Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa
File:                     5c8b5541-b81c-355e-9b23-a80ca613a215.roa (raw, json)
Hash identifier:          4fUSjlsxLfQ+6LjvRWgxvy4pxpl5JFjyiWi+6o7jJzQ=
Subject key identifier:   FB:97:C3:6B:5E:3C:77:8C:06:81:48:B5:37:C2:76:1C:FF:9C:8C:F1
Certificate issuer:       /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Certificate serial:       010D0C9F4328584E253F0B2D5BBAF87D541D7B00
Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16611
IP address blocks:        23.153.216.0/24 maxlen: 24
                          2602:2de::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:0b:2d:5b:ba:f8:7d:54:1d:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=98efe15d-ac83-4c80-8423-a9791f3b5e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:20:33:c5:3a:10:b2:02:c9:8e:ac:62:e9:
                    9e:ed:19:31:65:82:77:04:6c:60:f4:c5:24:58:1b:
                    37:0d:5a:42:97:ad:64:8f:2f:ea:33:5b:a4:7b:5f:
                    54:a3:5b:60:73:7e:e6:59:fa:44:69:6c:15:c0:22:
                    c2:81:4a:a9:bb:39:3f:da:2c:fd:bf:ab:9d:62:82:
                    4b:dd:fe:4c:b2:65:de:f7:0e:ff:68:9d:57:1e:e2:
                    31:47:d5:4d:29:d2:d3:15:aa:61:0f:b5:e8:82:f2:
                    94:2f:3e:f2:a4:e4:c9:ed:90:6d:26:bc:04:b4:88:
                    53:fd:12:16:94:19:59:77:12:a6:b6:c5:4a:f1:6b:
                    76:19:c5:5c:5e:5b:bc:63:ef:e8:a1:2e:47:37:6d:
                    32:75:25:1d:dc:b6:4d:f7:ea:2c:1d:f9:a1:27:20:
                    99:55:03:a9:f4:37:ff:f9:46:3a:17:af:ab:4d:6f:
                    09:49:18:fe:c4:79:dc:e6:4d:24:67:90:c7:6f:4f:
                    64:2f:d7:c4:5c:7d:17:ec:43:16:eb:6d:4a:7d:7c:
                    a9:12:b1:94:88:96:d7:c5:96:08:9e:ed:5d:4a:91:
                    19:73:50:4c:d3:53:95:83:68:0c:b4:2d:48:1d:77:
                    46:f1:06:df:d6:f6:e8:8d:a1:8f:7f:ef:67:54:47:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:C3:6B:5E:3C:77:8C:06:81:48:B5:37:C2:76:1C:FF:9C:8C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl

            X509v3 Authority Key Identifier:
                keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.216.0/24
                IPv6:
                  2602:2de::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ad:eb:c9:d2:49:2c:d2:20:ef:50:8f:03:68:d9:42:ec:34:
         fe:26:0e:9f:ea:dc:8f:94:34:05:a2:42:06:04:b1:85:1b:78:
         2e:60:1e:50:08:db:91:66:cd:fd:4f:42:f0:19:ef:e1:f5:07:
         19:b7:60:23:69:1e:56:87:ff:f2:6c:8d:ce:b0:12:2f:08:5d:
         c4:cc:4e:47:b7:49:6d:42:a1:eb:0f:6b:f6:f9:5d:99:29:da:
         24:69:7a:65:6a:b1:dc:1c:50:86:46:ad:aa:27:82:6b:9a:fe:
         60:08:42:f0:38:61:dc:b0:41:c6:43:0c:75:af:f2:0a:c6:f5:
         f2:89:4b:d2:30:fc:31:88:bc:8d:6f:d4:b5:29:e0:49:c2:34:
         e4:44:03:f3:9d:e6:c4:5f:fb:e1:e7:c0:0b:34:df:aa:f5:75:
         6c:93:7d:11:09:51:96:97:a4:7f:31:92:48:b8:c9:af:5f:72:
         26:86:78:cf:0b:ed:2b:a4:36:cd:2f:a6:2e:9f:a9:e7:e5:aa:
         48:ca:10:b9:6f:93:3c:23:df:61:74:11:64:60:61:58:1e:e2:
         28:6d:6e:52:98:4e:7c:37:cb:89:69:e6:f7:cd:f8:93:05:53:
         25:ed:57:1d:f4:7c:5e:e9:50:45:4f:68:cb:e2:82:f5:07:30:
         10:3b:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:11:07 2026 by rpki-client