Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bf09fdcc-9647-3f31-9d7c-1af6f783d1cc.roa
File:                     bf09fdcc-9647-3f31-9d7c-1af6f783d1cc.roa (raw, json)
Hash identifier:          34X/3jcqZgHqgXjK5Yn9cmODts58gT6a+o8Sf56OAnM=
Subject key identifier:   FB:35:89:9D:2F:BA:30:34:F5:D6:5A:E5:F0:AD:66:DE:1D:DE:1A:A0
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584DA6B00DF6B60BF6D7BE4D4920
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bf09fdcc-9647-3f31-9d7c-1af6f783d1cc.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     394161
IP address blocks:        8.47.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0d:f6:b6:0b:f6:d7:be:4d:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=3acd4550-362e-4ce0-be8f-8f776f4508c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:56:3e:61:95:88:26:78:97:0b:f0:22:56:
                    45:88:61:46:72:87:74:b6:f6:3d:41:ab:2b:fe:2f:
                    44:b3:1a:f8:ea:3d:33:9b:b6:59:78:b6:bf:aa:2c:
                    88:bc:1f:5e:8a:a2:6d:6a:45:4f:55:3d:ec:2e:db:
                    47:65:c1:8f:e4:76:1a:ca:8c:08:a4:53:e2:34:ff:
                    65:a0:8d:6f:cc:b9:9b:cb:64:40:bf:6a:b0:67:60:
                    3c:aa:64:86:28:4c:11:51:dc:e7:8e:ff:31:a2:2f:
                    18:ef:d0:86:8f:a3:28:c9:ed:c3:97:e1:4c:d2:3a:
                    7b:85:f2:fa:be:89:bb:06:b0:0f:c8:0c:33:86:55:
                    aa:a4:5a:06:f9:93:5f:78:1b:16:b7:c5:7a:9f:4b:
                    e3:6c:f0:78:78:6f:41:9f:94:c7:45:05:14:b9:2b:
                    02:32:e8:1b:aa:a3:a6:67:00:7e:83:61:0a:bb:09:
                    78:95:c7:87:43:1e:88:a6:9f:11:ba:e9:d2:75:27:
                    8f:88:fa:67:e7:71:fa:32:60:49:75:19:7f:8d:29:
                    58:f1:ca:69:a2:29:1f:8b:aa:ba:dd:13:16:40:a3:
                    17:4c:0d:9e:13:3e:23:43:77:0a:66:a5:ec:9d:1d:
                    08:8e:60:40:08:29:2f:11:61:33:5d:81:0e:f9:b7:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:89:9D:2F:BA:30:34:F5:D6:5A:E5:F0:AD:66:DE:1D:DE:1A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bf09fdcc-9647-3f31-9d7c-1af6f783d1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.47.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:d6:09:3b:dc:cb:f2:99:27:7e:ae:61:48:e5:62:14:1c:02:
         79:4c:76:70:87:f4:de:a0:dc:f7:3b:77:6b:b5:eb:53:88:6d:
         43:56:52:30:97:ad:56:d2:8a:1d:9e:60:98:51:35:2f:af:14:
         ef:d7:74:a8:39:7d:71:19:a1:a6:bf:ee:18:17:b9:53:26:64:
         de:54:85:59:7a:b5:5a:0f:1c:c5:ab:0d:af:58:37:da:d3:f9:
         6c:82:a7:32:d8:c8:38:4b:7d:c0:3b:1b:9b:45:17:d2:39:0f:
         43:29:73:7b:35:fe:20:8e:69:88:0b:06:b2:9f:e3:1d:bd:b9:
         3e:a0:0b:52:fa:fe:d8:1a:ee:53:22:67:ed:0a:25:58:e2:85:
         5e:f2:fc:ba:4c:e9:21:15:6e:8c:25:52:13:80:6b:34:42:ab:
         1a:26:bf:5b:6a:8a:fa:3b:d0:ac:fd:46:a1:7d:24:69:20:be:
         72:67:de:9c:20:db:db:cf:18:2f:fa:14:8a:58:6e:cb:95:59:
         0c:22:00:d8:ba:3c:ee:03:b0:ba:8d:a8:37:22:2f:25:05:f6:
         6a:8d:c6:3a:65:c2:93:62:f7:ec:33:bf:ba:36:55:c8:72:9e:
         ce:86:33:fd:14:54:0a:83:c7:0c:27:de:fb:a5:68:d1:3c:7c:
         b8:d7:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 17:46:24 2026 by rpki-client