Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
File:                     98ea8d1f-6d28-3754-8463-218ef6072d68.roa (raw, json)
Hash identifier:          gRayJtwfuG9Ta69ckif4Joh4koERgTJxFxkYdx0RGC4=
Subject key identifier:   F5:F4:C0:08:6D:3E:3B:58:31:BA:AC:AF:71:7C:40:A6:FA:EB:1E:8A
Certificate issuer:       /CN=6205d76d-4f52-4364-a347-5456e5513fc3
Certificate serial:       010D0C9F4328584D52435AD94EAC6C18E268F800
Authority key identifier: 51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7029
IP address blocks:        23.189.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:5a:d9:4e:ac:6c:18:e2:68:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6205d76d-4f52-4364-a347-5456e5513fc3
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=c9863c47-8952-4306-9ccd-0503444470a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:81:d5:3b:96:43:5b:37:8c:f6:61:32:50:
                    69:90:50:2b:ee:59:75:1c:8d:83:c0:99:9b:e0:bd:
                    f8:ad:ef:19:4c:36:c0:3c:4e:74:60:4b:00:88:cb:
                    57:8c:20:45:ef:c3:42:85:e8:75:ed:a8:a4:0d:65:
                    bf:73:f9:ec:af:e2:9d:08:7e:8a:31:76:67:42:7f:
                    38:6b:21:d3:02:8f:6d:a2:95:87:9b:55:00:a5:9e:
                    a9:95:32:14:20:f5:fd:22:1f:6d:44:00:b1:01:74:
                    c8:65:c8:bd:f2:e6:e3:55:e7:53:23:58:b9:5e:28:
                    03:bc:8f:9a:a1:03:de:dc:2d:78:84:bc:41:92:8d:
                    a1:d2:c2:40:6a:8d:e4:dc:74:d6:e3:92:6f:14:47:
                    d1:75:d8:e3:51:6b:bb:a0:8e:0c:f4:bd:5c:e1:0e:
                    94:08:c2:1b:0b:8b:17:5e:98:89:0b:a9:cc:89:38:
                    10:8a:3b:9f:1e:f4:39:d4:e2:e0:80:fe:86:47:52:
                    13:c1:0f:6f:72:74:42:ec:52:fe:df:87:46:6b:3b:
                    b2:51:c0:1c:74:15:98:80:aa:96:19:d7:7c:48:cf:
                    37:81:97:8c:87:f0:77:b4:db:91:b3:bf:8e:fd:e2:
                    bf:a4:ca:b8:ca:50:c1:06:5c:3b:c4:3f:3f:fb:e6:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:C0:08:6D:3E:3B:58:31:BA:AC:AF:71:7C:40:A6:FA:EB:1E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl

            X509v3 Authority Key Identifier:
                keyid:51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c0:e4:3c:74:76:05:87:97:48:83:10:8c:7a:56:ae:81:20:
         00:d7:65:5f:8c:62:5b:5d:37:2c:9e:b6:87:65:bb:52:e8:1c:
         27:b2:6e:32:3f:fa:26:cd:1d:a2:d7:00:4b:3c:6c:96:89:07:
         08:f3:09:b5:f5:96:6c:bd:24:8e:ac:69:93:fe:eb:26:f2:ed:
         91:86:c4:80:56:dc:14:68:92:77:5b:72:5c:99:59:ce:8f:8c:
         f2:c6:8b:b8:b7:54:d4:55:33:e1:2a:a5:a4:82:7b:cb:aa:35:
         89:2b:70:40:03:f2:18:23:c3:99:83:54:ac:c6:e0:76:3d:e6:
         c4:c6:3e:a2:d3:d7:99:10:93:dd:91:54:ed:23:b5:d9:13:f0:
         99:aa:e9:84:1b:72:75:d9:81:ba:9a:1d:57:8c:0d:b2:fb:13:
         9f:0d:5f:c9:82:05:b5:70:94:ca:f9:e6:bd:44:a3:a5:9b:90:
         68:c4:5c:aa:cd:98:78:61:8e:bd:23:ee:74:5f:4b:e9:4d:a1:
         52:fd:80:af:bf:9b:2b:88:2c:31:23:08:37:38:f4:51:43:b1:
         94:ec:95:19:86:e2:b7:76:ec:47:70:6c:49:cd:0a:d7:bb:d2:
         1a:72:f9:7c:bf:b2:a1:72:f2:89:75:4d:77:38:8c:29:1a:e7:
         12:26:05:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:16 2026 by rpki-client