Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/bbddd66a-9a06-3b50-bf71-538cc5700708.roa
File:                     bbddd66a-9a06-3b50-bf71-538cc5700708.roa (raw, json)
Hash identifier:          KM5KgyszYCXxHV5u1CW8wa2zSzyH2tZoKf53GEKuhfA=
Subject key identifier:   08:C7:4A:22:63:74:E5:AE:2A:C9:FB:8D:F9:D6:BB:A1:B4:0C:BC:C2
Certificate issuer:       /CN=a327249c-db27-40a5-b04c-da03ae2d60a8
Certificate serial:       010D0C9F4328584EDB2C88CC0A810A50D12CD100
Authority key identifier: EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/bbddd66a-9a06-3b50-bf71-538cc5700708.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     402647
IP address blocks:        23.160.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:88:cc:0a:81:0a:50:d1:2c:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a327249c-db27-40a5-b04c-da03ae2d60a8
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=8c931e19-9969-4ec9-9a5e-5e7d8e5797d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:55:f1:09:84:cd:44:76:af:9e:1b:b6:e3:
                    a1:04:a7:60:b3:dd:94:66:17:65:84:0e:e8:93:0b:
                    df:61:c0:d5:cc:3a:e3:bf:62:a2:65:2b:d3:d7:4b:
                    f9:1f:55:4e:d2:08:5c:ab:35:87:51:f3:1c:89:b9:
                    7d:20:fc:72:1c:7b:e9:4c:ae:25:b3:41:6c:3c:e2:
                    68:73:b7:b5:ea:ab:09:ee:86:3b:4e:69:71:8b:72:
                    36:3f:24:48:dd:0a:ad:38:2f:b5:86:56:75:82:43:
                    bd:40:66:60:39:a0:4e:ff:fd:4f:21:48:76:bb:e2:
                    6d:f8:55:f1:3d:f0:76:3b:e1:09:d9:3f:b3:ac:de:
                    6d:c2:97:9e:34:64:b8:4f:33:ef:ab:5d:2a:8a:e1:
                    77:c9:8f:3d:90:46:ee:b4:ee:f1:3a:50:79:ac:26:
                    76:de:b5:68:fe:d9:bf:98:9a:5e:48:9e:41:65:dd:
                    66:da:57:43:c6:08:f7:73:5b:89:0e:33:bb:f2:a4:
                    77:08:bc:ae:e3:62:36:be:9b:38:94:2a:73:da:57:
                    e6:e4:af:27:2a:97:ab:38:e9:18:c6:c0:69:8a:00:
                    56:5b:13:bb:aa:6a:6f:44:bd:3d:65:ed:fd:ee:ee:
                    c9:47:44:a6:f6:1d:bf:bf:a9:2f:35:8a:a6:b2:b6:
                    36:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C7:4A:22:63:74:E5:AE:2A:C9:FB:8D:F9:D6:BB:A1:B4:0C:BC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/bbddd66a-9a06-3b50-bf71-538cc5700708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl

            X509v3 Authority Key Identifier:
                keyid:EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:79:51:15:94:04:c1:a6:47:23:c1:a9:76:cb:d2:f2:27:
         16:e1:61:0d:24:b1:8a:ff:fb:9e:db:97:d1:6e:62:63:ac:e8:
         85:2b:8c:65:ce:6e:ab:bc:0f:ed:37:9a:72:50:55:3c:1b:4b:
         7d:6b:97:44:97:7f:7b:78:95:57:6f:fd:0a:b7:f8:a9:50:49:
         f1:eb:bc:4a:ac:59:da:8d:22:c7:6c:27:c1:62:50:eb:d2:fc:
         51:0a:d4:f6:31:6f:dc:7a:d6:54:fe:94:d2:40:4b:b3:32:ab:
         6f:0d:ea:01:82:17:29:72:12:15:d2:eb:6b:6a:62:78:2c:3c:
         67:d2:1b:6f:8d:40:32:9e:2a:61:ff:ef:c3:0f:9c:65:92:92:
         68:72:a9:9e:74:57:1e:d1:10:22:5b:68:ad:94:20:5b:e9:c2:
         af:75:5f:66:60:8c:89:8c:5e:16:30:5b:ef:35:09:b7:20:88:
         9b:b0:aa:46:59:c5:61:75:70:f8:3b:83:02:10:47:a0:e7:ee:
         5b:ad:43:1e:87:cb:9e:96:a9:e5:c0:5b:c7:22:b4:68:0c:24:
         da:0d:eb:e2:53:e8:1a:74:f9:a6:cd:c9:8f:ef:12:96:ee:6d:
         dc:f6:d4:31:d1:bd:df:37:ef:ed:aa:df:df:e6:16:0e:ce:7d:
         7f:46:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:49:17 2026 by rpki-client