Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/2949f7b5-2624-3ceb-b76a-3f711bb78bc6.roa
File:                     2949f7b5-2624-3ceb-b76a-3f711bb78bc6.roa (raw, json)
Hash identifier:          ciwkdDu/ikAewN9ozuKqsQsGAqfW7r7RPEDk2N246C4=
Subject key identifier:   AA:B1:7F:7E:61:7B:DA:4B:11:46:54:8A:BF:B1:F9:6D:6B:C5:7C:72
Certificate issuer:       /CN=c5c851da-daf3-4388-8104-40baa3dc3939
Certificate serial:       010D0C9F4328584D8EF579397575B823708C31C0
Authority key identifier: A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/2949f7b5-2624-3ceb-b76a-3f711bb78bc6.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     23459
IP address blocks:        23.176.216.0/25 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:79:39:75:75:b8:23:70:8c:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c851da-daf3-4388-8104-40baa3dc3939
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=54e7d024-5bca-499b-a7fb-90556f3d98ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:f6:ce:3a:79:f1:3b:e0:de:b9:d8:7a:f7:
                    09:2b:cd:46:46:fd:39:8e:bd:3d:6c:39:a9:5b:9c:
                    5a:04:9c:c5:27:ef:2c:6d:d9:55:03:61:28:5a:8d:
                    57:63:4c:db:8d:42:6e:d3:6d:8a:9a:a1:8d:92:40:
                    f6:ee:4f:1b:5a:af:b7:a6:e7:14:bd:bf:d3:df:46:
                    14:8b:22:d7:69:03:92:3a:56:7e:c6:5d:40:44:7a:
                    39:d5:7f:2b:4a:ba:f3:09:be:2b:10:31:0f:85:d9:
                    af:1b:5c:86:e0:31:c7:e2:3b:6d:82:9a:2c:86:2b:
                    46:2a:53:d1:9c:de:f7:91:6d:4c:47:7c:6c:ef:50:
                    da:fa:10:ab:b5:8e:ab:6c:37:d1:e0:ac:97:3b:d5:
                    24:ec:e4:0a:c4:8a:e3:e3:df:02:fc:76:23:a7:ca:
                    98:f5:b6:52:fe:e9:4a:af:15:6a:ae:c5:96:ee:9d:
                    cd:13:4a:71:f7:79:a0:5d:34:c1:0f:7b:95:e7:0c:
                    fd:9f:1a:2b:82:0d:87:c1:b5:13:80:75:9e:89:f0:
                    59:1d:2d:fd:54:06:6a:d7:d6:09:b9:52:92:b3:0a:
                    2e:cd:73:d2:c5:f5:df:62:95:92:01:79:fc:2c:f4:
                    bc:23:b7:10:9d:16:6d:de:ca:e9:03:b0:e0:ff:77:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B1:7F:7E:61:7B:DA:4B:11:46:54:8A:BF:B1:F9:6D:6B:C5:7C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/2949f7b5-2624-3ceb-b76a-3f711bb78bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.216.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:ce:30:74:e5:33:4e:9d:ee:7a:d2:7b:bc:05:66:0e:f4:
         16:e1:dd:0f:4b:9c:9d:02:97:3d:a1:a8:25:a8:44:67:ae:48:
         29:4a:5e:b8:bc:2c:63:37:f9:0e:03:36:cb:cf:25:2f:b0:d5:
         db:a6:65:93:28:3b:04:f9:e8:9f:0a:a0:07:b3:9a:2f:bd:96:
         dc:45:dd:e3:a9:de:f8:bd:e6:7f:6b:d4:3d:12:cc:6e:32:1f:
         91:4a:8f:4d:d0:6e:87:0d:8c:06:44:37:16:05:5b:76:93:70:
         4b:4f:70:73:a4:51:49:04:33:a0:ba:e6:83:56:0a:79:55:84:
         71:f2:2c:94:17:41:0d:e1:2f:da:7b:f9:17:6a:79:fc:f9:0a:
         9a:52:fc:89:a2:90:ba:c8:60:d8:87:65:63:ca:72:7b:7c:14:
         64:4b:4c:13:cc:62:51:10:3a:69:dc:04:86:79:63:d6:64:e0:
         49:80:4a:dc:2a:f1:c2:58:88:57:7b:06:9b:85:9c:19:d0:6f:
         b0:21:f5:95:91:33:0c:78:36:0d:66:92:bd:5a:7b:9a:0b:98:
         74:f0:d6:9c:ae:ab:84:79:c4:9e:d6:0d:b4:df:ef:fa:c4:62:
         fb:67:60:75:04:22:05:f7:95:8f:48:c8:ce:a7:6f:89:45:6f:
         3d:f3:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:33:07 2026 by rpki-client