Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
File:                     2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (raw, json)
Hash identifier:          gTFWG1u7G2Cl6wxRM5sU+PSKKpEy4xAPS1Kje6BeBTM=
Subject key identifier:   C1:D0:DE:66:56:40:3F:B3:EF:23:EB:AD:01:F7:39:A0:A7:61:74:2B
Certificate issuer:       /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
Certificate serial:       010D0C9F4328584DE41B3114D7231A0C2F922200
Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     25944
IP address blocks:        23.157.168.0/24 maxlen: 24
                          2602:814:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:31:14:d7:23:1a:0c:2f:92:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=5bcfd34f-8d62-479a-a321-895c971a38bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:cb:14:35:00:91:68:92:31:bf:47:c1:94:
                    58:b5:60:ae:a5:41:d6:44:62:73:1a:07:a7:6d:8b:
                    19:12:a5:10:04:3f:5a:3c:e8:14:22:8a:4d:d9:5a:
                    6b:c1:20:fa:05:91:fe:46:a6:ce:04:d1:0a:dd:f1:
                    86:30:03:36:01:dc:0b:87:a5:dd:55:a0:59:9c:20:
                    d4:0e:8e:7f:db:ee:d5:b4:c2:3a:8d:4b:b0:5c:c2:
                    d1:ca:6b:5d:a8:95:d0:8e:15:c8:48:45:fd:68:9d:
                    69:dc:e6:e5:66:3f:52:87:f3:c8:ae:dc:84:0f:a8:
                    f2:44:24:66:83:53:c8:05:a1:fd:cf:f2:6a:a9:30:
                    f3:26:35:a8:16:37:87:14:23:17:b3:bb:d6:c3:d7:
                    d5:32:08:77:53:30:d4:c3:4e:f4:05:d9:f5:37:47:
                    a9:44:80:e2:35:13:64:45:ab:41:62:64:96:22:79:
                    0a:5e:a2:13:5e:11:e0:a5:75:44:91:3e:ee:a3:93:
                    c4:17:c3:f5:2d:66:19:10:5f:18:6e:30:47:3c:69:
                    f5:4f:80:19:b1:bb:9b:f8:89:99:38:30:b5:99:33:
                    68:61:e2:2c:85:30:70:9b:00:6d:3e:bc:27:f7:a1:
                    29:bc:9c:23:40:4c:c0:0e:da:b3:d1:13:cd:4d:09:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D0:DE:66:56:40:3F:B3:EF:23:EB:AD:01:F7:39:A0:A7:61:74:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl

            X509v3 Authority Key Identifier:
                keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.168.0/24
                IPv6:
                  2602:814:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:c5:e7:c9:ca:17:db:89:95:64:d9:46:e9:0e:dc:19:56:
         43:cd:84:5b:f9:30:76:62:c6:ea:49:d7:2a:34:cf:ec:fd:d4:
         46:e7:3b:ac:f0:43:a8:9a:3c:4b:da:4c:43:84:92:e4:0d:41:
         2e:35:4a:07:a9:36:ae:ef:e4:13:cb:11:2c:81:be:11:0c:a1:
         63:dd:73:38:77:d9:c1:51:fa:5c:97:ea:a7:8e:a8:c8:ae:ab:
         27:aa:c7:d5:00:6b:b7:41:7c:0e:5f:93:9e:f6:4c:3c:22:28:
         d5:95:8f:94:85:f5:10:b0:4f:c0:c2:7d:b6:8b:aa:e9:07:8c:
         21:8e:5f:f6:ed:cb:55:7d:b7:62:03:17:2c:0f:0b:ba:f2:d0:
         de:85:14:83:21:d5:46:91:ab:5a:5a:30:03:0f:9c:36:a9:09:
         1f:12:40:1f:7b:4f:79:ab:c1:b5:b6:a6:61:46:cc:18:c8:dd:
         57:25:ad:0d:92:85:41:d1:b5:7a:7d:30:96:08:d7:93:0d:a5:
         c9:f9:71:db:9b:8a:e1:ef:56:a8:81:8d:3d:8d:c1:25:7b:f2:
         8a:47:16:43:9a:6c:23:16:54:a8:a9:17:f1:3d:51:57:30:85:
         7d:50:5f:ae:34:69:91:db:12:84:1c:e7:f9:87:fc:61:d3:3e:
         f8:01:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:52 2026 by rpki-client