Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa
File:                     b6bdc6ff-ac51-300f-8948-308bb0783629.roa (raw, json)
Hash identifier:          2CemkvUdSlny1pYOmPWWRh79SXXGcl96wCIeW9K+9KI=
Subject key identifier:   21:6E:60:F4:99:C8:42:42:5E:31:15:8F:C2:9F:60:3B:E4:7D:10:ED
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F4328584D65152A5F9AEC3AEAC34BA680
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     36318
IP address blocks:        23.160.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2a:5f:9a:ec:3a:ea:c3:4b:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=43e7a413-b268-48e1-92aa-5a41a5dc9c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:35:2f:2d:c4:56:e9:db:65:60:27:33:05:
                    50:55:d2:74:55:75:dc:ec:40:d7:64:e6:0d:99:42:
                    32:b2:d6:0b:8c:74:c4:a3:f9:7e:89:f4:e9:1d:62:
                    ef:09:e3:5b:d5:1f:83:54:d6:d2:d2:96:6c:5d:3d:
                    59:6e:19:eb:c1:64:39:45:07:ad:6a:12:6a:d4:83:
                    3e:39:27:f2:46:54:af:1c:c1:03:68:e2:f3:16:24:
                    09:c5:c3:be:6a:c7:20:b5:46:76:4a:79:99:3c:e0:
                    47:3f:6e:32:31:91:9d:84:9c:45:cc:fc:5a:95:4a:
                    dc:40:e0:6a:3e:68:b2:85:12:17:e7:59:4f:d9:ce:
                    d0:8f:a5:79:a8:08:55:ee:9e:a3:e9:a8:df:f3:20:
                    c2:49:fa:c4:f1:bd:99:3b:74:54:9b:02:53:47:df:
                    05:a1:10:97:95:93:98:a3:da:58:82:e9:0a:af:49:
                    f4:69:0e:93:ba:4f:b4:fc:59:b6:0a:98:eb:28:21:
                    b4:33:0f:44:12:5a:4e:6a:33:be:f8:f3:ef:ec:8c:
                    cf:4e:a1:9c:93:74:91:a8:5f:01:e0:15:aa:0e:2e:
                    bd:fb:1f:90:00:a9:74:50:c9:26:11:e3:48:55:f9:
                    e3:f7:f7:07:cf:f4:c9:d3:86:c3:f8:e1:47:91:d6:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6E:60:F4:99:C8:42:42:5E:31:15:8F:C2:9F:60:3B:E4:7D:10:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:c1:17:d7:5b:67:31:df:d3:00:c1:77:eb:f7:ee:b2:dd:
         39:9e:20:fd:05:6d:21:9f:a2:aa:fe:7b:5e:f7:78:56:4b:dc:
         bf:02:99:22:80:f1:ef:c6:10:81:d1:5a:f8:c3:14:ea:3b:92:
         2d:b3:f2:f3:79:22:4c:1b:cd:06:bb:90:94:eb:42:fd:49:97:
         02:1d:11:53:d2:2a:3d:89:9a:b4:83:0b:06:9c:5f:bb:81:da:
         86:7c:56:47:9b:be:73:20:a9:da:f1:b8:3e:12:68:31:a7:61:
         2e:53:88:cb:32:81:97:84:1d:27:f0:c0:c1:ca:81:f9:f1:41:
         16:ce:d9:6d:6a:79:1f:35:59:f0:5e:be:81:5c:0c:48:ae:19:
         db:8b:05:07:8d:d8:71:c0:28:ad:26:0b:c1:b8:c1:6a:5c:86:
         f7:92:96:88:97:e3:61:08:82:6c:c2:06:6a:97:8d:51:a5:af:
         f2:70:b9:b2:44:a7:85:39:06:f8:4e:47:ca:29:fc:09:03:5a:
         14:f8:7c:2c:40:f4:00:77:43:97:29:0b:5d:eb:01:24:1c:aa:
         d7:32:18:a0:23:f6:fd:b5:a2:eb:f1:ab:af:6b:76:30:1c:e0:
         e5:7e:80:6d:25:33:73:ab:f2:95:dc:b3:3f:f9:29:f2:10:59:
         c8:04:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:23 2026 by rpki-client