Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/cc55c054-50ad-3e50-b5ba-0486c08b08eb.roa
File:                     cc55c054-50ad-3e50-b5ba-0486c08b08eb.roa (raw, json)
Hash identifier:          XQUlTpsiYXxUnw1u8wIuza4u0WqUpwx7OuVbasG2UjE=
Subject key identifier:   9F:59:30:B0:8D:B3:A1:6F:08:4E:AA:D5:7D:80:AD:12:85:D8:AC:A4
Certificate issuer:       /CN=b23daa11-4037-452a-934b-684edbefcbf9
Certificate serial:       010D0C9F4328584CFF7917228FD0691F37E4F8A0
Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/cc55c054-50ad-3e50-b5ba-0486c08b08eb.roa
Signing time:             Fri 27 Feb 2026 03:29:45 +0000
ROA not before:           Fri 27 Feb 2026 03:29:45 +0000
ROA not after:            Thu 28 May 2026 02:29:45 +0000
asID:                     32821
IP address blocks:        208.94.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ff:79:17:22:8f:d0:69:1f:37:e4:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9
        Validity
            Not Before: Feb 27 03:29:45 2026 GMT
            Not After : May 28 02:29:45 2026 GMT
        Subject: CN=cb983b73-e2f4-4856-b89d-7f849b9f02af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:2f:6f:ad:9e:63:09:2f:8a:9f:b4:95:7b:
                    bb:c5:8d:c6:67:ce:2b:20:34:2a:05:c3:31:f8:d3:
                    ec:87:a8:6e:98:b7:ce:e8:8f:cf:33:4a:0e:46:09:
                    f8:3c:53:ee:dd:8f:53:70:1b:b9:63:b0:dc:9f:b1:
                    36:19:74:1c:9e:21:9a:58:1f:23:09:3a:d0:d2:dd:
                    f7:15:0e:5f:f6:6b:13:34:45:f9:30:7f:7a:02:c8:
                    e0:95:46:b0:88:6d:76:5e:ca:c5:83:03:c8:db:b9:
                    38:88:a2:89:81:d1:07:b7:cc:05:c3:b9:b1:eb:80:
                    55:73:ec:f9:f2:e6:4e:58:fc:19:f5:47:d4:92:cd:
                    44:44:a9:1c:86:f3:ec:31:34:83:57:fe:db:1b:a7:
                    45:a1:14:a9:72:c1:3b:13:01:b9:bf:8c:81:3f:83:
                    0d:50:08:4d:9d:07:2b:8c:2a:29:34:42:4b:6c:4d:
                    c7:8d:24:d9:2b:1b:96:74:c6:64:ba:50:57:fb:3e:
                    3f:ae:64:ba:bf:a7:b7:56:9a:d5:47:6f:15:08:dc:
                    37:72:f3:4b:e6:ad:91:9c:20:3e:fd:f0:cb:2c:86:
                    f2:d5:54:b5:d1:d8:b0:93:4d:23:84:aa:8b:6b:19:
                    f1:e4:e4:32:29:aa:33:b7:f0:5d:10:23:33:a0:f9:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:59:30:B0:8D:B3:A1:6F:08:4E:AA:D5:7D:80:AD:12:85:D8:AC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/cc55c054-50ad-3e50-b5ba-0486c08b08eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0d:0c:2d:45:ec:84:5d:df:9c:c4:0c:7d:33:fd:ad:52:05:
         7e:56:b7:5c:74:53:c6:d6:2f:ab:49:9e:c6:b3:49:a0:14:2d:
         b3:6c:e1:2a:cb:1e:95:46:66:1b:15:96:ee:16:af:af:c5:2e:
         bc:50:34:e1:dc:20:e4:b6:5b:4e:1d:7d:98:46:9b:7c:b9:39:
         7d:a6:eb:83:ee:2d:99:ca:08:4d:3e:78:11:7a:74:e1:6c:70:
         7c:9f:97:42:80:19:70:22:e1:1b:d1:70:d1:0a:2b:c1:33:ad:
         d6:c7:6d:03:b1:be:a4:d8:ba:47:65:75:40:e5:7e:a7:06:ce:
         ee:24:88:e0:d2:b5:2a:dd:5a:4d:e1:e6:bd:18:72:32:f5:f5:
         9d:83:e3:e5:6e:cf:84:c7:1f:6d:10:ab:af:f9:d0:9b:55:f5:
         16:ed:de:01:7b:7f:bf:d6:01:a3:39:8e:f8:58:29:95:eb:f1:
         82:b2:f1:0e:96:3b:32:d7:61:e2:31:8a:ed:11:8c:52:e5:0f:
         71:70:f2:cb:6a:5b:a7:c9:0c:0c:b1:1c:30:12:a9:cb:4c:e6:
         2b:2e:e2:3d:14:06:53:3e:17:56:00:84:08:e3:fb:b9:36:13:
         b1:ec:02:12:f7:b3:e1:6e:b6:49:55:79:28:60:26:4d:4a:c6:
         ad:d3:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:54:55 2026 by rpki-client