Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/8dc01aba-8488-342f-9f78-243bba3be1b2.roa
File:                     8dc01aba-8488-342f-9f78-243bba3be1b2.roa (raw, json)
Hash identifier:          xoHBsqCOwp18Kv9w/yYyrYBVmj+gab1/gjZTNmcZd7I=
Subject key identifier:   08:37:C3:23:2A:80:68:45:A4:05:0C:2B:72:EC:E8:5C:7E:A0:87:42
Certificate issuer:       /CN=e9967e8f-a4c2-4d89-82dd-95d9c3feb83f
Certificate serial:       010D0C9F4328584DE6E5D3DB4DB19D9A6D279480
Authority key identifier: 68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/8dc01aba-8488-342f-9f78-243bba3be1b2.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     400735
IP address blocks:        23.162.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:d3:db:4d:b1:9d:9a:6d:27:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9967e8f-a4c2-4d89-82dd-95d9c3feb83f
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=4ea6d048-44b8-4d44-b54a-dd1713ff5a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:93:b2:9c:d7:6c:11:a9:ba:01:21:8c:02:
                    c2:93:ee:84:24:3d:d8:b2:6c:48:50:d9:00:0f:9d:
                    a1:67:88:08:b1:05:02:4c:b2:6a:3d:b4:22:3a:52:
                    b5:63:52:37:f7:c6:72:eb:ad:42:db:ef:12:0c:f4:
                    85:72:a5:76:92:2e:41:51:0d:c7:bc:cd:6d:0d:b4:
                    fe:c9:5d:2c:da:0e:95:9d:9d:85:40:57:13:ba:44:
                    46:9b:76:29:67:e8:35:59:bc:57:d2:7a:78:cb:a2:
                    bb:bc:d2:99:98:6a:6c:84:87:b2:35:14:73:b9:98:
                    60:17:ba:81:0e:9a:dc:14:ee:96:bd:26:24:ce:bd:
                    ae:86:46:fe:ad:92:df:fe:36:ce:b8:1d:7b:14:2e:
                    69:11:de:b6:ab:bd:0b:8a:7c:03:3c:1d:cb:66:cf:
                    00:e5:7f:39:97:29:6f:55:4f:40:a5:5b:93:fa:e2:
                    6e:4c:ff:59:06:a8:01:f6:43:9c:62:58:b3:25:49:
                    2d:fa:14:7e:fe:bb:7a:6f:af:04:a8:5a:f5:6b:ff:
                    91:58:fa:4d:67:f2:07:59:d3:51:93:fb:f1:f5:5d:
                    45:6c:80:d9:48:dd:8d:a8:bc:c6:1a:f0:ff:6a:3c:
                    13:0e:0c:d8:e3:f0:8d:9e:0f:40:80:97:73:a6:56:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:C3:23:2A:80:68:45:A4:05:0C:2B:72:EC:E8:5C:7E:A0:87:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/8dc01aba-8488-342f-9f78-243bba3be1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.crl

            X509v3 Authority Key Identifier:
                keyid:68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:1d:6f:a0:f9:4b:c4:54:14:e9:8b:1c:95:0d:7f:35:be:
         67:99:85:5e:6f:6b:95:73:98:c1:82:14:73:16:d3:5b:2d:af:
         19:c1:cd:78:ae:b4:ed:32:c0:e6:a2:9c:17:76:1e:a0:c7:8c:
         ae:b3:c1:75:46:56:a0:e0:48:93:4e:9b:f1:1c:3c:c0:20:57:
         1a:6f:7d:25:97:58:cf:75:b4:c0:4b:81:72:0f:24:26:83:ed:
         14:ed:7d:e2:83:2e:45:5a:ea:d7:27:85:02:07:fd:58:cc:5c:
         80:81:f5:83:b6:8b:f4:e8:f8:d6:99:52:1f:88:cd:60:1b:d1:
         a7:f9:e7:b0:63:65:2e:ec:b6:20:a2:0c:ef:05:d5:52:9a:03:
         63:3d:33:25:54:70:e3:53:39:09:b8:ff:2e:b1:37:08:c3:a6:
         1a:ef:c1:0a:1c:6c:56:b0:2c:fb:9d:ce:e2:29:81:76:58:b5:
         11:cd:75:e9:1e:e2:7a:c8:a9:73:2a:09:10:38:ec:90:b2:31:
         c0:02:5b:97:ba:bd:ec:53:44:c0:ed:40:13:73:81:8c:0e:8f:
         09:11:d4:e2:a9:df:01:83:c4:39:fe:8b:07:b2:83:6f:80:a7:
         6a:ff:f4:a5:81:1b:f8:96:cb:03:54:dd:ab:87:76:e4:2b:42:
         3e:22:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:35:13 2026 by rpki-client