Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/8cf6a41b-6156-36e4-89af-146f906b490d.roa
File:                     8cf6a41b-6156-36e4-89af-146f906b490d.roa (raw, json)
Hash identifier:          GYC3RZCft8ceJ9uCQQfUVa/v3VL4j4nTQDg9eSm3ewY=
Subject key identifier:   6C:5B:5B:50:32:F9:7E:E9:B4:D4:16:E7:EB:A9:D8:6F:A5:83:AC:8B
Certificate issuer:       /CN=19964ea4-9d3c-4312-8b31-cb597d7d9722
Certificate serial:       010D0C9F4328584CEFF25FF59AA54BCED79FD240
Authority key identifier: 00:1C:44:DE:10:8D:12:5F:60:98:2E:0E:A9:9F:64:2D:3A:E6:50:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/8cf6a41b-6156-36e4-89af-146f906b490d.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     8095
IP address blocks:        23.181.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/19964ea4-9d3c-4312-8b31-cb597d7d9722.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/19964ea4-9d3c-4312-8b31-cb597d7d9722.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:5f:f5:9a:a5:4b:ce:d7:9f:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19964ea4-9d3c-4312-8b31-cb597d7d9722
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=346aab6d-6cdc-41d3-99dd-54330597aea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:ec:44:17:74:51:51:43:a9:78:98:9d:42:
                    6f:b3:52:8f:03:b0:ba:df:70:4a:4e:2a:d4:05:4c:
                    d3:79:b6:12:23:52:08:c4:35:ee:83:45:50:b6:8e:
                    cb:f2:16:64:5e:49:c7:7c:0c:77:f1:1f:d7:21:6d:
                    b0:58:0a:ea:bb:d2:78:d6:bb:ca:58:02:ce:df:90:
                    44:f4:41:c6:bc:c6:23:fa:58:8c:19:a9:7d:af:42:
                    c4:00:3b:ab:4e:3e:76:0b:75:cf:fd:46:21:73:d1:
                    72:8f:5b:e3:4b:ed:a7:8c:7d:82:b5:e0:7b:c1:ac:
                    d9:b9:3e:52:ff:df:7d:0b:a9:51:de:2b:34:a9:26:
                    e9:9d:d7:7f:ec:87:0f:40:9e:d0:52:81:85:40:18:
                    3a:ee:e0:ec:df:72:93:12:d1:fd:81:b3:99:0b:c2:
                    fa:cb:07:99:9a:73:5e:47:37:8a:73:03:64:1f:69:
                    55:b1:b1:d4:80:c7:58:e1:76:95:ad:db:d6:60:cb:
                    52:36:f2:fd:bd:90:3a:ba:8e:ec:48:88:04:66:6e:
                    0c:39:76:7d:b1:a7:07:03:37:cb:08:b9:8e:0c:32:
                    bd:f5:b1:7e:30:42:f9:5e:db:91:eb:67:51:a0:25:
                    c1:15:97:99:a1:18:90:0f:86:49:70:f8:e9:b2:02:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:5B:50:32:F9:7E:E9:B4:D4:16:E7:EB:A9:D8:6F:A5:83:AC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/8cf6a41b-6156-36e4-89af-146f906b490d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/19964ea4-9d3c-4312-8b31-cb597d7d9722.crl

            X509v3 Authority Key Identifier:
                keyid:00:1C:44:DE:10:8D:12:5F:60:98:2E:0E:A9:9F:64:2D:3A:E6:50:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a9:c0:fd:7e:fe:6a:fe:0c:ea:77:dd:93:2c:1a:4b:1b:e3:
         f5:3a:62:73:cb:c9:34:a3:15:49:63:ae:8d:d7:29:88:15:34:
         bc:65:c9:39:53:dd:22:1d:a2:1a:d1:ff:d6:4c:ed:b3:91:f0:
         15:8c:dd:47:dd:7a:1b:1b:f0:b2:3b:a4:dd:0e:af:d5:56:a6:
         34:8a:49:e8:da:6d:32:95:3b:a7:42:9c:6e:70:dd:f8:3b:b8:
         ec:a5:c7:88:22:b3:92:b5:74:64:72:1d:e2:6a:8f:21:65:18:
         ba:aa:3b:ef:58:04:c0:7f:7a:72:a5:dd:e0:ca:2b:1d:c4:de:
         57:e1:1c:bc:5b:c2:62:fc:3f:4c:62:97:56:34:39:66:35:fc:
         d0:af:e1:2b:eb:0e:29:da:9e:9d:c7:60:b8:17:df:63:fb:4d:
         5c:c2:7d:27:79:8a:32:3a:5a:ef:85:b8:c0:6e:ac:b8:4b:c7:
         73:c4:8e:69:52:26:6c:ac:34:3f:67:ec:68:14:ca:57:7a:75:
         d3:1a:15:56:8a:39:4a:c4:8d:5b:52:19:c8:cb:f7:1d:fe:c7:
         04:47:22:83:76:bc:ba:c3:9a:0f:e8:cb:1b:4f:b7:85:25:cf:
         af:02:32:18:07:0d:57:34:cf:df:4f:68:6b:ad:e8:31:ed:ed:
         bb:49:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:50 2026 by rpki-client