Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa
File:                     50fd98fa-196b-389a-897e-310945d94333.roa (raw, json)
Hash identifier:          RszGfhqmaSCzuOoxftSB/OP488UEmVj8a4Il+pzlix4=
Subject key identifier:   99:F9:61:DB:48:62:4E:71:74:BE:43:D1:55:78:C0:38:A7:32:8B:D0
Certificate issuer:       /CN=dc81e524-050d-4a15-9043-39314922cc81
Certificate serial:       010D0C9F4328584D0912604902CA320EDBB66300
Authority key identifier: 12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     400146
IP address blocks:        23.136.136.0/24 maxlen: 24
                          2606:d240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:60:49:02:ca:32:0e:db:b6:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc81e524-050d-4a15-9043-39314922cc81
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=23c9b329-46b5-45d9-a258-d6d436b297cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:5c:c5:2f:c2:75:b8:2e:1a:e9:75:ba:57:
                    97:c5:40:01:53:c5:a5:39:b7:1d:07:61:4b:c8:15:
                    38:ac:5c:bb:80:f6:be:5c:db:25:bb:6c:6e:3f:ac:
                    38:4b:6b:bd:e0:a1:70:80:09:64:04:ac:fb:b3:72:
                    bb:c4:49:ab:6f:65:01:57:80:2c:e0:13:2a:d3:24:
                    17:97:32:94:0e:42:2d:0f:1f:de:54:aa:59:81:4a:
                    cb:dc:48:a1:a3:f6:6c:72:b7:c9:65:7b:99:45:a4:
                    33:8f:53:72:df:0f:cf:ec:cb:14:97:4e:7a:05:2e:
                    98:5d:48:51:33:32:d7:61:30:c9:0d:a5:f4:15:15:
                    e2:ad:56:e7:70:f7:b2:ec:10:f5:f9:70:b6:26:18:
                    fe:e2:80:08:00:03:0f:5e:65:38:df:12:d4:88:7b:
                    32:01:51:00:0a:fa:7a:52:1a:53:e8:80:d7:9b:43:
                    32:f4:87:95:67:fc:5c:76:5a:3f:26:fe:0e:a7:95:
                    df:1b:3d:18:30:63:41:39:c9:e6:de:3b:b9:e7:6b:
                    9c:8e:54:53:b9:03:07:01:7a:4b:b2:57:a5:23:7e:
                    36:63:29:a9:ac:9f:04:b2:87:41:46:50:15:44:14:
                    95:95:eb:ed:e8:ad:de:35:d3:8e:7e:d8:18:65:a5:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:61:DB:48:62:4E:71:74:BE:43:D1:55:78:C0:38:A7:32:8B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl

            X509v3 Authority Key Identifier:
                keyid:12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.136.0/24
                IPv6:
                  2606:d240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:76:8f:b3:72:b9:42:09:ed:42:ba:c6:47:dc:ec:4c:40:cf:
         77:3b:f1:d0:02:e8:66:48:e0:c0:b1:08:54:42:94:b1:cf:51:
         ff:8f:b4:bf:eb:2b:6a:df:10:a1:4c:d5:2e:55:85:dd:b1:1f:
         d0:68:b6:01:87:4a:a4:a2:d6:85:94:84:2f:63:4c:4c:73:4c:
         b4:b3:7e:01:ba:fe:24:88:f5:c8:42:0e:8f:49:c5:d1:39:88:
         48:c2:51:85:4c:6a:3e:da:d8:6c:37:f2:9d:67:49:ce:e2:00:
         a6:45:56:85:65:61:17:33:5a:27:b2:99:17:c5:41:a8:df:54:
         0a:cf:6e:51:8d:af:f8:87:46:2d:96:16:93:59:eb:a4:7c:c6:
         d7:ca:67:51:f7:c7:df:69:65:f4:1c:ef:1b:17:84:f2:62:b6:
         d5:3d:fa:58:35:0a:91:81:86:d4:2f:cd:ba:ad:a9:1f:2f:25:
         1b:85:0f:e6:de:20:70:12:0d:cb:ad:82:05:bd:3e:ee:fa:77:
         24:dc:27:f8:48:aa:47:03:09:23:ef:fd:f3:5b:4e:35:a2:9e:
         e7:9c:8c:fc:2e:85:79:da:88:87:30:e0:e5:10:45:d2:2b:f3:
         1a:6e:e7:06:3a:6b:bc:e8:2e:d4:01:9b:9c:83:73:19:89:91:
         45:01:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:36:21 2026 by rpki-client