Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/f1ca8592-a4e7-3f60-8a8a-755a3ac946f4.roa
File:                     f1ca8592-a4e7-3f60-8a8a-755a3ac946f4.roa (raw, json)
Hash identifier:          qpqc0B1tmO7anfp/+H1Mb/GY5gcxEFNcVDBfdsqK8G4=
Subject key identifier:   CB:B9:6A:12:1C:5B:27:88:F7:27:42:45:49:1A:2E:F8:C5:1D:A0:12
Certificate issuer:       /CN=c48613e9-8730-4ebf-aaee-33654a980136
Certificate serial:       010D0C9F4328584D92CBB06B96844001333B0F80
Authority key identifier: C1:7C:BE:BA:6D:03:C4:37:C4:90:75:3A:B0:1A:0F:92:7A:B9:D6:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/f1ca8592-a4e7-3f60-8a8a-755a3ac946f4.roa
Signing time:             Mon 20 Apr 2026 22:00:00 +0000
ROA not before:           Mon 20 Apr 2026 22:00:00 +0000
ROA not after:            Sun 19 Jul 2026 22:00:00 +0000
asID:                     398638
IP address blocks:        23.162.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/c48613e9-8730-4ebf-aaee-33654a980136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/c48613e9-8730-4ebf-aaee-33654a980136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:cb:b0:6b:96:84:40:01:33:3b:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c48613e9-8730-4ebf-aaee-33654a980136
        Validity
            Not Before: Apr 20 22:00:00 2026 GMT
            Not After : Jul 19 22:00:00 2026 GMT
        Subject: CN=868f2251-0e98-42a7-ab72-58b9249a9257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:c6:15:47:44:b6:4a:c8:1d:cc:da:2b:1b:
                    a2:9a:cb:8f:d7:6b:a3:5b:ef:84:d7:0a:dd:0f:63:
                    55:21:d6:b1:ff:f4:1f:12:7a:6b:d9:25:89:fe:65:
                    18:b1:f1:09:79:77:24:16:cd:28:83:97:d4:18:d8:
                    e1:1e:5c:e0:45:90:5a:4e:44:aa:54:32:78:ba:9e:
                    aa:c8:4a:ef:ea:c1:01:9b:12:f3:71:ea:8e:49:4f:
                    1a:61:e8:35:8e:68:61:1c:fe:68:b8:b7:ee:b8:69:
                    f2:b9:b4:31:c7:92:90:a5:c2:53:14:55:21:17:1a:
                    7e:d8:c4:e1:c1:74:2f:cc:6d:9a:02:48:9c:f7:32:
                    b4:03:01:e4:3e:4c:6e:94:e9:b8:c3:63:8d:06:ce:
                    1e:e9:8d:0f:41:fb:c9:e6:74:a4:55:1a:97:b4:45:
                    2b:0f:6a:04:02:b1:bc:f6:36:69:3c:da:dc:c2:d2:
                    71:8f:a2:f4:6b:93:bc:4f:34:4c:0b:72:50:65:56:
                    e6:62:35:ec:8e:f1:a4:cd:de:bb:38:8b:a3:d9:16:
                    d8:99:69:fa:50:8c:45:ec:1d:54:0b:01:11:7d:f4:
                    37:ba:ad:62:bb:8c:bd:e6:53:bc:94:53:d3:4c:26:
                    aa:39:9c:b4:a9:14:5e:31:8e:8c:38:f1:85:65:6d:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B9:6A:12:1C:5B:27:88:F7:27:42:45:49:1A:2E:F8:C5:1D:A0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/f1ca8592-a4e7-3f60-8a8a-755a3ac946f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/c48613e9-8730-4ebf-aaee-33654a980136.crl

            X509v3 Authority Key Identifier:
                keyid:C1:7C:BE:BA:6D:03:C4:37:C4:90:75:3A:B0:1A:0F:92:7A:B9:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:d9:ac:39:d5:90:bc:cc:76:f6:16:62:a6:84:b1:7a:ec:
         ed:bf:fd:66:91:61:d4:49:e3:20:ac:58:b6:2f:d0:bc:f6:96:
         c8:ba:5c:74:c5:57:0a:b4:e0:2a:e4:22:05:a4:eb:50:88:d6:
         a8:02:1d:44:0f:43:61:ab:54:fb:3c:b2:fc:c3:13:82:54:25:
         5c:13:42:40:33:fb:ee:05:8a:98:cf:36:fa:58:9d:4a:41:d2:
         ee:59:98:3e:5b:18:60:05:fc:fb:4e:15:b9:ba:84:bf:c6:b4:
         f7:4e:6f:b3:95:56:ef:e2:14:5a:c6:ac:43:07:20:cb:1e:70:
         37:10:a7:3e:35:5b:7f:4a:af:4c:f6:48:6d:8d:40:67:61:61:
         22:cb:dc:f1:c5:91:88:e3:aa:49:00:0d:e0:4a:51:a3:14:54:
         ee:36:c2:57:d0:a1:ee:81:0b:16:e5:1e:83:cf:b3:4d:bf:0a:
         1d:2c:ca:bc:e2:5a:fb:b1:02:0a:b8:0d:01:99:52:16:98:10:
         02:e0:3e:64:28:84:b5:6b:e6:c2:91:d8:98:c2:03:14:e8:7d:
         8a:5a:b9:c6:0c:9a:3e:21:8d:73:f4:b2:62:33:77:81:f1:3c:
         a9:34:6f:be:41:f5:86:a8:c9:33:58:eb:54:38:8c:64:45:87:
         b9:2c:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:27:00 2026 by rpki-client