Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa
File:                     2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa (raw, json)
Hash identifier:          rgxo4jax707l2i98DwrvHxb8kdXD4mohzs0chs34S4s=
Subject key identifier:   32:00:BC:21:D9:A4:F1:25:7D:A7:EC:FC:D1:04:14:21:69:50:D4:9C
Certificate issuer:       /CN=845381b0-384a-4243-95e1-ae5dd9916fd7
Certificate serial:       010D0C9F4328584D2644C51B36AC9E4B6EDA5400
Authority key identifier: CB:FC:80:79:7D:34:80:E4:19:8F:0D:A6:8E:CB:C6:E2:03:D3:60:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     63023
IP address blocks:        23.158.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c5:1b:36:ac:9e:4b:6e:da:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845381b0-384a-4243-95e1-ae5dd9916fd7
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=e791ccf7-b88c-47f8-b280-f5d96973f0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:c1:2a:0f:bb:0b:99:1c:11:ff:13:b1:c6:
                    1e:3c:d9:86:92:f2:2b:b2:d9:34:e9:c5:76:3e:a8:
                    d2:f5:1a:89:48:29:9c:1c:54:ab:33:b4:31:3e:8c:
                    2b:00:b6:a7:f1:94:be:25:2b:b7:b6:98:c5:89:66:
                    e5:77:51:a8:77:41:f0:ab:4d:04:f5:3b:4e:2c:3a:
                    53:43:d1:f8:59:0d:4a:f8:13:14:6a:0c:b1:ae:22:
                    65:5e:74:6a:73:03:55:8b:a8:8a:6d:e5:2f:55:a8:
                    7a:42:26:3b:45:4c:a0:13:b2:39:4e:56:b9:5a:7f:
                    de:36:8a:a9:62:da:fb:d2:38:7f:89:7c:05:06:d6:
                    47:56:2d:87:9b:31:0c:cc:4f:8b:33:6c:dc:83:be:
                    1a:93:4e:c9:0d:1f:6d:74:45:59:75:48:ba:92:90:
                    0f:00:b4:ae:c8:b6:dc:34:a8:47:b9:9a:70:a7:b4:
                    cb:9a:f0:6d:81:f0:13:c6:ba:ef:a6:03:59:22:ac:
                    9f:9c:ae:58:6e:e0:63:d5:7e:21:ca:f2:46:f8:4f:
                    5d:cf:cf:aa:29:e2:6c:32:68:16:85:67:39:04:c3:
                    b3:95:9d:71:37:c6:2d:28:24:c8:22:7c:f3:9a:ab:
                    77:4c:38:53:87:51:89:12:23:70:09:17:6f:75:b0:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:00:BC:21:D9:A4:F1:25:7D:A7:EC:FC:D1:04:14:21:69:50:D4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.crl

            X509v3 Authority Key Identifier:
                keyid:CB:FC:80:79:7D:34:80:E4:19:8F:0D:A6:8E:CB:C6:E2:03:D3:60:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:31:0f:e0:54:a1:46:f5:ae:9e:b4:5e:be:ca:2c:5d:7b:a3:
         4f:71:d0:ca:8e:cc:0c:b5:5e:a4:51:f1:ea:73:a8:e2:02:8e:
         3c:a4:5b:33:c6:a0:49:3c:c4:4a:64:5f:95:51:c0:e6:9b:f6:
         e5:43:b5:bd:d2:1d:88:73:00:47:b1:ee:85:33:c1:d4:81:a2:
         29:88:3b:8c:b3:31:6b:29:bf:7f:97:9d:67:24:56:c3:5a:dc:
         73:23:ad:a4:6b:fd:4b:b1:6d:62:c9:d8:48:15:ba:f3:9b:46:
         66:ff:83:dc:04:e2:63:b7:2d:ef:b9:1f:6c:b0:85:54:b5:56:
         c6:a8:6a:b8:65:44:c2:14:56:ad:cf:8f:7c:d0:f5:95:35:0f:
         cb:61:35:16:20:56:c6:a0:99:3a:a9:0c:77:5e:34:ab:cd:30:
         d0:23:98:a2:0c:77:a1:e5:6c:63:ec:83:35:24:f9:31:f5:ff:
         5e:a3:43:e5:b3:21:1e:03:0a:a4:75:8a:05:88:32:4e:d4:80:
         d0:3a:e6:ba:57:d0:a2:4c:df:fb:e5:2b:96:b4:28:dd:32:a4:
         16:ac:04:ab:17:92:53:9f:ee:c3:98:08:7f:c6:10:a7:f9:2e:
         d2:44:ce:dc:22:04:16:0a:be:2d:f1:31:a9:26:61:a0:14:71:
         72:36:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:20 2026 by rpki-client