Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa
File:                     6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa (raw, json)
Hash identifier:          zo6BENIX2gS/SKCTw4fbXO3QUvX7jJor1VnEUJUgGiM=
Subject key identifier:   B1:99:6B:28:4B:23:40:B4:6D:A5:7C:F7:9D:CF:22:FA:0A:2F:41:6E
Certificate issuer:       /CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd
Certificate serial:       010D0C9F4328584E5D14B1051180A46570CC89C0
Authority key identifier: 44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     16827
IP address blocks:        23.131.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:b1:05:11:80:a4:65:70:cc:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=9b16c3a8-d081-4272-af8f-0579d945cc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:e8:87:87:8d:49:bf:21:07:dc:fb:be:74:
                    7e:ed:e5:2e:ed:48:14:81:3f:57:05:75:ad:b2:f3:
                    b6:5d:b7:f6:6d:22:62:78:65:92:7c:28:da:13:91:
                    de:8e:43:ce:40:5e:9d:54:b1:45:b5:6b:76:42:7d:
                    c2:92:96:02:3a:68:10:d7:ae:1d:8c:bc:22:76:75:
                    2e:ce:d6:a6:cf:e0:40:85:eb:12:31:2b:e7:ed:4c:
                    ea:ce:ad:cd:4f:c6:2c:31:4f:ae:f9:35:18:a2:7a:
                    92:36:e5:35:ad:81:64:03:36:3b:b7:2b:95:55:d1:
                    81:8e:4a:63:6f:dd:01:1c:4d:47:f1:e1:af:16:84:
                    45:6a:69:7e:57:e2:28:54:39:9d:58:68:1f:48:ef:
                    52:98:c6:02:3a:2e:f5:1b:53:e5:fe:18:8a:c3:dd:
                    e7:3e:89:48:0b:9f:da:39:d0:58:37:46:8c:5d:9f:
                    af:9a:c7:0f:d5:05:05:6e:1f:9a:96:d1:e9:4e:05:
                    74:4f:b2:65:b7:3d:a1:68:f4:0e:ad:ed:b9:b6:0e:
                    52:66:b1:9f:b2:8b:78:74:c1:ba:c1:33:5e:03:17:
                    a6:7e:7d:de:aa:4c:7e:23:57:c3:23:1f:89:9b:a9:
                    76:48:da:f2:2a:f7:f9:b3:74:0c:fe:7f:73:dd:e1:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:6B:28:4B:23:40:B4:6D:A5:7C:F7:9D:CF:22:FA:0A:2F:41:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.crl

            X509v3 Authority Key Identifier:
                keyid:44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e2:d0:f1:cf:d2:64:c8:4c:c5:21:6c:e3:ef:c6:69:ea:b6:
         bd:1d:2c:7d:05:95:2f:c4:4b:25:f6:72:17:ca:79:2f:e2:94:
         0a:7e:85:48:a5:f7:8f:ce:9b:f7:6b:4f:0e:8c:7b:55:09:4d:
         b9:df:bb:66:0f:07:8c:00:be:d8:67:53:90:9b:60:1e:e3:91:
         bc:89:4a:03:f5:a1:20:0b:1d:b5:78:ee:99:b6:77:53:d7:04:
         cd:10:f1:50:ae:55:86:8a:e2:15:3a:a5:7a:2b:75:bb:e2:85:
         b6:6c:9d:34:13:49:e2:99:1e:c7:43:88:49:7f:1f:cc:78:f4:
         d5:1c:f9:c1:49:4b:5d:e5:c1:fb:ee:c7:28:a1:fc:bf:d9:3b:
         20:14:47:03:cc:7f:0d:f0:23:7d:79:67:30:49:bf:7c:a8:cf:
         be:d7:aa:f3:bb:34:27:33:ef:55:43:03:57:53:39:7f:31:37:
         b8:c5:47:87:dc:24:38:5b:33:94:ef:a8:5b:33:29:13:39:d1:
         d8:d3:85:8c:55:31:37:a7:96:32:f3:06:94:ed:4e:41:2d:15:
         de:a4:ba:87:cd:ee:77:56:d0:de:2b:6a:32:90:be:76:16:10:
         ef:f7:df:a5:cc:36:15:20:da:d3:e4:3c:5d:8f:fb:29:c8:75:
         7a:fc:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:06:29 2026 by rpki-client