Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
File:                     a5083115-9d64-38b2-a390-44d44072b1bf.roa (raw, json)
Hash identifier:          w3EBvsrOaeN5NV7N7gU1/kaBDCWwRSgdPe7WOnu6wCk=
Subject key identifier:   BD:EC:17:E2:25:02:1F:C7:73:07:88:4D:AF:7B:10:FF:3D:CE:ED:34
Certificate issuer:       /CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
Certificate serial:       010D0C9F4328584DB07584FA2D15C62A798BC880
Authority key identifier: D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     399861
IP address blocks:        23.191.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:84:fa:2d:15:c6:2a:79:8b:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=9b0fce89-62a2-468e-8f26-a9d8bf9cd003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:8f:e7:c2:34:7e:7d:5f:f5:c7:8f:70:3d:
                    67:2b:e8:16:e5:50:23:63:43:28:53:54:24:bd:d1:
                    a8:92:11:eb:39:5f:da:fc:5d:9d:ca:e0:41:0b:aa:
                    32:be:c6:7a:68:e6:83:ee:08:dd:9f:af:ce:57:1a:
                    a6:63:ea:4b:84:77:22:6d:34:c1:de:4f:e3:f0:63:
                    21:7b:64:ab:0a:35:02:1a:c8:c9:37:f1:f9:7f:3d:
                    85:50:f2:15:b7:f8:02:2a:b9:88:b0:82:2b:94:d6:
                    3b:7d:1a:bc:69:51:68:fe:93:2a:4c:2e:4f:1d:76:
                    61:bb:44:10:69:cc:29:29:f1:2f:21:7b:78:8d:fc:
                    e0:58:32:a1:3e:5e:74:a2:f4:5d:18:c2:ff:8a:8c:
                    f6:21:43:fd:ff:d1:2c:fb:69:ef:94:91:4a:34:61:
                    98:a5:e4:3b:db:96:3c:bd:46:00:84:79:36:4e:3f:
                    7c:18:c3:26:86:87:b2:32:2b:62:0c:72:a0:b8:6f:
                    ac:68:75:39:8a:58:3c:b1:9c:ac:c8:48:f1:90:b1:
                    39:47:66:28:4b:7f:fe:ba:23:6c:e8:79:c9:13:83:
                    ec:3d:08:8f:9a:d0:90:72:ac:49:58:33:82:ff:9a:
                    6a:49:53:c1:0e:1f:d6:97:c0:81:37:77:88:71:59:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EC:17:E2:25:02:1F:C7:73:07:88:4D:AF:7B:10:FF:3D:CE:ED:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d5:1f:9b:1c:44:6e:9e:27:2c:cd:07:7a:56:d5:3b:82:9a:
         0f:01:50:bb:e2:d7:40:b8:1a:3d:b9:fc:be:fa:d7:7e:86:63:
         b3:e8:6c:26:02:38:48:59:f4:61:ee:9e:3e:29:e1:f9:93:2d:
         7a:99:21:fb:4b:da:1e:8c:12:3f:4c:a5:c2:d8:a1:91:8b:b4:
         7c:ae:dd:06:02:91:8e:29:fc:1b:2f:e8:06:d8:0c:65:6f:70:
         88:ac:1b:b7:e9:52:07:b4:7e:63:ca:37:f7:1a:11:b1:25:a4:
         42:40:27:ad:8e:8b:6c:a4:a3:ea:31:1b:b0:54:f5:56:b4:7b:
         18:2a:10:3a:60:1b:94:d7:9a:ef:e6:06:43:93:ff:f4:26:13:
         38:a7:ba:7a:51:a1:14:c4:f9:8d:59:4c:01:4f:16:0c:25:6b:
         75:ed:05:58:ef:b4:ff:d9:74:f5:7a:a8:aa:93:4a:5a:61:b6:
         61:fa:59:62:7e:c0:99:54:1f:d9:d7:70:38:d0:89:7a:3e:e5:
         0f:ba:07:9d:a6:40:2e:c5:ae:30:0d:2b:e8:69:5b:fc:da:e3:
         c5:a5:fc:30:77:85:bf:ca:ae:72:63:b8:e0:ab:b9:87:c2:59:
         16:c6:b5:38:01:c5:85:bc:c6:9d:f4:79:bf:2e:4e:71:50:6d:
         d0:f5:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:55:23 2026 by rpki-client