Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/62046459-1aa6-3377-b989-2c301aad9cee.roa
File:                     62046459-1aa6-3377-b989-2c301aad9cee.roa (raw, json)
Hash identifier:          Wdl9RtDSf3cu3UUeGkEoiGd7NErXNc8eBKOJ06o2Sb8=
Subject key identifier:   00:7F:8D:F7:F2:AE:EF:53:08:2C:57:5C:0B:E5:74:B9:72:57:D9:83
Certificate issuer:       /CN=6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3
Certificate serial:       010D0C9F4328584E0D841F00B36B7D482B5F1F60
Authority key identifier: 99:28:6F:E7:9E:10:62:8D:A9:30:93:A6:B7:6D:1E:DA:EB:0F:88:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/62046459-1aa6-3377-b989-2c301aad9cee.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     63023
IP address blocks:        23.138.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:1f:00:b3:6b:7d:48:2b:5f:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=66fcfafa-7c51-41d7-a6f6-408d4bc08726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:62:9f:de:fc:72:b9:4d:55:02:41:2a:e6:2e:
                    52:6b:da:63:61:60:cc:29:d0:07:a0:c0:74:02:0a:
                    09:dc:82:46:2c:65:5e:1b:2f:0b:14:26:8e:18:8c:
                    da:a7:fa:5e:9a:3c:0e:5e:4b:e3:24:64:bc:59:55:
                    81:be:59:11:10:8a:80:36:f4:c6:72:db:b7:25:16:
                    89:89:e4:13:99:fe:ba:d9:fb:03:ff:5c:0d:82:26:
                    e7:0f:81:cc:d0:12:c2:c5:b6:cc:cc:7f:db:67:6b:
                    12:ff:86:f4:71:79:63:ea:56:b5:64:cf:17:14:e4:
                    85:bd:6e:0a:5d:24:37:cc:92:f2:7a:c0:35:5c:3d:
                    a5:bd:06:9e:5b:d7:20:e1:2d:6f:05:c5:fa:c7:15:
                    2e:7b:83:a1:9b:2c:2b:74:ff:cf:04:ba:81:a7:d3:
                    25:df:7a:14:02:15:ce:41:a7:17:37:05:1a:99:71:
                    94:ec:37:b5:88:8c:3f:52:d3:1b:ef:4c:56:5e:50:
                    da:4a:4b:3e:36:d9:94:58:36:41:a4:02:fd:3e:63:
                    a7:2d:b5:1a:14:8c:08:3c:5e:8e:fd:00:bb:65:82:
                    8f:f8:6f:c3:d7:75:fa:ed:e7:25:4e:ac:1f:b9:97:
                    6d:9f:f2:12:84:7c:9b:8e:08:53:71:08:e0:72:29:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7F:8D:F7:F2:AE:EF:53:08:2C:57:5C:0B:E5:74:B9:72:57:D9:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/62046459-1aa6-3377-b989-2c301aad9cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.crl

            X509v3 Authority Key Identifier:
                keyid:99:28:6F:E7:9E:10:62:8D:A9:30:93:A6:B7:6D:1E:DA:EB:0F:88:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4f6b18-ee48-47f0-8d02-2a3aad9e64c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:80:83:62:5b:b3:da:44:5c:79:cc:2c:0f:2e:7d:b8:45:
         95:18:b4:5b:8a:ec:a8:85:cb:58:fc:97:b3:23:67:2e:ea:c4:
         f4:81:55:c1:5c:12:26:dd:13:0f:bc:3f:91:d0:5d:84:7e:08:
         4b:90:61:3b:0c:b6:55:23:8e:6f:0c:27:db:6c:c6:d7:e7:ea:
         a4:94:42:e7:a6:2a:6b:f4:5e:42:62:99:92:5c:b8:28:95:95:
         4b:f4:ac:4a:b7:09:e0:be:34:c5:51:ea:16:ad:c8:56:e2:46:
         69:e1:b7:d1:e6:f4:61:52:4b:53:d2:71:82:36:e2:8a:35:6c:
         be:35:bb:7a:66:a6:47:de:d0:18:ec:ad:a7:22:f3:ef:0d:92:
         6f:8b:c5:b0:d7:99:3f:df:46:98:f1:ec:a6:ba:e0:ac:bd:2e:
         d5:0b:85:54:61:ec:82:8c:79:0a:2f:ce:c6:9d:17:e5:02:65:
         06:51:10:39:12:84:6a:a8:06:17:39:b5:6d:5d:26:b8:d2:ee:
         89:c5:2f:59:6f:41:a4:ae:3e:cd:c0:12:48:ba:25:51:dc:86:
         17:eb:dc:76:60:11:d8:7d:00:51:f9:ef:b1:92:35:0a:1b:5c:
         03:85:7e:86:fe:17:d8:a7:a3:c0:26:82:f8:5d:65:aa:37:69:
         76:d3:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:00:48 2026 by rpki-client