Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa
File:                     aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa (raw, json)
Hash identifier:          BmYvLCETEl8etjVOX55YeNuTUeV4NMX+gXbP/MD4q+Q=
Subject key identifier:   6C:4F:AB:90:16:45:B5:42:28:9E:6B:D3:52:34:A2:BC:26:B9:E6:DD
Certificate issuer:       /CN=cf287819-e56f-4dbd-8904-66671e2f705d
Certificate serial:       010D0C9F4328584D75D54F3CCB11CF0000801100
Authority key identifier: 29:96:91:4F:62:C8:10:AF:B0:DF:ED:F5:E9:62:B2:2C:9B:88:1A:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     63023
IP address blocks:        23.139.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:4f:3c:cb:11:cf:00:00:80:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf287819-e56f-4dbd-8904-66671e2f705d
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=4b7e56ab-7a67-4920-a7f9-c5a22886987b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:60:97:45:08:1d:aa:bf:d3:df:01:80:c9:
                    12:f0:53:7d:1f:d7:db:54:27:a4:80:a3:44:ac:2f:
                    ce:07:2f:de:2b:65:30:c2:5f:f8:c9:3b:f9:ee:d0:
                    ca:b5:d1:21:31:cd:d3:08:cd:7b:b4:c9:7e:4d:70:
                    d4:4f:09:84:08:37:4b:38:e4:a6:7b:81:b2:9d:71:
                    26:5f:83:27:33:4b:41:9c:a3:5b:9d:10:2c:c0:e1:
                    f3:10:74:1b:9c:7d:46:3a:7f:27:0e:06:92:c6:62:
                    fb:93:bb:b0:11:bf:40:29:e9:81:10:b0:eb:8f:2f:
                    8e:a3:a6:92:28:46:57:7e:07:4e:59:09:a8:0f:de:
                    a7:14:e8:06:1d:eb:ff:47:0b:30:3b:69:26:7c:c0:
                    f3:1e:8a:23:4a:e6:a0:57:c0:73:ba:27:76:e5:4f:
                    71:2c:86:85:a1:b5:60:1e:41:88:72:ea:f4:d9:2d:
                    bf:f2:6e:7c:cb:42:d0:6d:35:df:70:5c:dc:7c:83:
                    c9:f0:f4:2f:9c:96:79:31:11:f0:3f:d3:7d:8d:23:
                    8f:20:96:d7:71:92:ae:14:93:53:88:5f:0d:42:07:
                    0f:be:40:c8:ab:b5:e8:83:a0:ef:c1:5b:2a:34:7a:
                    1c:3d:4a:c4:5d:8f:61:12:ea:4c:56:d1:cf:c6:db:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4F:AB:90:16:45:B5:42:28:9E:6B:D3:52:34:A2:BC:26:B9:E6:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.crl

            X509v3 Authority Key Identifier:
                keyid:29:96:91:4F:62:C8:10:AF:B0:DF:ED:F5:E9:62:B2:2C:9B:88:1A:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:8e:a1:9d:f4:b3:65:dc:0e:77:39:42:9c:68:8b:22:a4:
         af:5b:6e:f3:a5:ef:ee:0d:4a:77:bd:5c:c1:e4:2a:5b:0c:4a:
         c9:ce:b7:a6:96:bd:3c:f5:4d:6b:99:6b:b8:17:62:e0:60:52:
         87:51:e2:39:2f:9f:9e:51:a8:26:e7:68:63:4a:1c:7c:e3:6a:
         78:10:cc:6d:38:fe:2c:df:80:ea:2c:e2:bf:4c:83:29:3a:ce:
         5d:98:6d:93:6a:4e:75:80:6a:76:bd:74:9c:1b:19:e3:21:61:
         d7:6e:56:50:3b:f6:af:49:a9:22:04:f9:79:32:1e:a5:64:77:
         91:2e:0a:09:a6:b3:bf:99:de:d2:6f:0b:d0:eb:1f:0c:a8:7b:
         d1:45:f6:7a:d0:36:47:ee:f1:c1:74:79:d4:b8:e6:d2:90:c5:
         b6:a6:4d:fd:14:df:a5:39:35:3a:5c:7b:a6:43:9d:f2:46:7a:
         97:25:d9:d3:40:3a:04:8d:1b:5d:cd:ae:36:ea:68:64:7f:4f:
         4c:59:ea:37:f4:35:fb:c7:8c:30:5e:60:80:34:27:7c:c2:df:
         b5:43:26:f3:73:a4:b7:e1:d1:d4:2d:8e:9c:b2:2c:93:3e:3f:
         84:b0:58:fe:e1:b4:8e:90:7c:6b:c6:a8:9f:93:1f:08:e5:22:
         4a:83:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:42 2026 by rpki-client