Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/81d31864-726f-36cc-86a4-ef212cd940e3.roa
File:                     81d31864-726f-36cc-86a4-ef212cd940e3.roa (raw, json)
Hash identifier:          uDLLHF5TL873UHAeZ9baVbqLPK/bBeE7MW7vB6KevZI=
Subject key identifier:   9B:AD:66:4D:C2:5B:B5:EA:9C:73:0F:64:20:8F:FE:0A:7D:85:F6:FD
Certificate issuer:       /CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
Certificate serial:       010D0C9F4328584D703FD8477E9C6D7A10ED33C0
Authority key identifier: 05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/81d31864-726f-36cc-86a4-ef212cd940e3.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     198949
IP address blocks:        23.91.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d8:47:7e:9c:6d:7a:10:ed:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=ae0c5684-5f54-4648-a016-4abfa3d758b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:23:08:e0:c5:16:d3:2c:9b:3c:2a:41:81:
                    5a:e2:1f:20:ff:b5:df:3f:96:db:2b:ed:41:90:ed:
                    da:2b:91:55:e6:00:4a:f4:1d:98:37:bb:41:5b:11:
                    44:a2:b9:29:1e:f7:31:91:da:e2:11:62:11:72:a3:
                    9c:41:bc:57:c6:e3:30:aa:5b:f6:03:e2:a0:84:16:
                    20:d4:76:46:29:8b:66:6e:66:22:bb:cb:5b:31:6c:
                    2a:69:2e:64:a9:62:f6:25:35:76:0a:3c:f7:e6:d4:
                    d9:7f:c2:0c:57:cd:8a:1c:24:55:5c:1f:b7:6e:56:
                    e5:e7:21:4d:3a:52:21:56:df:2e:a3:11:92:0e:3a:
                    31:3c:2a:3b:a4:42:24:96:09:2a:68:99:17:2f:84:
                    b3:ef:e2:28:a4:07:a1:0a:25:0f:fa:ab:c4:a7:45:
                    1c:56:30:40:ef:6d:2b:9c:4f:c1:03:06:75:8a:14:
                    38:a0:92:13:4f:be:00:98:a2:dd:ea:27:cc:3e:99:
                    7d:8e:37:cd:f5:61:8a:d7:d0:2f:67:31:90:f1:51:
                    a5:e2:c6:25:2b:6d:08:c3:b9:74:00:83:3b:46:47:
                    45:95:ff:18:3d:74:fb:85:0a:c0:2a:d0:64:2d:9c:
                    de:45:ae:d2:c5:aa:55:96:90:8a:67:a6:a0:90:bd:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AD:66:4D:C2:5B:B5:EA:9C:73:0F:64:20:8F:FE:0A:7D:85:F6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/81d31864-726f-36cc-86a4-ef212cd940e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl

            X509v3 Authority Key Identifier:
                keyid:05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e3:84:fa:73:db:f7:93:6b:10:83:fa:64:fd:84:95:a6:88:
         00:91:21:e0:8f:81:d3:10:b9:1f:55:c8:58:fe:08:5d:90:39:
         cc:db:f4:13:2d:0c:59:f2:98:9f:16:6d:6a:ee:73:a8:89:72:
         73:74:af:9f:ea:aa:71:96:a9:b4:36:99:68:b5:cc:bf:4d:6d:
         9b:01:d0:50:f5:90:28:07:aa:dd:2a:7e:1f:d8:f7:87:ae:52:
         b9:2a:57:6b:a8:3f:b0:1d:da:8d:e2:fa:50:63:78:a6:32:0e:
         51:a8:fb:1d:68:83:1f:2d:8b:fe:8f:91:ef:6c:d8:f5:f5:51:
         45:7f:a2:e3:aa:40:21:ef:4e:d4:70:90:96:d0:bc:72:b0:e2:
         82:81:b5:c0:4d:a7:5a:b5:ad:36:ed:9b:b6:3d:b3:b9:1a:41:
         3c:45:14:f8:5d:88:96:83:ba:8d:37:2d:b8:c6:ae:43:83:d5:
         c5:97:ee:df:48:24:1f:60:6f:68:2a:90:77:08:0a:17:2b:d2:
         a0:ee:7a:72:64:77:2c:eb:37:4e:52:77:df:c5:8c:f2:25:dd:
         f3:d4:2f:b0:8e:78:4f:0b:8a:79:59:6e:fb:82:04:33:0d:f2:
         65:32:32:37:98:8e:74:62:82:20:17:2e:bd:94:30:0d:93:2f:
         30:ba:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:50 2026 by rpki-client