Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa
File:                     4069fe48-9a8a-313a-a323-cc2a49626f35.roa (raw, json)
Hash identifier:          PMh9FlNwJDHTg0dBAZTLO/Q9ZPm2eUhtdZL4AxmdsEs=
Subject key identifier:   F0:96:1C:18:74:CB:F0:A6:49:AE:D3:6D:09:C0:E6:7B:AA:CF:DF:1F
Certificate issuer:       /CN=5eb94df3-be39-4e1b-b39a-730deb2999f1
Certificate serial:       010D0C9F4328584D571FB2633F434B170884E180
Authority key identifier: AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     32768
IP address blocks:        23.29.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b2:63:3f:43:4b:17:08:84:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb94df3-be39-4e1b-b39a-730deb2999f1
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=ba08767a-a17d-4f3e-8b7c-903835e60e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:e6:ad:9c:60:90:fd:af:1d:59:b4:e1:0d:
                    6d:e2:b6:fb:7c:4a:e4:9c:95:08:31:61:a0:c8:20:
                    38:ce:b0:59:05:43:1a:e0:53:dc:8b:c1:92:49:86:
                    5e:8f:77:e6:e2:dd:fe:b4:25:49:e4:2a:54:4d:c8:
                    68:fe:c3:e9:bc:81:b6:23:08:56:86:fe:99:b8:2e:
                    31:1d:67:2a:d8:26:83:12:18:ab:3d:3d:f0:02:47:
                    b8:b3:38:3e:98:df:ad:b9:e6:98:ae:58:30:30:8e:
                    e9:1f:be:91:71:3b:8c:56:61:7a:ed:f9:03:3a:ed:
                    5a:ec:b1:0f:aa:f0:ba:87:b7:b7:fb:76:7b:c9:4f:
                    fd:15:42:1e:2a:6c:a3:4c:12:aa:c9:5f:3b:7b:ef:
                    9f:2b:29:23:39:02:5d:a4:23:92:c1:b4:1e:87:c5:
                    65:c9:c8:a5:96:de:ec:6d:84:5f:ee:59:36:ae:a8:
                    7c:4a:e5:aa:ff:19:12:1c:22:93:4e:cd:e3:30:64:
                    9d:ab:0f:9a:2a:cc:28:7e:c5:69:6f:60:3b:0f:84:
                    b6:f9:c5:68:04:89:ad:82:b5:0a:b1:07:4d:c6:ba:
                    3d:cd:33:9b:d3:68:ad:e6:50:80:fb:b0:a2:d7:1a:
                    e0:2e:8a:cd:79:29:e0:a4:b9:d8:f0:ac:d8:a6:22:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:96:1C:18:74:CB:F0:A6:49:AE:D3:6D:09:C0:E6:7B:AA:CF:DF:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.crl

            X509v3 Authority Key Identifier:
                keyid:AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:12:6a:56:90:bc:5c:75:f8:fe:a7:1f:ea:a9:56:cb:ee:
         82:c7:95:9f:83:0f:21:6b:8d:14:97:61:f3:c0:f2:28:a7:1d:
         af:b8:be:c4:c1:c1:0c:46:34:10:b7:23:9e:70:72:c5:1e:c6:
         72:8e:95:80:27:af:85:4e:4d:28:7b:27:09:77:f8:7b:d3:f3:
         65:6c:e5:62:cd:b8:ac:c5:d0:04:56:0c:02:d1:0c:1d:3a:82:
         4b:a4:1d:15:31:2a:90:cd:94:e9:b0:bf:10:37:2e:fc:2c:51:
         31:33:ba:35:01:e8:a4:ec:38:07:75:a1:ec:be:08:53:1c:f9:
         db:78:b1:f4:e6:8c:70:e2:e3:88:76:9a:30:27:6e:e2:aa:09:
         1a:68:ae:45:90:db:0e:3c:93:e1:66:73:84:d8:4a:05:b5:07:
         eb:f8:3d:c7:a2:7f:8d:a3:28:40:12:0e:33:36:cc:c0:37:68:
         5b:2d:b2:e1:13:13:0a:64:c7:ca:d3:f5:c4:70:1b:06:ac:42:
         40:51:a5:48:46:21:57:8b:3d:2a:e9:00:e2:77:60:03:cf:ad:
         1f:03:5f:f9:bf:f8:70:e4:9c:9c:36:61:48:7f:f4:a2:48:06:
         04:36:b2:c6:64:6f:64:a4:d0:de:a7:0a:fe:de:5d:76:e6:cb:
         5f:97:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:30:42 2026 by rpki-client