6a:f8:99:a6:67:1b:b7:6b:24:
                    b4:27:a2:9c:ee:9e:4d:d4:7a:6f:ce:86:a4:d6:71:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:3D:AE:91:34:97:89:1B:54:A8:F6:10:67:B2:D9:4A:89:9C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.44.0/24
                IPv6:
                  2602:f780::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b8:b3:66:1c:66:2e:c5:df:1e:e2:6c:6a:67:4c:bb:43:30:
         d8:7f:e3:ac:10:58:47:d5:31:97:c4:ef:d2:f1:b4:40:b3:11:
         b0:5a:a9:40:39:2e:8b:0b:e7:8b:f9:03:be:d8:e1:d8:e9:b0:
         d5:e3:f1:dd:fa:2b:14:47:f7:35:56:dd:55:08:4f:5c:d6:78:
         00:92:79:97:32:61:f5:9e:8f:88:9d:05:07:76:58:16:60:27:
         51:23:2e:af:18:83:7f:11:a0:fb:27:73:90:fb:f1:81:ba:1a:
         c6:ad:15:f4:0b:95:37:19:c2:47:dd:4e:89:cc:48:2d:1c:2f:
         ad:99:06:f5:2a:87:7f:b6:08:c3:03:fa:13:20:bd:6e:57:74:
         fd:7a:3d:8e:2e:3d:60:d5:3b:55:80:d8:c2:1a:23:e7:37:49:
         78:7f:4b:04:0f:dd:88:a5:74:69:99:a5:b4:d1:84:14:1f:b9:
         8d:2d:b9:f3:61:8a:85:ca:79:c8:63:81:a6:e2:a7:fd:8b:5b:
         bf:52:c8:40:64:78:38:e5:94:fc:4b:36:e4:c5:b0:22:d8:31:
         b3:23:55:fc:a3:00:92:04:49:d4:4f:9c:97:46:3e:d2:b4:6e:
         14:9c:93:9b:fa:ed:e4:9b:05:20:f8:e9:0d:0d:95:f3:8a:2a:
         91:35:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:24 2026 by rpki-client