Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa
File:                     89c1d277-7641-3c70-9cea-851fdd81b4f6.roa (raw, json)
Hash identifier:          FGRgufMzjcNGVqEWwWpHjam8e9eG54vVjWLc68/rpTo=
Subject key identifier:   45:E0:42:DD:44:F9:75:5C:01:CD:D9:C2:99:89:23:EF:6E:06:2D:D0
Certificate issuer:       /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial:       010D0C9F4328584DAC456C02B59764B63D95BC50
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     12243
IP address blocks:        23.172.0.0/24 maxlen: 24
                          23.176.16.0/24 maxlen: 24
                          158.51.76.0/23 maxlen: 23
                          158.51.76.0/24 maxlen: 24
                          158.51.77.0/24 maxlen: 24
                          198.98.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:6c:02:b5:97:64:b6:3d:95:bc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=91564508-bd5d-418f-9daf-dbf299d38082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:48:9f:49:6e:d7:ca:50:38:20:bf:2c:22:34:
                    fb:30:e1:f0:ef:18:50:69:48:3a:c2:2c:be:53:cd:
                    31:1f:11:72:21:02:b2:a9:6e:de:33:fd:97:87:50:
                    3f:f7:bc:53:7b:3c:a2:e3:8a:9e:8e:42:a1:87:d5:
                    3d:d6:af:a9:21:c3:fa:4f:f2:41:39:6e:a0:1c:6a:
                    fc:82:08:cc:d2:e0:96:36:85:e2:59:3c:44:19:37:
                    d1:80:80:e9:e0:eb:bb:c5:5e:60:f5:a6:5f:49:e2:
                    ca:3d:96:23:c3:a8:d4:d9:0d:9e:82:0d:85:7a:73:
                    f6:bc:04:46:eb:ed:e9:d7:21:19:ad:15:e1:cd:5d:
                    68:6e:b9:b5:1d:4f:d2:21:2c:68:ef:44:e4:3b:05:
                    f0:d6:92:ff:dd:ad:06:9f:ca:bb:5c:31:60:08:ba:
                    8b:6b:5f:fd:e1:be:9f:42:af:50:08:5c:42:72:71:
                    95:40:68:4a:3d:03:cb:68:6a:a5:1c:aa:04:4e:f5:
                    44:c9:98:4e:40:e0:8f:a4:2d:9b:af:68:6f:d2:80:
                    bd:c5:0b:22:db:8a:68:97:fd:df:31:9f:1e:97:f4:
                    6a:8a:54:0a:56:01:8a:72:b4:0b:05:b3:85:3f:79:
                    51:bc:d5:30:7b:95:97:a2:db:92:c0:60:90:8d:d3:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E0:42:DD:44:F9:75:5C:01:CD:D9:C2:99:89:23:EF:6E:06:2D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.0.0/24
                  23.176.16.0/24
                  158.51.76.0/23
                  198.98.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:f8:53:a9:2e:9c:d6:0c:61:66:ea:a8:e7:5c:f6:6b:f9:
         22:b6:ed:30:1f:2b:25:0d:d5:2d:3b:07:74:66:7e:4d:4f:3f:
         0c:49:e0:94:8c:9f:3d:6d:07:fa:2c:df:53:8e:da:c6:55:5c:
         14:d4:36:df:06:fe:fa:6b:97:ea:bb:1c:8e:a3:90:d0:28:c4:
         15:6f:58:f7:1a:3f:73:c3:3f:68:31:3c:27:ad:d4:6f:86:48:
         d6:9b:8d:c5:53:91:ef:85:03:e2:99:06:6d:d5:3f:d3:da:dd:
         6e:be:97:94:16:46:24:6f:e7:7f:de:41:e5:c6:c7:0a:ed:cf:
         c7:1d:4a:af:2d:1e:9b:16:fc:64:32:ab:a2:bd:ed:bf:4a:08:
         c2:57:2b:e5:b8:c9:9e:42:77:db:f6:78:a0:45:3f:cd:7c:33:
         dc:b2:0a:48:76:5e:87:fe:a0:bc:a6:de:34:ad:c5:7a:57:19:
         6b:be:87:c4:38:e1:0a:d1:2e:c0:19:9a:8a:97:1a:96:4d:cf:
         d2:c9:c0:1e:46:1e:89:1b:fc:55:bf:79:34:9d:78:da:63:89:
         52:2b:40:74:80:fe:5a:9a:ab:93:87:4e:01:7d:2d:cf:f1:b2:
         0e:46:a0:24:de:f1:2c:1d:54:fd:70:f2:19:d4:51:95:74:df:
         9c:bb:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 22:19:07 2026 by rpki-client