Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/f5ad1316-5f42-355a-ab6d-bde34e4515a0.roa
File:                     f5ad1316-5f42-355a-ab6d-bde34e4515a0.roa (raw, json)
Hash identifier:          r+neYXxYNQaf7c0rI5HaY01BfveS3pjPS7mofKksBKs=
Subject key identifier:   FD:B6:7D:98:4E:DA:59:9B:6B:8F:F5:E0:81:63:B4:44:B4:57:5A:D2
Certificate issuer:       /CN=55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3
Certificate serial:       010D0C9F4328584D6AAA6321B4511BEC690C55A0
Authority key identifier: 88:9F:BC:7A:6D:8E:4B:B1:51:08:02:A9:F8:0A:C4:84:C7:B6:9D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/f5ad1316-5f42-355a-ab6d-bde34e4515a0.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     401903
IP address blocks:        23.143.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:63:21:b4:51:1b:ec:69:0c:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=0f3cc806-9897-4a78-9893-9af53e228d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:c5:f6:5a:8e:28:e9:52:70:46:d5:e0:2e:
                    8f:59:c0:d7:94:e2:09:ac:57:48:60:74:77:59:c8:
                    08:04:ee:6a:ae:bb:a7:03:13:39:77:6d:0e:fe:99:
                    da:70:17:f9:85:da:aa:cc:50:bd:6c:d2:10:d8:0a:
                    32:98:f9:ac:95:45:15:ad:9d:5e:dd:cb:12:bb:63:
                    c2:60:da:f6:52:66:7f:f4:53:2b:57:1a:71:6d:eb:
                    9b:11:eb:1e:15:d4:be:1f:47:e0:00:fb:b8:33:52:
                    bb:67:71:e2:c0:33:92:e9:e9:b8:7b:79:bf:6d:36:
                    55:4b:36:2a:71:80:a2:56:2a:95:c6:cd:51:8a:af:
                    45:77:c0:d2:df:58:39:0b:b1:06:48:cf:e7:a4:c3:
                    e6:f1:5f:d1:ae:84:f3:9f:32:be:ee:7f:b3:62:4c:
                    59:dc:1a:9c:b3:38:22:11:03:d3:45:53:1e:06:c9:
                    bd:5b:4a:c3:e7:3e:ca:a2:59:ab:19:ab:72:dc:80:
                    bb:ec:9d:21:af:dd:f3:b4:c4:76:e9:07:a8:1f:46:
                    1f:12:d8:50:4e:ef:d5:52:cb:a1:89:3e:e6:ba:4c:
                    55:2d:ed:cd:00:22:5a:e2:cf:e3:2b:f3:1a:a0:fd:
                    de:2b:e8:7e:89:ac:c3:6c:1b:37:06:4b:f6:3f:5d:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B6:7D:98:4E:DA:59:9B:6B:8F:F5:E0:81:63:B4:44:B4:57:5A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/f5ad1316-5f42-355a-ab6d-bde34e4515a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.crl

            X509v3 Authority Key Identifier:
                keyid:88:9F:BC:7A:6D:8E:4B:B1:51:08:02:A9:F8:0A:C4:84:C7:B6:9D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:22:78:f7:4b:36:ea:b5:7c:c3:64:c6:10:41:a5:29:78:
         1e:80:b4:78:10:24:f0:51:14:1d:f8:06:68:11:e5:8c:7e:4c:
         8f:d5:f4:a5:4b:2f:52:0e:49:38:89:17:04:99:d6:59:47:18:
         d5:3e:78:92:ec:95:1d:f7:08:74:c0:eb:cc:c9:cf:9d:09:cd:
         a2:6b:4b:51:6a:51:a7:6b:70:58:77:69:bb:d7:1c:06:37:7d:
         15:ae:61:f6:96:4d:7d:ae:06:38:92:fd:ae:20:86:47:54:12:
         b3:72:04:fe:ca:73:ce:82:31:9f:99:8e:fd:ac:fe:c6:4d:3c:
         0f:57:8e:da:c9:73:10:be:2d:d9:bd:28:62:9f:d7:53:d5:a6:
         33:72:3d:fb:3f:c4:8f:4a:b8:36:36:e6:8a:42:ea:21:89:0b:
         88:b3:12:6c:12:e6:9c:11:6a:61:9a:4a:4f:90:03:38:3e:5c:
         f5:28:04:4e:18:0e:80:9a:05:18:9b:10:5d:d7:7c:db:66:b2:
         e7:ef:4b:5d:59:0e:1d:fb:1f:55:20:ce:48:b0:2b:e7:27:fb:
         87:3f:82:fc:ee:46:7a:56:b5:85:6f:ce:9b:70:e5:8f:a0:e3:
         69:60:94:5a:20:6f:2e:fa:dd:5b:b6:de:f2:67:20:ec:51:4f:
         aa:ca:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:14:58 2026 by rpki-client