Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
File:                     23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa (raw, json)
Hash identifier:          5IPAsKr3OErSqz1mAHWHU3YZkO+Xz2tC+hLx3U7exZI=
Subject key identifier:   20:18:E6:87:BD:B3:C0:4F:54:C0:EA:2E:2A:3E:EA:48:71:74:4E:5E
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584D80FFE467541D6FDCFB1E8D80
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        85.113.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:e4:67:54:1d:6f:dc:fb:1e:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=7d37974c-6571-48de-ad5b-835790c896a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:43:ce:69:2d:18:f4:2e:c7:2a:e3:e9:a5:
                    f1:be:93:f3:76:21:b6:79:73:7e:6e:91:94:d8:ba:
                    d5:dc:dd:f0:cb:6c:97:27:c1:54:71:1b:31:48:9f:
                    79:03:c9:ba:dd:5c:98:e2:8b:55:10:22:5c:5b:b5:
                    85:6f:26:a7:3d:29:f2:8b:5d:e8:48:6d:c0:58:62:
                    ef:b3:bd:89:af:6a:c6:51:ec:99:3e:0a:94:f4:4a:
                    5d:8e:1b:57:68:ae:12:ac:4c:77:f6:cc:d7:07:15:
                    27:83:87:ee:96:07:d7:49:97:01:dc:1c:57:f4:8d:
                    5b:d1:03:3e:ef:eb:d3:8b:b3:73:c6:ec:a5:e2:0c:
                    cb:72:04:b7:00:b2:b1:92:1e:81:80:4b:e0:05:f8:
                    2e:ab:90:e6:b3:81:c0:14:2d:ca:74:3c:c0:a4:d0:
                    59:29:00:62:28:db:00:a7:62:9d:0a:3c:4d:6d:73:
                    57:34:80:65:1c:75:68:5c:7a:31:1b:d3:0d:dc:76:
                    7d:c3:ed:88:b7:56:05:14:9e:e8:22:3c:eb:b2:03:
                    e9:42:11:89:a2:1f:f6:88:c4:bb:93:51:e7:96:c5:
                    3a:31:69:33:40:c5:4a:23:50:a0:7e:98:99:c7:3c:
                    13:fa:4c:23:68:29:8f:a7:23:86:82:dd:e4:f3:5c:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:18:E6:87:BD:B3:C0:4F:54:C0:EA:2E:2A:3E:EA:48:71:74:4E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/23c8d3a8-e8e6-37fe-8e3a-2e81bd9ee8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:f5:d2:dc:5b:65:21:c4:0b:80:f5:f3:b9:5f:7f:bf:1f:d4:
         7e:eb:fc:6a:26:a1:09:81:40:6c:e8:12:e5:72:be:9b:0c:8c:
         49:eb:b2:68:a5:3d:e7:1a:a9:79:fc:8e:45:54:2a:bc:e6:a5:
         41:ee:74:61:f3:ce:82:b1:0c:c0:67:31:c1:9f:b0:b3:d7:4c:
         6c:76:98:87:8e:50:e3:1e:4c:53:19:f2:2a:d6:43:11:82:a3:
         68:22:35:84:0b:88:c6:4c:03:7c:2c:4e:f3:0f:10:80:c5:e2:
         93:9c:65:68:bb:cf:af:4c:45:8f:c5:48:81:cc:49:5c:7c:16:
         42:93:ee:65:19:dd:43:f5:8e:4e:66:da:7b:cc:8a:02:c4:9d:
         72:ac:6e:75:32:a0:46:a5:df:14:f8:c7:39:d5:c3:07:91:3a:
         21:6c:e8:e0:45:f5:7a:d8:e8:33:a4:70:b8:7c:8a:a2:85:26:
         d0:f9:c9:c5:ab:83:4f:7a:1d:17:d7:fb:5b:ff:b5:6b:05:d0:
         0b:0f:de:dd:fc:ac:c2:a3:84:6b:c6:e8:52:fe:93:53:1a:49:
         1d:97:46:b3:a3:e4:46:5e:7f:bd:c9:98:60:b4:32:a5:33:f1:
         c3:d9:36:a4:65:87:37:1b:cb:d2:d1:81:96:81:10:2d:2e:4e:
         4f:7d:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:03 2026 by rpki-client