Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
File:                     032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (raw, json)
Hash identifier:          8o+x7xBIF7FeoZCQUOzoEuWNdkaTctGhY9ZsXnOQj+I=
Subject key identifier:   1A:06:3F:D4:F0:55:AE:76:92:B4:B4:F4:4B:69:D3:B6:97:8D:BE:4F
Certificate issuer:       /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
Certificate serial:       010D0C9F4328584CCBA756457EF5ADDB732F1600
Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     22597
IP address blocks:        23.159.120.0/24 maxlen: 24
                          2607:5fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:56:45:7e:f5:ad:db:73:2f:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=e0e5b91a-f891-4140-860f-928fb26648fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:bb:99:8f:bc:b1:91:ad:76:56:72:6c:b4:
                    c9:5f:47:07:97:09:29:e5:49:05:81:30:f8:54:6a:
                    ab:35:70:7c:78:71:2b:c1:e4:58:29:a0:93:f4:a1:
                    87:7d:b2:84:c1:d9:d3:41:d9:3b:b6:88:bf:8a:8e:
                    4a:a7:70:b2:6e:7b:be:ea:ce:ac:ba:47:03:04:22:
                    82:5d:f4:32:44:04:f6:fb:08:1c:cf:78:b5:a4:08:
                    14:91:0e:74:80:af:6c:d9:13:41:1d:6e:ff:e1:4e:
                    9e:e0:44:a6:0c:58:69:ba:04:d2:fd:70:84:51:f7:
                    97:d7:92:e1:1e:54:3a:32:47:b9:76:38:7d:0b:4a:
                    4b:a3:88:40:29:af:b1:ce:42:5d:f0:21:96:10:fc:
                    77:a9:19:a7:ac:8e:3f:94:2b:ab:11:03:54:4a:cf:
                    d5:9f:61:12:a4:19:47:d8:d6:db:b1:69:0d:34:5c:
                    4d:ac:98:b9:d2:fa:fa:e5:9a:6f:2d:cf:cc:89:01:
                    d2:cf:00:78:80:fa:07:a4:5c:3a:00:db:e0:a7:b3:
                    7d:f1:99:56:4e:3e:f8:8b:3c:2e:f7:7d:61:9a:28:
                    15:d7:e2:5c:11:d4:a8:9d:35:87:18:5b:73:ec:90:
                    19:9b:26:5e:99:c8:72:c9:62:61:13:6a:5e:9d:8b:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:06:3F:D4:F0:55:AE:76:92:B4:B4:F4:4B:69:D3:B6:97:8D:BE:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl

            X509v3 Authority Key Identifier:
                keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.120.0/24
                IPv6:
                  2607:5fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:52:35:34:f9:e6:62:87:06:c0:c0:4d:a9:1f:f9:b3:a6:c2:
         a8:fe:a0:ea:2f:6c:53:31:8a:99:70:4b:34:06:81:25:79:1c:
         51:c3:25:ed:6f:fb:dd:8d:de:4d:ea:b2:7c:d0:f1:1a:a4:39:
         91:bf:a0:52:f5:02:68:89:67:3c:4a:ed:7e:7a:1d:66:d8:6c:
         c6:20:c3:b7:a7:71:b0:bb:bf:25:db:f2:02:86:d4:08:07:55:
         7b:57:83:24:df:11:03:c6:e9:a9:76:c3:9a:d7:89:81:8d:cd:
         72:d3:16:1f:0f:ed:b6:d3:44:47:3e:55:61:f7:35:d9:c2:96:
         7b:80:fb:22:e1:24:97:03:3a:62:0f:79:e0:81:bb:47:e7:ae:
         65:e8:1a:60:32:b4:c4:6f:0f:71:99:16:42:c4:24:00:c0:4e:
         a3:db:26:5f:9c:b5:ab:92:36:6b:df:5c:94:ce:f5:72:04:c0:
         3f:68:af:5f:4a:32:cf:30:10:ae:de:cd:d0:93:fc:22:ff:f5:
         ca:b5:5d:7b:aa:bd:d7:13:6f:bd:5e:0a:fe:5d:13:b3:ed:bf:
         ab:4e:61:f8:02:9c:ab:6f:d6:e3:77:5e:0c:22:a1:07:70:85:
         7b:aa:ca:e9:2e:42:61:19:91:f4:43:22:81:9b:1a:7f:cc:a2:
         9c:d6:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:58 2026 by rpki-client