Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa
File:                     1d03ded5-67ad-3adf-8fac-21785cf59a34.roa (raw, json)
Hash identifier:          QWEHvNuPRUbpsjL9FzSQQdZqMZCsjifGIjiD/0DyDCY=
Subject key identifier:   24:96:C6:E8:87:28:B8:48:77:B1:DE:94:26:6A:0B:EB:0E:4A:F1:D7
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584D15A25B8EAD6AFF486531A578
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        23.234.160.0/22 maxlen: 22
                          23.234.164.0/22 maxlen: 22
                          23.234.168.0/22 maxlen: 22
                          23.234.172.0/22 maxlen: 22
                          23.234.176.0/22 maxlen: 22
                          23.234.180.0/22 maxlen: 22
                          23.234.184.0/22 maxlen: 22
                          23.234.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:5b:8e:ad:6a:ff:48:65:31:a5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=23b3e5ea-79b7-4447-baff-b8eacc2d6e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0a:ec:70:ac:ec:ae:fc:62:c4:88:74:40:6d:
                    9e:33:3d:9f:20:f4:ac:37:ab:fb:b5:43:3c:26:84:
                    9c:e0:b2:ca:85:ce:d5:f8:ae:b4:35:5b:4a:bf:59:
                    d9:88:07:f8:bc:72:50:27:07:d5:74:ea:55:ae:b3:
                    ba:df:a0:95:19:de:a3:47:8c:3c:e2:a7:f2:c1:6c:
                    0e:e5:98:9d:80:78:fb:10:52:2e:6a:f3:b3:fa:a6:
                    c3:8e:48:0f:04:31:30:ef:3c:9f:e0:d6:c7:3b:41:
                    a9:af:25:02:b7:16:a8:af:ea:35:54:cb:c8:33:93:
                    77:8a:10:d8:2b:c8:77:f7:4c:3e:13:1e:e9:b4:4d:
                    1c:e6:18:76:a1:36:8c:19:22:c8:fc:84:4a:88:80:
                    3f:84:96:2b:04:19:9b:3d:68:fc:20:ed:95:34:09:
                    1d:01:ec:a0:1f:aa:73:c0:5b:b6:53:a9:27:de:94:
                    a8:b9:f6:fa:70:cb:61:20:a6:29:d7:c5:5f:b5:1e:
                    fe:de:62:2a:0f:ae:f2:a4:1b:4a:3c:6f:96:e9:24:
                    18:f2:96:af:4e:1f:d5:01:8b:aa:47:f8:c0:31:42:
                    6d:2a:5f:31:17:e3:b5:87:94:a8:41:70:d5:7c:1a:
                    6c:7f:41:62:63:a0:51:af:ca:f9:cf:a2:ed:a1:91:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:96:C6:E8:87:28:B8:48:77:B1:DE:94:26:6A:0B:EB:0E:4A:F1:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/1d03ded5-67ad-3adf-8fac-21785cf59a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:64:fd:16:e5:ce:e6:d8:10:2c:76:b2:2a:77:f4:0e:ef:7a:
         c2:98:38:7d:af:d2:50:d9:ff:17:f8:24:42:23:ae:1d:7a:21:
         5d:e0:84:ab:3b:85:c1:47:68:ac:6e:0f:3a:4f:fd:4a:eb:7a:
         72:05:cf:c1:d6:65:8c:da:7f:b4:6c:b6:3b:96:76:db:43:2b:
         e2:a0:e4:af:96:0d:e3:f0:b3:ca:57:18:f0:88:51:d9:4f:e8:
         09:c6:be:5b:b1:c4:b4:9b:25:78:df:aa:85:22:13:a9:29:30:
         a3:12:f3:33:23:2e:17:56:a6:37:66:15:1b:08:6e:78:d6:f7:
         92:45:85:07:02:7d:54:a8:d0:fe:28:c7:34:ff:cd:19:35:88:
         a4:40:92:cb:4f:33:27:76:e0:69:d5:9f:21:09:eb:5f:50:4e:
         5c:7a:1b:58:d0:67:20:4e:8c:e1:48:aa:d1:d0:f9:64:3a:89:
         41:cb:b9:57:6f:f9:71:36:cb:04:2e:e6:61:ff:71:b2:59:b5:
         75:73:90:7e:bd:cd:72:4b:cb:7d:2a:2a:45:7c:f5:f2:d5:67:
         f6:a3:0a:2e:40:28:61:ff:20:72:b8:ee:59:07:cc:16:c2:2b:
         c2:0d:1c:62:46:d6:ec:5d:21:87:ca:de:ea:e0:58:b7:20:f8:
         1e:19:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:49:00 2026 by rpki-client