Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa
File:                     6a0785a5-6b8b-33f0-8764-0f2543de502f.roa (raw, json)
Hash identifier:          YS8IquqrZnYdE+mjIPUy8j6YTpoIR4tIlROUAY1x1f4=
Subject key identifier:   5D:3D:0D:D4:74:8B:4A:BA:EA:06:B0:01:31:40:63:19:06:B9:31:D4
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F4328584D7B5BADBECBFA604DAC967BC0
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa
Signing time:             Sun 12 Apr 2026 12:30:43 +0000
ROA not before:           Sun 12 Apr 2026 12:30:43 +0000
ROA not after:            Sat 11 Jul 2026 12:30:43 +0000
asID:                     47069
IP address blocks:        23.167.8.0/24 maxlen: 24
                          162.222.132.0/22 maxlen: 24
                          2602:f9df::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:5b:ad:be:cb:fa:60:4d:ac:96:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Apr 12 12:30:43 2026 GMT
            Not After : Jul 11 12:30:43 2026 GMT
        Subject: CN=dcd9bfa9-8024-448e-8786-0ef22f047f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:88:78:0c:31:9d:2a:b9:2b:44:40:fc:8a:
                    0f:10:80:7c:af:17:b4:9e:a8:42:42:54:e4:f2:c3:
                    61:80:4f:26:47:1c:fb:ec:4a:2e:fb:0e:0d:f0:e9:
                    95:c9:7d:cf:6e:63:3b:ef:8f:99:78:f3:8b:25:f8:
                    92:ab:9e:dd:4f:b8:f1:22:49:c9:67:41:4a:de:4a:
                    15:4e:25:51:76:aa:31:43:b3:f6:36:a3:05:5b:b6:
                    db:15:ff:e9:e8:6c:ba:29:8c:ab:4e:4c:27:81:64:
                    c8:3a:76:5e:e5:b6:d5:d6:ff:25:08:29:40:3b:ce:
                    ef:81:28:ee:7f:55:94:58:38:97:82:d6:4e:87:d4:
                    e5:03:c5:08:88:82:3e:43:fc:30:1b:68:38:a3:b5:
                    2e:97:33:9e:5c:f5:ee:2f:db:02:cc:d2:97:b2:a3:
                    a4:7b:f6:5c:27:a8:72:69:76:a4:62:24:36:88:3e:
                    65:c0:8e:d5:cd:d6:1f:06:00:ea:40:69:90:31:b1:
                    2c:ee:87:26:67:4d:b7:86:f7:6d:81:e7:91:47:39:
                    de:0f:58:6c:63:0a:75:58:db:80:93:ef:5a:f6:ec:
                    cf:ee:51:84:79:9d:b5:87:44:01:4e:93:e8:94:6c:
                    74:a7:81:6c:42:00:ba:ae:ce:34:a5:33:6d:eb:3f:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3D:0D:D4:74:8B:4A:BA:EA:06:B0:01:31:40:63:19:06:B9:31:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.8.0/24
                  162.222.132.0/22
                IPv6:
                  2602:f9df::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:23:6d:59:56:1c:bb:6f:4a:06:49:07:24:7d:c7:29:33:44:
         cc:45:be:72:12:6a:06:01:79:af:a8:39:77:13:65:94:9a:d4:
         05:22:ec:49:ad:81:1b:ee:b6:14:3f:4c:7c:bd:39:9b:0b:12:
         38:48:26:6f:0e:da:47:5c:27:30:c5:64:a8:e2:c6:d6:2e:5c:
         dd:7d:2a:b5:b0:8b:e4:91:79:15:d4:ec:9d:cf:cb:d1:51:c9:
         3b:83:ab:be:c5:ba:3c:d9:05:27:a3:6f:72:1d:99:ea:4c:0e:
         bc:12:25:09:f9:1d:a2:02:40:79:28:56:36:7b:6b:9b:2b:90:
         3d:b1:fd:d4:c4:70:cd:33:f4:c7:fa:d8:58:01:2d:d7:61:9a:
         95:ad:d1:32:ea:90:aa:7e:7f:a7:bc:fe:1c:46:07:d6:4e:ac:
         ab:cc:6c:3f:ad:fd:c9:9d:7f:9a:69:c8:4f:f9:d7:d9:13:f3:
         3c:9a:3b:93:b4:93:98:1b:30:3b:b8:5f:25:5b:ed:2e:5b:da:
         6f:b8:d6:6d:7f:40:27:f1:55:f5:ac:e0:f6:f5:9a:10:b1:f9:
         7f:39:77:d8:69:a8:11:0b:78:77:6d:e2:b4:44:f2:09:18:ad:
         14:1e:c3:90:ca:bb:71:95:19:4d:3e:57:5c:e6:b8:c1:98:13:
         40:ae:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:31 2026 by rpki-client