Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/0c0c2783-1444-3b86-9253-729890991ed3.roa
File:                     0c0c2783-1444-3b86-9253-729890991ed3.roa (raw, json)
Hash identifier:          J8nIqjsf0tQl7HdLkqWIQH4JDxWl2cJCea0mzZqBwbw=
Subject key identifier:   2B:9B:96:E4:48:F7:F5:2A:C7:6E:8F:DD:B3:F0:A5:BA:DC:EF:5F:F1
Certificate issuer:       /CN=2654343f-7862-4859-8638-b9c2008b3151
Certificate serial:       010D0C9F4328584D83CAB26E3E1CBC1E46AFB600
Authority key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/0c0c2783-1444-3b86-9253-729890991ed3.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     13737
IP address blocks:        23.170.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b2:6e:3e:1c:bc:1e:46:af:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2654343f-7862-4859-8638-b9c2008b3151
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fa0a77a8-66bd-422d-a53d-0afd14ebed68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:a9:2d:d2:44:af:be:d4:65:1c:e8:53:bf:
                    f9:f0:67:2e:51:5c:e4:a0:9e:50:94:d9:89:31:b4:
                    d6:e6:55:d4:00:be:65:30:3d:65:16:56:14:9f:02:
                    63:8c:9c:e7:d4:b5:d2:9a:4e:c0:58:fc:25:a5:bd:
                    eb:12:3d:56:49:25:9f:23:c7:da:2c:71:e2:93:2a:
                    2c:b4:5d:f9:81:da:47:28:7f:42:21:db:ba:7f:65:
                    4c:17:b1:a9:34:09:30:d1:fa:01:b7:61:a6:43:cb:
                    0a:e9:34:76:9b:41:12:e7:6c:04:21:d2:08:bc:00:
                    5a:2f:50:c1:96:0d:63:19:aa:76:1c:74:af:e4:e8:
                    e5:22:f0:60:29:7b:49:01:06:e3:2d:1a:ed:5e:a1:
                    6e:d8:53:55:55:8c:d0:b8:5e:b2:44:02:5b:8c:15:
                    91:36:a7:de:28:d6:65:54:b2:36:dc:0f:16:50:e1:
                    c1:af:85:55:cc:24:d3:fb:12:25:cd:60:2e:29:c1:
                    16:fe:4f:bf:28:a8:4a:c7:a0:e4:bf:8b:6e:55:75:
                    8e:3c:73:22:14:5b:6e:d4:5e:fa:f4:7a:84:06:cf:
                    b7:aa:03:02:dd:e8:b9:1c:4e:69:73:bd:9c:1a:3b:
                    9c:65:56:48:8b:3e:2e:41:4f:09:c2:82:a7:2d:dc:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:96:E4:48:F7:F5:2A:C7:6E:8F:DD:B3:F0:A5:BA:DC:EF:5F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/0c0c2783-1444-3b86-9253-729890991ed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl

            X509v3 Authority Key Identifier:
                keyid:9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:39:42:15:5e:45:53:91:d9:dd:0f:bd:0d:82:e2:f1:b7:80:
         99:15:f5:94:e0:25:13:14:1c:be:7f:f3:07:a3:3f:72:69:bf:
         94:72:cf:1c:99:a7:06:cc:23:c8:bd:e4:2b:a6:44:92:c8:eb:
         e1:11:3b:cd:a2:2c:3f:11:8c:1a:39:20:79:94:da:06:3c:39:
         53:7c:07:fb:c7:54:b3:cc:25:33:f3:07:d3:86:e1:14:73:03:
         7a:31:7e:05:4d:80:e5:ae:82:e5:3c:53:0e:26:f9:19:e6:23:
         66:15:85:4f:7c:b3:b5:ff:5a:ef:a3:bb:cf:77:96:1e:c8:6a:
         10:ff:fe:8f:b9:04:6f:aa:74:52:25:c6:4d:e8:80:4a:d5:a6:
         a1:65:e9:1e:9b:a6:f2:e4:42:e7:3c:31:bc:f8:e3:e5:c8:8a:
         e0:26:00:86:dc:b1:f8:31:d7:63:6c:eb:26:d2:f1:8d:ec:90:
         fa:c2:06:4a:13:73:6f:9b:71:a4:bd:9e:aa:54:a5:af:4e:41:
         f5:27:c6:bc:4b:58:e0:a9:41:2a:42:4e:53:ca:c3:d3:6f:e6:
         09:38:0f:54:2b:f9:bc:e8:20:b4:df:3d:31:58:ab:de:b5:98:
         fd:d4:b2:66:83:43:d7:87:d0:20:4c:f3:bc:f8:08:9d:ac:0c:
         0f:2f:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:47 2026 by rpki-client