Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa
File:                     20fb2ff6-1ede-3b64-9759-cd15d077540c.roa (raw, json)
Hash identifier:          pJLoGXTxLNgDL5joot6BkBwPq2lmiVVq31+PRshPqnw=
Subject key identifier:   D6:06:44:5B:CD:EB:2B:FE:6A:80:E2:09:17:B5:1B:AA:53:F0:CE:49
Certificate issuer:       /CN=163ef5a1-ae20-492a-9aa9-c6fd0a7947a1
Certificate serial:       010D0C9F4328584D80FFF825E669B378B9856580
Authority key identifier: 18:42:56:EE:8F:C3:F0:F1:AE:3C:E5:D4:E0:85:6C:D7:D4:91:4B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     401233
IP address blocks:        23.183.200.0/24 maxlen: 24
                          2607:c240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f8:25:e6:69:b3:78:b9:85:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163ef5a1-ae20-492a-9aa9-c6fd0a7947a1
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=ff301eb0-9ebf-49ab-9f41-537cef8633cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:7c:1d:84:a6:db:a3:0c:b0:7b:a3:19:d9:
                    92:65:86:8e:c3:0b:a2:d3:6e:45:e2:df:44:d4:34:
                    19:8a:49:17:ea:bd:e6:ab:71:e3:49:99:75:1b:54:
                    f0:a4:0c:77:3f:2a:43:fc:7d:89:e0:3b:31:8e:5a:
                    0d:89:0f:ba:6b:39:ae:c8:70:66:62:07:1e:e9:27:
                    18:37:73:08:a3:e6:53:2a:53:8a:85:bd:9c:64:1c:
                    a2:9e:97:c2:8e:69:9f:5a:14:6d:b2:1f:7a:f1:06:
                    68:c9:13:5e:b7:12:0b:70:c7:2b:5f:35:39:e1:99:
                    6e:4a:ba:af:1a:14:9e:d0:cc:f3:87:c1:64:79:82:
                    05:51:9a:4d:32:39:a4:62:5b:8d:92:6b:f4:54:54:
                    f4:63:56:ae:c6:c3:b8:43:ce:77:ab:ea:7c:a0:0d:
                    c5:f3:f0:6c:f8:a0:f0:56:ab:3d:69:83:b5:50:ff:
                    7a:06:51:b2:65:6f:7b:14:d6:ba:d8:e3:ad:5e:42:
                    34:57:4c:da:99:40:69:dc:95:17:18:55:b8:67:af:
                    e5:c9:a9:ea:c7:05:bb:83:5b:a6:2d:5c:93:2d:5d:
                    2b:85:2d:f5:29:29:98:d3:3f:2f:28:2f:cd:a3:2d:
                    d5:fb:b1:2c:59:3c:e7:d4:30:4c:3b:6a:52:33:ef:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:44:5B:CD:EB:2B:FE:6A:80:E2:09:17:B5:1B:AA:53:F0:CE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/20fb2ff6-1ede-3b64-9759-cd15d077540c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.crl

            X509v3 Authority Key Identifier:
                keyid:18:42:56:EE:8F:C3:F0:F1:AE:3C:E5:D4:E0:85:6C:D7:D4:91:4B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/163ef5a1-ae20-492a-9aa9-c6fd0a7947a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.200.0/24
                IPv6:
                  2607:c240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:e7:03:bf:c9:3c:11:91:d0:d4:75:52:61:21:d5:d6:25:
         99:18:b0:49:89:d2:f4:25:e3:97:4c:1c:cd:b7:35:b5:4a:8d:
         11:6a:e4:5b:6a:a6:6d:5e:fe:c8:b9:e8:14:24:bf:07:68:5f:
         f4:5d:01:3a:fa:59:a1:6e:a0:60:b0:cb:47:72:bc:eb:7d:83:
         99:50:47:21:0d:cc:08:ff:5a:58:24:1c:54:79:74:70:8a:74:
         f7:7c:e6:73:41:e5:b6:44:a3:bc:7d:d3:ee:cc:d4:a1:e9:9a:
         e9:5a:98:fd:38:ce:94:b8:2d:36:73:ab:35:7b:d2:d9:5c:02:
         76:da:88:03:ce:bb:7b:7f:61:2c:04:ea:53:f5:77:66:02:1b:
         2f:c6:5b:34:04:c1:cc:f0:f7:49:ad:4f:f0:78:06:a0:26:98:
         b9:97:0d:ed:6f:2b:ea:91:87:86:36:73:14:e0:12:e3:32:ae:
         91:90:72:e9:a6:38:50:89:bc:5d:a8:39:b2:ec:51:56:1a:6d:
         5b:c7:77:ca:01:85:f5:6c:0b:27:a6:9e:42:f8:08:62:a4:06:
         a7:c5:a8:9d:21:d8:d0:f6:37:0f:70:e1:0e:05:7b:b1:11:8d:
         4b:bc:02:77:17:09:6d:72:a3:f0:b6:30:8e:4f:d1:8c:4f:90:
         b1:17:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:41:25 2026 by rpki-client