Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/304cd7fa-6e7a-325f-a619-305f397b1a16.roa
File:                     304cd7fa-6e7a-325f-a619-305f397b1a16.roa (raw, json)
Hash identifier:          lmS+AiII3pMW4OX6E40TisxjZSLaqYyAfylNVuk/fg8=
Subject key identifier:   7A:BF:07:1F:53:6F:51:CF:01:79:6B:31:FC:3B:75:CF:0B:37:4A:80
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D571FA81E9A45B15BBF316900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/304cd7fa-6e7a-325f-a619-305f397b1a16.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     21342
IP address blocks:        23.2.10.0/24 maxlen: 24
                          23.2.11.0/24 maxlen: 24
                          23.2.19.0/24 maxlen: 24
                          23.59.162.0/24 maxlen: 24
                          23.193.22.0/24 maxlen: 24
                          23.193.23.0/24 maxlen: 24
                          96.16.208.0/24 maxlen: 24
                          96.16.209.0/24 maxlen: 24
                          96.16.210.0/24 maxlen: 24
                          96.16.211.0/24 maxlen: 24
                          184.29.148.0/24 maxlen: 24
                          184.29.149.0/24 maxlen: 24
                          184.29.150.0/24 maxlen: 24
                          184.29.151.0/24 maxlen: 24
                          184.29.152.0/24 maxlen: 24
                          184.29.153.0/24 maxlen: 24
                          184.29.154.0/24 maxlen: 24
                          184.29.155.0/24 maxlen: 24
                          184.29.156.0/24 maxlen: 24
                          184.29.157.0/24 maxlen: 24
                          184.29.158.0/24 maxlen: 24
                          184.29.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a8:1e:9a:45:b1:5b:bf:31:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=6982681b-1934-4c42-bac4-eb39a50db174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d6:64:42:eb:d7:62:64:0b:85:bd:dc:31:af:
                    40:69:c3:03:a9:e1:56:39:a6:c6:a9:b7:95:0e:8b:
                    e4:82:8d:a3:6f:ea:1a:b6:67:5b:c5:41:b3:2f:ac:
                    a8:fb:95:01:ad:5e:b0:a9:13:8c:9b:9c:03:dc:50:
                    53:a3:4e:36:d7:43:c7:86:e2:ca:c9:ff:0e:81:df:
                    ac:cd:12:15:a3:20:f9:7a:a1:73:61:8b:81:e6:49:
                    f2:b8:7a:3d:da:58:cf:74:a6:72:d9:cc:ec:7d:e2:
                    9c:fa:dc:0f:43:c8:19:b3:b0:f5:36:43:ac:21:27:
                    cc:d9:7f:7c:7c:a5:29:4e:f0:cc:9c:94:0a:33:28:
                    d9:45:f9:5e:67:91:26:42:b6:3c:35:64:8b:46:a5:
                    e1:23:9f:a7:85:06:87:59:5c:88:d4:35:f0:6c:b7:
                    e4:4d:7a:01:13:c2:2b:37:f4:17:04:7d:1e:77:c6:
                    c3:9d:c6:55:e4:30:df:f6:0d:87:54:71:a9:30:3a:
                    3d:3f:51:d1:8c:a5:21:60:a3:74:c1:6a:7c:ad:33:
                    f7:48:68:46:28:4d:20:30:0a:e1:10:fc:82:c7:5b:
                    08:9c:d0:a6:2f:fd:43:fb:7d:2d:c6:04:48:dc:ef:
                    a2:bc:bd:ed:29:b0:1a:e5:50:bc:c2:2f:66:fd:2a:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BF:07:1F:53:6F:51:CF:01:79:6B:31:FC:3B:75:CF:0B:37:4A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/304cd7fa-6e7a-325f-a619-305f397b1a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.2.10.0/23
                  23.2.19.0/24
                  23.59.162.0/24
                  23.193.22.0/23
                  96.16.208.0/22
                  184.29.148.0-184.29.159.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:45:a8:75:41:70:f0:20:e8:3c:01:d7:15:ec:84:d5:f4:d0:
         0a:72:b9:7d:17:ef:6e:3d:1e:56:c8:0d:b7:a6:81:31:36:e8:
         ad:54:49:b2:d4:61:9a:8c:59:5a:c4:be:93:f0:b7:90:33:9d:
         21:7b:ea:6d:77:71:0b:02:50:55:4a:46:a5:96:7a:e7:bc:0c:
         b2:c4:c9:e8:0f:ea:8f:ee:04:c8:0c:88:2f:c6:9b:49:0e:d5:
         0a:08:88:5b:83:d8:61:eb:18:b5:ba:7e:74:2c:b3:2c:b7:81:
         a0:b2:15:10:dd:8f:51:bc:6c:41:8f:8d:0e:c3:71:1e:a3:dc:
         8f:95:5a:3a:15:53:f7:b4:00:25:13:ec:f3:ed:6b:b3:7a:d8:
         e7:09:fd:b7:52:bd:71:d8:3f:bc:14:ce:92:4b:ea:f9:15:62:
         ab:b1:f7:4b:d9:10:2d:a2:53:fc:41:7b:c2:f2:03:73:5c:82:
         88:ce:69:2a:dd:ef:4d:e7:f0:4e:72:d1:b1:0c:a5:52:39:61:
         de:12:c8:86:05:61:47:f5:7b:86:26:4a:a2:2e:3e:bc:b2:3c:
         60:cd:9c:05:cb:b1:10:40:47:16:f2:d5:43:48:5d:4f:d4:2f:
         6f:d9:37:47:d4:99:30:ef:e5:b7:e9:06:51:55:66:4c:ec:d7:
         95:35:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:27:50 2026 by rpki-client