Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/baa201dd-5eb8-31f6-b74f-0d232b6dd4a2.roa
File:                     baa201dd-5eb8-31f6-b74f-0d232b6dd4a2.roa (raw, json)
Hash identifier:          Ikv9KFTI+jATYrmT8EMnFG1qxnewOiIq4u9LIslEUoM=
Subject key identifier:   4D:81:5C:65:4C:54:CD:3F:2E:3E:8D:1D:0B:62:65:9D:1A:26:57:11
Certificate issuer:       /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db
Certificate serial:       010D0C9F4328584DD309484A5F21F07F2DA70280
Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/baa201dd-5eb8-31f6-b74f-0d232b6dd4a2.roa
Signing time:             Wed 13 May 2026 22:15:50 +0000
ROA not before:           Wed 13 May 2026 22:15:50 +0000
ROA not after:            Tue 11 Aug 2026 22:15:50 +0000
asID:                     401626
IP address blocks:        23.132.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:09:48:4a:5f:21:f0:7f:2d:a7:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db
        Validity
            Not Before: May 13 22:15:50 2026 GMT
            Not After : Aug 11 22:15:50 2026 GMT
        Subject: CN=d9c5a7f3-407b-40d8-b7f2-31803a38edd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:f7:8a:dd:39:3a:66:ae:7c:be:3f:1c:f3:
                    8b:b9:ff:1e:a0:c3:7c:99:8f:c9:34:67:55:5d:3d:
                    17:d0:47:7d:9d:d3:e8:8f:58:4e:df:5e:0d:0e:36:
                    6b:4b:da:e0:e6:7d:18:da:70:87:03:d5:5e:22:04:
                    e9:8d:06:5a:2e:ee:d2:a4:15:a8:89:47:07:65:00:
                    20:9f:da:56:c5:60:40:bf:84:58:7f:80:8b:23:82:
                    24:5f:5f:b6:36:82:22:f2:e5:32:14:92:f8:31:29:
                    8a:ea:47:12:08:34:dc:45:0c:9d:9a:03:05:a4:af:
                    6b:af:bc:d1:84:2b:5f:21:46:17:32:3d:65:51:9c:
                    a8:bd:55:50:20:00:3a:8d:6a:03:ea:eb:15:a1:1e:
                    3c:6e:4f:a6:10:42:58:38:36:50:ce:0d:83:6b:21:
                    37:fe:b5:49:4c:1c:36:1c:20:98:3d:de:a4:a2:31:
                    5f:5f:55:15:b1:fe:1e:91:6e:e2:b1:fd:ad:13:16:
                    8e:18:2f:31:4d:3d:6f:cb:f2:7c:4c:67:c5:ed:8c:
                    73:80:86:f0:e4:fe:e0:14:3a:f1:c0:19:ab:d7:a7:
                    9a:f5:2c:c7:a7:4c:9f:c9:40:80:d0:36:56:df:46:
                    01:1a:b9:13:ac:07:8a:83:4c:ac:27:33:a3:1e:79:
                    3c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:81:5C:65:4C:54:CD:3F:2E:3E:8D:1D:0B:62:65:9D:1A:26:57:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/baa201dd-5eb8-31f6-b74f-0d232b6dd4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:43:e6:76:42:ff:20:b8:14:2e:12:09:05:cc:c3:9c:47:ae:
         ea:98:0c:97:d0:6b:1f:7b:34:50:01:6e:cf:ac:13:fa:54:c2:
         d9:24:a6:cd:c1:3a:11:85:95:63:9d:0d:5a:5f:24:dc:df:62:
         fb:8c:b4:03:3d:99:6d:e5:3f:95:6b:06:1b:95:cf:90:21:46:
         2b:ae:40:ca:aa:f7:78:6a:00:7b:47:9c:9c:15:b5:98:fb:0c:
         fe:7d:9a:6d:b9:2a:a0:27:32:a5:aa:87:fd:b5:d8:93:a5:59:
         2f:f4:25:9b:eb:f6:2e:85:94:62:8d:89:03:1d:dc:e4:b5:7e:
         98:fc:e9:5e:0d:18:84:fa:84:23:c2:fc:8c:9f:38:cb:3b:34:
         38:83:55:53:c0:37:9c:65:0c:ff:c0:73:f1:47:29:cb:8d:7e:
         f8:ec:cb:44:9f:51:98:d0:d7:59:3d:1a:96:73:59:d2:3a:91:
         92:4c:00:c4:a0:6f:16:c2:df:82:91:57:d0:51:22:40:10:13:
         c3:16:7d:df:2f:7c:6a:80:91:b0:84:a2:89:d5:aa:57:88:50:
         d7:8b:ec:ad:92:7b:88:38:0a:1b:1d:b4:ee:98:f4:39:fb:ee:
         e5:c2:3e:b3:91:34:1d:34:5f:7a:62:56:63:8a:9b:ea:61:53:
         c5:b5:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:55 2026 by rpki-client