Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/56cebf3f-21de-3b49-865b-dac41843ab3d.roa
File:                     56cebf3f-21de-3b49-865b-dac41843ab3d.roa (raw, json)
Hash identifier:          9QCQeVhIg24BsalBAedo0WJ1xouNQvrkvk5dTLYhVGw=
Subject key identifier:   CA:08:97:30:E4:98:1A:25:EF:C9:8A:25:E8:A1:13:B9:07:0A:D6:B3
Certificate issuer:       /CN=c5c851da-daf3-4388-8104-40baa3dc3939
Certificate serial:       010D0C9F4328584D98BAAB01764782C2526BE080
Authority key identifier: A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/56cebf3f-21de-3b49-865b-dac41843ab3d.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     23459
IP address blocks:        23.176.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:ab:01:76:47:82:c2:52:6b:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c851da-daf3-4388-8104-40baa3dc3939
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=04c5a2f7-db4e-420d-9000-2382e578578e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b4:b1:ed:79:78:a0:5c:69:31:6c:6a:97:b2:
                    dc:79:fd:5c:ba:1b:c6:84:ba:e6:c8:c8:e3:c3:c7:
                    d4:95:59:f0:eb:c8:90:54:d2:7d:19:08:12:ee:bc:
                    ae:e1:30:c1:fe:39:2b:81:bb:3a:65:ad:a4:aa:e7:
                    b2:96:ac:88:a5:71:1a:4c:fe:44:d1:4d:40:c9:c7:
                    db:29:fc:72:4e:2e:b1:14:c0:49:fb:6f:e0:b3:44:
                    b6:96:8a:9f:1c:42:a3:8f:e2:09:21:89:42:15:cf:
                    ff:0c:e8:f7:ad:07:b8:eb:da:21:4e:63:b5:4a:b4:
                    57:10:33:a2:db:34:2d:97:0e:ff:e2:d3:46:a9:f9:
                    6f:d1:bc:6d:3e:ad:1f:29:03:38:df:ae:bc:38:bf:
                    ed:80:0c:c2:2a:c3:94:db:fb:7f:f1:58:43:50:7e:
                    5e:54:d6:f4:40:84:94:6c:f0:00:4c:fe:27:4a:26:
                    f0:7c:2b:1e:1a:b9:74:2c:66:09:20:34:3b:79:c9:
                    14:1f:42:49:60:58:62:f8:7f:a5:f4:3b:a8:0b:72:
                    64:fa:b9:99:1f:3e:1a:3c:ce:eb:2c:cb:b3:47:3a:
                    95:47:db:00:6b:55:f1:18:f4:cd:ed:46:5b:ef:a0:
                    a7:1a:6c:59:f0:82:7d:c0:93:8a:5b:6e:80:de:82:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:97:30:E4:98:1A:25:EF:C9:8A:25:E8:A1:13:B9:07:0A:D6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/56cebf3f-21de-3b49-865b-dac41843ab3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7f:81:6d:26:8d:04:25:db:f0:3e:18:c5:ec:ff:b8:66:7e:
         02:5d:dc:61:d6:ad:d7:03:19:d6:a7:1f:d9:96:db:5e:0e:2d:
         01:91:92:c2:1f:88:c0:b5:e9:57:de:5c:cf:24:1e:73:67:0f:
         39:c4:ff:1c:e7:1a:28:bb:e2:8b:97:68:aa:0b:f0:82:f1:48:
         4e:01:14:76:db:d1:c6:24:5a:d3:9d:02:c6:8c:c0:81:83:b3:
         8f:ae:38:5a:fb:bd:29:9b:b4:9b:c2:97:02:8e:07:d7:b4:1d:
         06:5e:b3:f2:5d:50:1e:10:33:3c:54:11:b8:2e:a9:45:3b:0a:
         83:b2:d6:50:e7:c1:38:c1:66:18:5f:39:c0:9a:88:74:2f:85:
         6e:11:a1:b8:99:3f:c9:21:97:75:82:07:c4:58:d7:f7:90:71:
         f5:a3:fd:49:2c:7c:1c:92:0c:04:c6:f4:3c:b5:75:34:f0:c8:
         24:bb:b1:4e:89:ad:d4:ef:99:23:de:48:48:02:d3:4b:16:48:
         5e:84:41:72:44:0b:f8:9a:fd:f7:d3:5f:c8:2c:27:e1:7b:ef:
         1e:e5:a7:d7:db:93:ae:75:59:7e:48:8f:df:ab:86:e8:4c:65:
         2e:ad:21:88:24:1b:af:d5:64:d1:77:3f:d8:af:8f:d3:9e:0e:
         f5:42:f3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:34:09 2026 by rpki-client