Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/21002e44-9674-3f7a-b30c-708d661fc44c.roa
File:                     21002e44-9674-3f7a-b30c-708d661fc44c.roa (raw, json)
Hash identifier:          RPW7Hz72lL+EPGlo7ZLKhd9Mm7bG7d45X8bP8gbWqVA=
Subject key identifier:   8C:2A:4B:B7:A1:DF:2B:BF:AF:C6:3D:10:FC:17:F4:E3:A5:74:EB:CC
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584D624A64B56E933ADC481D7A00
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/21002e44-9674-3f7a-b30c-708d661fc44c.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     396319
IP address blocks:        23.226.40.0/24 maxlen: 24
                          23.226.208.0/22 maxlen: 22
                          23.226.212.0/24 maxlen: 24
                          23.226.213.0/24 maxlen: 24
                          23.226.218.0/24 maxlen: 24
                          23.226.219.0/24 maxlen: 24
                          23.226.223.0/24 maxlen: 24
                          23.239.168.0/22 maxlen: 22
                          23.239.176.0/22 maxlen: 22
                          23.239.180.0/22 maxlen: 22
                          23.239.184.0/22 maxlen: 22
                          64.140.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:64:b5:6e:93:3a:dc:48:1d:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=80d838ab-4988-4247-a2e1-1c9f3667ce20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:57:d3:68:5d:6d:44:4f:4b:75:bb:f5:f5:
                    df:df:68:41:dd:b8:2a:e5:73:85:bd:7d:a6:98:c9:
                    91:9a:c4:af:b0:4f:9e:0d:a5:b9:e7:d9:fa:3e:35:
                    7a:e6:44:fa:ca:5d:13:5c:da:d4:4c:fb:78:1d:28:
                    67:b8:e2:4f:78:72:29:f7:c5:0d:c6:09:a4:ff:b2:
                    77:db:58:2b:4a:5f:15:14:82:d6:14:9e:b7:d8:ed:
                    5c:35:54:c9:f0:f8:d1:08:cb:9f:b2:70:3e:51:d4:
                    35:89:67:b2:b5:92:58:ec:b9:51:02:72:f5:cc:0e:
                    2c:22:67:84:b6:d7:e8:f1:83:10:ae:ef:41:6d:7b:
                    4b:08:14:a6:ca:11:f3:90:5e:04:64:5d:6d:d8:ed:
                    2f:0f:ba:02:19:8c:46:a4:b1:b9:34:63:ee:3c:29:
                    63:ac:6e:04:0f:70:1d:45:8e:ea:a6:93:ea:de:73:
                    64:66:8f:23:84:11:90:ce:b4:61:7f:0d:6b:ec:51:
                    e6:59:bf:4b:4c:5e:ec:62:87:68:75:ff:69:ff:f3:
                    66:cc:72:ac:2c:25:11:e0:bb:f8:54:a6:96:85:b2:
                    2c:ce:18:ac:c2:83:c6:58:5e:8d:d3:fa:a2:f2:3a:
                    61:35:9a:b8:35:2a:fa:ad:55:27:f7:38:1d:27:87:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:4B:B7:A1:DF:2B:BF:AF:C6:3D:10:FC:17:F4:E3:A5:74:EB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/21002e44-9674-3f7a-b30c-708d661fc44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.40.0/24
                  23.226.208.0-23.226.213.255
                  23.226.218.0/23
                  23.226.223.0/24
                  23.239.168.0/22
                  23.239.176.0-23.239.187.255
                  64.140.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:16:70:00:69:49:b4:aa:ab:a8:48:46:d7:c4:9e:0d:12:24:
         32:47:da:87:db:4c:55:73:18:1f:85:c6:b9:94:6a:29:be:88:
         7a:96:32:8c:f9:6d:ba:96:78:14:6b:4f:6c:24:d7:9a:2e:cf:
         1a:ae:82:01:63:e2:2f:de:9d:67:c2:16:bf:c0:2d:3c:73:2c:
         6f:79:e1:5d:2a:67:bd:70:64:12:5f:6e:99:2d:64:67:e3:da:
         48:9f:1d:31:cc:6c:4b:ce:de:78:98:0c:33:f2:f1:10:34:d8:
         a5:b2:66:12:51:7d:54:af:0a:13:86:9e:36:16:ef:40:34:b2:
         c4:78:62:b2:19:e0:89:74:c4:f8:60:4c:12:3d:51:ac:87:9a:
         5c:97:8e:fc:03:7f:d1:cc:5f:c1:05:83:41:37:e9:e9:99:76:
         b1:1b:a4:cf:a4:c9:b2:43:47:17:0e:4a:38:1b:e0:f9:e5:a7:
         21:d5:ef:09:e7:5a:b0:06:7c:a4:0d:fd:a1:df:cb:c4:10:c3:
         8a:0e:c6:3c:ba:fb:13:3c:86:86:ab:a9:80:6a:9f:fa:42:36:
         79:e2:d5:37:8e:a7:38:07:bb:e2:21:5c:ff:61:3f:5f:36:db:
         9d:ac:39:1a:4a:f6:d6:a9:e6:b2:2d:3d:5f:bc:75:09:76:dc:
         76:1f:b7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:07 2026 by rpki-client