Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/53223fbd-6eb9-3932-b866-ff8d180e02ab.roa
File:                     53223fbd-6eb9-3932-b866-ff8d180e02ab.roa (raw, json)
Hash identifier:          fBdFJwGy8ZFT5YWNUiuuxfPpVGOH47KnigL3Qo+w8cM=
Subject key identifier:   BA:73:F6:11:42:E9:88:A0:E1:AF:31:8F:E7:0F:05:59:52:19:66:66
Certificate issuer:       /CN=fa477642-e4af-4ff3-96bf-ada919ef1284
Certificate serial:       010D0C9F4328584D6EDA5C0FBB8BCFD6FA18C680
Authority key identifier: E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/53223fbd-6eb9-3932-b866-ff8d180e02ab.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     394743
IP address blocks:        23.167.80.0/24 maxlen: 24
                          23.172.32.0/24 maxlen: 24
                          2605:12c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:5c:0f:bb:8b:cf:d6:fa:18:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa477642-e4af-4ff3-96bf-ada919ef1284
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=1b7e93bd-7842-4c95-90e7-557c98eeec21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fe:80:39:f3:fe:22:a6:a7:22:9e:26:3f:cf:
                    4a:9e:59:9b:17:d0:46:b1:57:30:98:7c:81:84:63:
                    db:e0:19:aa:d1:5a:db:b5:65:05:42:b6:81:72:16:
                    ff:f9:3a:d6:71:ec:15:d1:88:5d:47:78:7e:e9:ff:
                    c7:68:57:3e:9d:78:23:7d:6a:24:8b:8e:9f:82:a3:
                    7d:02:26:b7:94:6c:64:97:0e:29:86:61:29:39:83:
                    ff:22:f8:08:1b:2c:c6:cf:d6:7a:ff:61:6d:dc:db:
                    b2:1a:64:8c:d2:ec:d4:4a:17:1b:89:05:f0:ab:a6:
                    44:3d:c2:58:be:96:57:3f:0f:03:27:7a:d6:b6:2b:
                    88:9e:80:ae:ff:7f:85:ee:c2:a7:fc:f3:60:62:6c:
                    6f:e3:e1:1f:e9:a9:4c:5d:bc:2f:75:d2:24:22:18:
                    1c:e6:c7:3a:80:a0:07:e6:33:bf:16:ff:12:c1:bc:
                    84:de:91:56:b9:b8:d3:21:2f:d4:ce:fe:89:88:b5:
                    ad:96:cd:a4:c9:0c:e7:2a:a0:c5:c5:85:5f:10:38:
                    d7:dd:2a:df:4b:8b:6f:89:25:0a:fd:fe:a7:55:a7:
                    a6:41:de:04:40:fc:3b:4a:ea:ad:ab:6d:09:8f:05:
                    d3:ad:4b:24:39:47:59:f4:e6:9f:91:32:df:79:15:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:73:F6:11:42:E9:88:A0:E1:AF:31:8F:E7:0F:05:59:52:19:66:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/53223fbd-6eb9-3932-b866-ff8d180e02ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.crl

            X509v3 Authority Key Identifier:
                keyid:E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.80.0/24
                  23.172.32.0/24
                IPv6:
                  2605:12c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:39:14:0b:54:17:5c:89:40:2f:b2:ff:fa:a1:5e:d2:96:db:
         b3:b7:b3:d6:ea:7e:94:f3:25:67:fe:03:56:e9:8b:12:44:49:
         06:bd:02:17:b4:c4:87:a2:ba:0f:37:d9:2c:8c:b7:22:58:6c:
         89:c5:40:95:52:f8:0d:e5:6c:3b:3c:4b:24:19:aa:47:77:82:
         87:c5:29:ea:45:0a:2a:ff:09:52:61:a2:33:c4:77:a9:ca:2e:
         96:c6:36:25:46:1d:13:c8:f4:20:f5:47:b2:b7:1c:9d:36:07:
         d3:fe:ae:6a:ba:bb:bf:d6:ca:dc:6a:d9:32:31:33:1e:d6:e0:
         4f:e5:dd:8a:f5:d8:0b:c8:89:0d:81:71:78:0d:af:47:b4:69:
         c8:3c:fc:91:48:36:b5:85:57:60:ee:8a:e5:fb:1d:26:89:81:
         2e:c9:41:0d:7c:aa:3a:c8:89:f0:cc:35:d6:1f:32:97:71:61:
         93:2c:f6:66:2c:bb:19:2e:71:7b:3d:67:7a:c6:16:f8:3d:5a:
         be:bc:f1:b0:d5:2a:37:39:f3:e6:6f:7b:dc:d8:58:1c:4a:53:
         3d:38:e6:a7:a0:ee:1b:df:ed:00:86:89:b9:6b:8f:02:88:29:
         07:7f:af:0f:1b:ca:a5:f5:28:d0:b1:0c:0a:ff:d2:b6:4a:56:
         a5:d5:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 03:40:28 2026 by rpki-client