Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
File:                     d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa (raw, json)
Hash identifier:          RDsMfb82+VKYjgsjbpK9avUVFWb5w1txoG+2kVpT9js=
Subject key identifier:   94:52:6E:C9:C4:8D:73:56:4C:09:5E:38:CE:3E:AE:17:72:C7:7B:D1
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F4328584CEB0B414F69F8BED2B4CCFB20
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
Signing time:             Fri 02 Jan 2026 14:00:39 +0000
ROA not before:           Fri 02 Jan 2026 14:00:39 +0000
ROA not after:            Thu 02 Apr 2026 13:00:39 +0000
asID:                     19879
IP address blocks:        23.169.88.0/24 maxlen: 24
                          2602:f9a6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:0b:41:4f:69:f8:be:d2:b4:cc:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Jan  2 14:00:39 2026 GMT
            Not After : Apr  2 13:00:39 2026 GMT
        Subject: CN=76ffdd3f-7c58-44dd-b1ed-59be89990913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:1f:57:7c:90:8c:15:77:a0:70:04:e0:1b:
                    ea:3c:db:7d:49:f4:fe:8a:90:1d:68:51:9b:8d:8a:
                    9a:a1:8a:19:06:52:e8:9e:cd:5a:68:45:96:a7:59:
                    32:ec:7a:0d:fe:68:41:8c:7b:91:ef:53:b3:fe:9a:
                    51:10:ec:5c:13:bb:f0:45:00:ce:bf:17:65:f2:b8:
                    de:5c:0f:87:59:32:1d:31:d3:6a:8b:83:5e:a4:e3:
                    9e:bc:01:3b:bc:56:a7:a4:95:37:68:4e:2f:9b:42:
                    90:6b:74:a7:37:60:a8:01:ab:fc:28:f3:36:bf:ce:
                    3e:02:c2:87:cc:93:ab:f0:19:ab:13:90:e5:c8:57:
                    5c:b2:05:48:9c:87:51:2b:56:02:0f:31:8f:1c:5f:
                    51:72:02:a3:d8:78:1b:db:9d:2b:eb:b6:b9:a3:d6:
                    01:f1:d5:91:9e:24:5c:fe:18:6c:23:13:2d:2c:79:
                    54:c3:a9:65:c6:f6:17:33:24:1b:df:2e:51:3f:6a:
                    46:3c:aa:b0:fc:b9:0b:e0:e7:a4:3d:87:7b:ac:89:
                    44:91:2d:c9:96:48:d0:01:be:e7:79:8b:58:fc:28:
                    f0:41:d7:8b:8b:0b:fb:12:31:f4:0c:df:24:45:15:
                    55:5f:c4:4d:33:82:b2:e2:76:1e:3e:11:df:e8:c6:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:52:6E:C9:C4:8D:73:56:4C:09:5E:38:CE:3E:AE:17:72:C7:7B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.88.0/24
                IPv6:
                  2602:f9a6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e2:19:50:58:1a:a4:42:2c:75:02:95:15:87:c9:34:78:93:
         66:39:d9:c6:c8:9f:f2:99:97:77:ae:33:c1:f6:8f:98:59:36:
         44:0a:69:f8:a2:2a:82:e2:ce:84:5f:5f:70:28:e5:82:56:93:
         06:4b:0e:78:65:22:1e:61:f6:78:21:49:c3:68:6c:a3:a1:c1:
         0f:e8:ca:f9:2b:cf:24:68:af:fd:41:aa:ed:d8:f5:c9:e5:d1:
         27:66:a2:6c:35:69:d4:c4:70:01:4b:bc:1a:7d:bd:34:3f:a8:
         ab:cc:23:ac:88:0c:3c:08:ce:1c:3c:ae:22:f3:8f:fa:05:09:
         dd:49:5a:80:19:13:96:4c:d9:ce:0f:90:ef:8a:3d:9d:4a:a2:
         b4:57:15:95:2d:66:58:a6:ff:e8:96:e9:d1:31:e2:08:15:41:
         6f:8e:db:ca:99:8a:fd:0c:dc:59:ce:d4:13:7f:e7:0b:27:b0:
         8f:f7:3e:6f:ff:d8:b6:00:f4:2a:1d:91:6f:87:b5:ce:81:69:
         04:d6:40:3d:9a:13:70:39:8f:b9:69:11:e8:17:6a:c0:53:3c:
         ef:b8:a0:1c:a8:10:46:f9:ce:08:f9:ca:75:6a:64:e3:e1:38:
         18:65:bc:a3:6d:87:5e:a8:0a:a4:d7:c8:3a:2d:4b:15:40:0b:
         ff:8d:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:54 2026 by rpki-client