Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/6fe04de6-ad42-350e-ba87-1b01a9dc6738.roa
File:                     6fe04de6-ad42-350e-ba87-1b01a9dc6738.roa (raw, json)
Hash identifier:          Qsco7ScUPte/GVbLQbfVdkZd0n8dhOTvFJTEmqiwmls=
Subject key identifier:   03:2D:ED:30:36:6F:A0:0F:C1:A7:E8:F0:0D:AC:C6:62:4B:64:10:1F
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F4328584E1FA99387DFA550FF32317BC0
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/6fe04de6-ad42-350e-ba87-1b01a9dc6738.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     7029
IP address blocks:        23.142.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:93:87:df:a5:50:ff:32:31:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=bcba8461-340c-4810-b7d0-a32c30315a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:24:de:ab:b4:d6:bc:16:9a:c6:d1:b6:2a:
                    6b:8a:bf:25:fd:25:98:51:fb:f0:92:51:98:33:c0:
                    c2:73:a7:9a:4c:70:ce:a7:9c:1c:f6:cf:1f:3b:bc:
                    18:d8:b9:44:f0:d2:af:a7:80:06:96:f2:09:6d:d2:
                    29:d5:2b:d0:ba:a6:e8:d9:52:47:76:8b:bd:7f:2c:
                    14:c9:2c:49:5f:f2:2e:0a:d3:ce:8c:e7:38:3c:b1:
                    ed:58:8f:cc:9f:df:67:c3:15:c5:6b:b4:92:b2:d6:
                    ae:dc:08:f5:19:9a:83:06:a8:6f:b1:32:2e:d0:c7:
                    e0:c3:b0:97:93:85:55:f2:38:53:cb:74:68:29:5f:
                    2f:74:73:7d:a1:ea:29:ae:9a:dc:75:9d:d2:49:dd:
                    35:e9:7f:33:0d:fb:7f:dc:0e:17:11:01:c1:dd:85:
                    3e:05:59:9e:f7:b7:db:b7:63:08:46:b9:e5:8b:06:
                    11:87:8c:97:a8:92:f4:60:62:3a:1e:5f:d2:e8:c8:
                    bb:b4:40:eb:dc:d2:55:66:d6:f1:98:3c:33:40:1a:
                    fe:c2:bb:48:ec:79:2f:8d:15:ca:0e:2e:20:ff:dd:
                    e1:46:45:39:2b:72:47:16:63:7a:00:9a:30:58:cc:
                    a9:6d:3b:cb:87:8e:44:8e:f0:b0:21:a1:e4:52:0b:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2D:ED:30:36:6F:A0:0F:C1:A7:E8:F0:0D:AC:C6:62:4B:64:10:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/6fe04de6-ad42-350e-ba87-1b01a9dc6738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b2:f5:9b:ce:40:75:61:b7:27:0c:ed:6a:32:2d:c6:ab:48:
         3f:31:ec:be:f2:9b:14:c1:b8:14:dd:e7:62:53:ab:cb:3c:6d:
         ee:db:97:c6:64:7e:f0:47:6e:27:2a:bf:3d:b0:7b:34:54:28:
         89:64:59:59:5b:f3:e2:4e:ef:f9:b8:e6:e0:e3:44:26:e3:bb:
         2e:f6:40:0b:af:ff:20:f6:fc:18:72:9d:f4:88:66:2a:ac:2f:
         1c:6c:d4:c7:3a:f3:be:38:38:39:b4:68:9e:9f:df:4a:a5:d3:
         5f:3b:9d:d7:ee:0d:02:fb:1d:e3:ad:2d:77:69:3f:a0:63:b3:
         fe:3f:13:f3:41:5f:49:40:c1:a0:04:19:cc:ed:00:58:1b:d4:
         10:3d:5d:d1:d1:4b:b2:04:a7:97:49:78:6d:a2:77:be:ff:84:
         1e:79:89:7c:b1:be:1d:72:02:f7:a0:4f:87:f3:d9:71:8d:8d:
         1b:62:a2:a0:f5:bf:df:cb:7c:6e:7e:41:e7:bb:b7:c0:3f:98:
         3a:03:6d:bd:0e:91:a9:6b:5c:87:7f:0a:71:bd:55:b8:6c:e5:
         93:31:25:2e:6e:60:1b:86:04:f3:d2:2a:c4:fc:a7:28:f0:98:
         e5:2e:54:7d:d7:1c:ba:89:41:cb:14:12:36:2d:ae:ce:d7:80:
         09:29:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:01 2026 by rpki-client