Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa
File:                     ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa (raw, json)
Hash identifier:          gRy4ZEJpGj95SEc6sWJBsflr09QJvRnFQTuxMykfqlA=
Subject key identifier:   E4:39:E9:2B:95:C7:B0:2A:A1:BC:B5:0D:5D:39:69:C8:7D:07:91:37
Certificate issuer:       /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62
Certificate serial:       010D0C9F4328584DFBD5EBA7D99988A55920B580
Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     12131
IP address blocks:        23.161.32.0/24 maxlen: 24
                          23.161.33.0/24 maxlen: 24
                          2604:d2c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:eb:a7:d9:99:88:a5:59:20:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=fc00a617-5457-45d9-b517-10c98288b5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:23:b2:70:de:b8:d2:36:85:a3:98:1d:57:
                    7a:88:90:7c:f5:2c:39:a2:f0:50:9f:de:59:77:b4:
                    16:dd:2b:47:56:c0:27:d8:7f:f4:bb:34:e7:2d:05:
                    80:55:ec:cc:f7:45:1a:e4:87:17:85:90:6d:e1:8e:
                    59:1b:87:5b:38:53:cf:c9:cd:fb:51:ec:7d:f4:b5:
                    91:10:15:23:04:63:73:cd:ec:1d:cc:4e:be:69:6b:
                    cd:d3:78:34:05:d9:a2:68:7e:7a:a2:75:40:21:4e:
                    e6:18:59:41:1b:b0:46:5c:bf:83:75:b2:5c:bb:7e:
                    44:4c:2a:f3:e0:07:4f:e8:2e:9a:3f:84:8c:3a:10:
                    dd:ff:03:50:ab:88:d5:10:5b:b0:44:99:b7:e5:dc:
                    a9:a9:34:77:51:f9:1e:10:a6:b5:ba:62:c3:c2:af:
                    85:03:31:a5:0c:69:30:90:1f:72:8c:b2:79:22:1b:
                    56:b3:aa:23:cb:2a:70:a4:ea:42:29:d4:de:af:6b:
                    d2:d8:62:e5:0e:99:e8:d9:10:61:71:ef:28:c1:62:
                    2e:fc:25:44:dd:04:d5:fb:7e:ec:da:e9:07:10:f9:
                    ce:b3:13:0a:e3:5c:2e:41:d6:6c:43:e5:27:48:1f:
                    fb:e7:09:82:7e:64:48:47:74:8f:b7:16:67:5c:56:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:39:E9:2B:95:C7:B0:2A:A1:BC:B5:0D:5D:39:69:C8:7D:07:91:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl

            X509v3 Authority Key Identifier:
                keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.32.0/23
                IPv6:
                  2604:d2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:3b:0c:7f:cd:bc:c4:ba:3d:18:92:7d:44:22:0f:98:b6:
         11:a6:23:b5:d0:43:4c:52:e6:ac:4f:37:2d:ba:3f:cb:c6:bd:
         51:cc:f0:99:19:5a:46:ef:fb:50:36:31:8d:a2:da:35:3b:6c:
         c8:66:0a:2b:79:65:e4:6d:c5:bc:1c:0b:71:d6:f8:9a:53:10:
         63:53:67:6c:a4:b2:ce:01:fa:26:00:0f:e7:31:a9:bc:cf:4f:
         ea:e4:ff:79:b5:51:d7:27:74:ef:da:5b:ef:21:71:f3:39:11:
         54:37:e0:e2:c4:9b:30:24:eb:ce:4c:08:4c:60:18:81:7b:f3:
         38:04:4e:5e:43:a7:b8:42:a6:02:f2:32:e4:98:7b:53:94:cf:
         85:92:b4:05:87:e8:f7:b3:72:51:81:60:46:d0:87:9a:c0:a8:
         97:73:92:a7:ac:a0:49:9c:00:b7:21:cd:ec:e5:1e:9c:a6:f9:
         88:88:3e:06:6e:89:4b:f7:bd:0a:59:e4:e4:10:4f:cd:d5:b8:
         35:b7:1e:1b:c3:cf:91:f2:b7:4e:3f:2e:c1:d3:be:2a:61:b6:
         eb:1e:83:05:e4:59:d7:c8:e6:38:ce:38:98:aa:57:4f:15:af:
         be:cd:34:3d:55:eb:85:88:02:72:ac:a2:5f:d0:24:31:c8:aa:
         34:f4:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:58:58 2026 by rpki-client