Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9044f818-0810-3f6f-87fa-ce9d6b8b05c1.roa
File:                     9044f818-0810-3f6f-87fa-ce9d6b8b05c1.roa (raw, json)
Hash identifier:          pxuNe1DbSAnAdDzpwhFLITFf7zkXjlWdlZ7+Hjfcw28=
Subject key identifier:   E7:60:37:50:E7:D1:4C:96:5B:A8:26:DF:3D:12:CD:55:3D:07:C6:04
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DD1F5B25EAE86B7484E3B5898
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9044f818-0810-3f6f-87fa-ce9d6b8b05c1.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     23473
IP address blocks:        216.171.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:b2:5e:ae:86:b7:48:4e:3b:58:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=5cfe4103-7035-4123-93ca-186b45adc082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:b7:f3:33:1c:49:b7:45:d0:94:ed:31:2a:
                    2f:fe:20:e8:83:0d:4b:7c:3f:8e:3a:e9:3f:81:ed:
                    05:24:33:4d:e5:78:8b:b7:c0:ea:a1:5c:b8:f2:9f:
                    94:b3:48:8e:fe:e8:2b:c4:1d:8f:25:47:16:a0:a0:
                    f5:9f:61:f0:d4:36:cb:4b:b3:c2:a9:61:ea:a7:c3:
                    a0:af:58:7b:a0:48:85:44:4c:32:07:a0:51:3a:0a:
                    85:b2:88:b5:34:8f:66:58:74:1c:89:5a:0a:a6:11:
                    88:b4:2d:eb:35:f6:13:7b:a5:71:af:e9:fe:96:17:
                    e0:ab:17:d0:16:01:63:16:8f:a4:0b:c6:a6:7b:a3:
                    24:92:1b:6a:e3:f4:31:4f:a6:83:0d:94:d6:db:37:
                    d6:a3:eb:e7:61:c1:e6:7a:da:0d:d5:08:c7:73:ad:
                    34:26:14:1b:5e:bf:ed:ff:26:38:22:e5:f1:39:c3:
                    f5:c0:9e:27:57:b7:b0:44:c2:68:63:82:41:b9:0b:
                    ec:2a:8d:78:45:6c:95:66:a5:d8:b0:00:fa:75:f2:
                    a8:11:3b:08:53:c0:a7:5e:fa:5f:5e:25:f6:a8:4c:
                    d1:34:5f:b5:cb:d9:f3:38:85:32:13:9f:f5:f3:e2:
                    a7:53:a7:ef:8d:d7:e2:18:7f:4e:57:2f:b8:bf:59:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:60:37:50:E7:D1:4C:96:5B:A8:26:DF:3D:12:CD:55:3D:07:C6:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9044f818-0810-3f6f-87fa-ce9d6b8b05c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:bb:33:ad:34:da:00:1b:8e:44:19:df:1e:ba:f8:c2:f8:
         77:91:20:23:a1:37:2b:80:41:99:5e:e2:c5:3d:19:10:d8:8b:
         25:90:a1:5d:c6:30:98:62:25:42:da:d7:3d:2a:4a:0d:71:20:
         7f:15:70:b9:0f:25:61:e9:c0:71:71:68:af:b5:60:79:72:40:
         8b:ce:94:07:36:84:fe:be:32:c5:bc:9b:fe:50:90:de:ea:15:
         c2:8e:d8:b0:24:84:94:51:92:5b:0e:d6:31:c1:32:a1:c5:13:
         d6:50:e1:32:7c:bd:3c:87:9b:3d:86:39:6b:e3:80:c6:3c:5a:
         ae:d8:b0:a9:94:83:be:a4:0d:07:8f:35:d6:ca:12:8e:94:e1:
         4a:c4:a6:5e:d4:6d:60:ff:95:a2:24:17:66:45:59:70:28:8e:
         1e:59:1b:ce:48:76:dd:fe:d7:ef:91:00:bb:0b:6a:46:05:61:
         8f:0f:dd:36:8a:60:e0:29:9a:6d:22:cb:48:e6:f2:3a:9d:10:
         ba:23:42:7e:be:cf:3f:cc:3e:af:29:af:60:12:b7:64:3c:97:
         80:f3:a7:55:a5:0c:8a:f3:ff:e8:f7:5b:98:5c:9c:bf:2f:3b:
         0c:a2:83:bf:48:43:ae:ba:48:da:36:ae:fc:f3:87:79:86:2f:
         54:a3:77:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:13 2026 by rpki-client