Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa
File:                     4f328c30-9c44-33ba-ad3f-f36534bc620e.roa (raw, json)
Hash identifier:          wF8t2C1lboJ1Sn8RBj72kw6DJ5Gr3eIjfqjd4hNmvfA=
Subject key identifier:   B9:73:B8:26:8E:55:27:90:3D:6F:EC:6A:65:CC:07:06:74:BA:60:6D
Certificate issuer:       /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
Certificate serial:       010D0C9F4328584D571FB4B2A80456D031EDE040
Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     30671
IP address blocks:        23.160.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b4:b2:a8:04:56:d0:31:ed:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=e08e0f9b-6d6d-47a6-93a9-340eb33f16d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:21:98:3a:4e:e5:6b:60:0f:68:4a:16:9f:
                    b4:85:01:af:cf:51:cc:6c:6b:c6:09:5b:cb:ce:58:
                    61:79:10:e2:98:f0:dd:27:ae:05:f8:8e:6e:df:7b:
                    dd:e0:6e:eb:ee:4b:fc:90:04:d8:1a:30:e7:5c:e0:
                    04:d6:c0:36:c0:bf:c3:69:ac:b7:72:36:13:f0:da:
                    ad:22:e2:3e:77:8d:83:9a:4f:5f:3b:d6:69:bd:3c:
                    8c:3a:6a:74:e7:e9:a3:3c:22:0d:f7:1a:f5:8d:61:
                    88:2a:c5:ac:95:30:e9:32:5e:88:e2:9e:d9:01:61:
                    b6:00:3e:e9:1b:4f:99:ff:dc:6b:8f:ca:93:26:dd:
                    f9:26:06:fe:c3:e9:30:9e:81:fe:d5:e7:8a:af:eb:
                    58:43:c1:e9:9c:b1:52:cc:24:a1:e9:96:68:ea:2a:
                    3e:f9:11:92:5e:fb:82:5b:e9:b3:19:3f:67:98:d6:
                    c8:9f:48:7f:6b:41:d3:f2:cd:16:26:1a:94:8b:8a:
                    ca:ae:e7:93:db:73:3d:80:9d:be:28:37:b9:4e:ba:
                    49:a8:29:84:1b:fe:91:94:e2:de:46:af:96:2f:e8:
                    8c:76:1d:60:f3:cc:3a:5b:4d:65:16:44:e2:1b:6a:
                    62:4b:57:9c:fb:b3:2f:9b:bf:bb:c0:43:3c:45:0b:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:73:B8:26:8E:55:27:90:3D:6F:EC:6A:65:CC:07:06:74:BA:60:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:57:01:14:b8:c1:76:23:e6:f8:7f:c1:20:ee:13:f7:ad:4c:
         04:6b:f5:b4:33:83:3e:1d:16:80:26:01:67:c4:3f:d5:d3:5c:
         62:50:98:2d:f1:57:6e:4f:ec:09:db:58:aa:a7:91:a1:08:11:
         f7:12:95:9a:3a:72:eb:92:2e:f4:09:3f:20:6d:25:dd:4f:c7:
         ea:bd:73:af:93:cc:44:b8:a0:01:c6:1d:8d:3e:d7:b3:ad:ed:
         95:4f:a0:7a:55:42:e1:79:e2:4f:f1:80:54:3d:d0:8e:4a:9d:
         81:6d:87:45:1d:eb:3a:6e:a3:96:6b:aa:63:b4:6e:26:37:43:
         12:05:92:66:f1:9a:b0:a9:b5:b7:dd:e2:22:82:33:75:06:de:
         21:3b:cc:df:6f:df:48:d0:a6:4f:e8:68:af:fe:9c:3e:f7:29:
         c4:ae:4d:9d:fa:58:bc:f0:b2:6c:50:f4:db:27:81:bd:38:fa:
         f0:32:d0:9c:9f:c3:c1:c8:b7:6a:82:53:59:69:c4:6f:07:f2:
         57:bb:5b:3c:64:e6:0c:4b:de:d0:2c:42:b1:b3:52:a7:20:48:
         27:e1:43:fc:a3:0e:de:ef:7d:18:ed:43:84:dd:2f:5b:20:51:
         33:40:68:cd:e0:99:c1:db:b1:ff:da:20:3b:37:f5:53:dc:c4:
         cc:7d:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:06 2026 by rpki-client