Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa
File:                     50d0d793-6a99-3887-8de8-7232deb74b36.roa (raw, json)
Hash identifier:          fL1ETkbqxUHoOLzrVGZ9RCGVwcYkmCcxSrJjDp8fpKM=
Subject key identifier:   1A:0A:86:4A:95:0F:CF:AE:FB:F4:5E:D3:41:EA:49:F1:64:22:6E:AD
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584D59EA6959961D5C9BAC143680
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     271
IP address blocks:        207.23.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:69:59:96:1d:5c:9b:ac:14:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=49c7935c-b816-4a78-a76d-8c19a86e85ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:27:f6:ad:03:ae:24:ca:f2:c1:d0:3a:93:
                    a3:a0:30:0f:e9:8f:08:90:5a:1e:a4:06:46:63:19:
                    5b:e2:1e:8d:be:9c:b9:97:f6:ae:ff:cc:1c:b4:48:
                    b0:80:af:bb:a3:64:e3:93:ce:d4:fb:e6:99:56:23:
                    e1:ef:00:9a:bf:ba:b1:97:78:00:43:82:2b:26:c5:
                    a3:3d:d4:85:2c:4d:47:7a:1e:d0:ba:b1:63:bf:48:
                    5e:22:82:4e:9e:8f:33:d0:13:dd:9f:30:f4:28:d4:
                    bb:60:3f:fa:83:bc:24:d9:0c:9a:50:f4:71:30:ee:
                    aa:73:68:af:6d:52:90:bd:1e:ef:8b:a0:61:d9:ee:
                    5c:49:92:8c:df:b5:e2:6e:b8:05:52:a9:f1:0a:8f:
                    ce:82:b9:28:fa:d6:03:55:c3:87:13:ca:4c:eb:d8:
                    0b:5a:ce:51:96:00:69:97:13:3a:c8:fa:fe:e6:c3:
                    61:41:10:ac:ba:5b:a7:64:e2:64:39:88:b4:34:e6:
                    62:e2:be:bc:1b:70:a0:42:61:a0:94:88:fb:19:d5:
                    6d:b3:95:4d:11:6e:76:3b:1d:25:71:f8:12:97:be:
                    97:33:e4:8d:8f:e1:3e:f3:cf:b4:96:cd:ae:aa:b8:
                    f1:21:f6:df:a7:dc:0d:b5:d9:36:c3:44:02:02:4a:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0A:86:4A:95:0F:CF:AE:FB:F4:5E:D3:41:EA:49:F1:64:22:6E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5e:3f:a7:12:6a:43:0c:c8:51:b1:d6:aa:14:85:ba:0e:84:
         8e:10:6e:cc:3b:6f:40:8f:4d:6d:77:c8:dc:54:26:c4:b1:49:
         60:2e:34:23:f9:21:dc:91:66:11:f3:1f:d0:b2:57:57:5a:e8:
         42:e4:3e:96:58:0a:44:50:7d:6e:bc:f4:35:70:59:3d:ef:98:
         36:de:7e:2b:2a:dc:06:e9:25:a5:af:7e:b1:6b:38:45:6b:be:
         c9:54:7d:74:f9:b1:7f:f0:87:3c:21:ce:7a:ee:ed:92:3b:65:
         3b:e4:1f:01:57:e3:19:76:30:ae:b5:81:58:ca:34:31:96:f7:
         51:59:40:74:5e:05:30:9e:95:d2:47:29:c3:20:59:21:92:af:
         72:03:d2:7c:2d:f2:4d:78:fe:27:1f:96:e3:2d:16:12:b7:37:
         df:6e:28:d2:9d:17:e7:e6:75:62:37:2e:dd:79:45:9a:ba:39:
         83:dc:19:5f:b9:8b:f3:83:25:1e:6d:7c:75:86:92:39:96:bf:
         81:11:8e:a4:73:fe:8c:c3:61:5b:63:03:de:e3:00:2c:3e:11:
         39:d8:a8:c5:dc:26:c8:fc:81:5a:ce:d0:de:7e:21:6b:c8:23:
         95:35:0b:c3:82:73:45:4d:3a:d1:e5:d7:f6:3c:28:fa:49:59:
         75:12:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:49:24 2026 by rpki-client