Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/f22204b5-6c03-3984-a41f-23bfca882f70.roa
File:                     f22204b5-6c03-3984-a41f-23bfca882f70.roa (raw, json)
Hash identifier:          W11mc08YKALQnimiGwKFe9R9rGtwbaqGSP7gr1MR0O4=
Subject key identifier:   62:83:BC:0F:C0:23:AB:BC:04:35:B9:C2:BA:3B:B3:D5:37:DA:2F:90
Certificate issuer:       /CN=bfcded43-2d76-428f-b7f1-3042af66f969
Certificate serial:       010D0C9F4328584D4BF4F5515C1D58E6A00C5480
Authority key identifier: E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/f22204b5-6c03-3984-a41f-23bfca882f70.roa
Signing time:             Thu 26 Mar 2026 13:00:41 +0000
ROA not before:           Thu 26 Mar 2026 13:00:41 +0000
ROA not after:            Wed 24 Jun 2026 13:00:41 +0000
asID:                     46664
IP address blocks:        23.175.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4b:f4:f5:51:5c:1d:58:e6:a0:0c:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfcded43-2d76-428f-b7f1-3042af66f969
        Validity
            Not Before: Mar 26 13:00:41 2026 GMT
            Not After : Jun 24 13:00:41 2026 GMT
        Subject: CN=39f46620-a479-42c4-be1b-94841b69928d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:2b:9f:d3:e7:48:18:ae:a1:8d:8d:ec:5b:
                    83:3f:ed:d5:71:47:f5:7e:15:bd:d8:a6:05:82:3f:
                    4a:c6:07:51:00:17:e4:1b:07:12:52:de:2e:31:3c:
                    9b:79:b2:cc:c3:9b:55:98:f6:db:0e:e3:39:82:db:
                    d4:05:4f:8a:63:a9:52:89:ac:8a:88:88:51:e0:4c:
                    50:fb:7d:04:27:47:f6:96:4b:94:c6:16:d8:0a:29:
                    81:88:9f:64:c5:13:dd:23:38:c5:6d:36:58:a8:2a:
                    1f:e0:ee:db:75:36:9e:3d:54:9a:fd:65:c8:b4:65:
                    d2:d3:f6:35:58:4d:92:45:56:6a:4e:3f:6f:8a:89:
                    4a:24:e9:83:15:b9:c3:e8:ba:cb:bb:57:c5:ff:cb:
                    30:8c:f7:60:38:30:9c:23:ca:de:75:59:ea:49:b1:
                    af:d7:15:67:0a:d9:94:f2:28:a2:04:e3:7b:2f:a7:
                    f6:aa:a8:3e:1c:cf:6d:67:c0:fe:8d:59:50:37:84:
                    6d:98:4b:44:89:d1:55:5c:75:b9:49:67:10:bd:b2:
                    88:18:36:d2:6f:fc:c1:d8:f8:85:15:1c:8e:e5:a5:
                    c0:db:c0:18:b2:2b:dc:c7:de:f8:35:b2:a6:2a:df:
                    f4:d7:f5:b3:28:12:43:eb:0b:ba:f2:25:07:8e:68:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:83:BC:0F:C0:23:AB:BC:04:35:B9:C2:BA:3B:B3:D5:37:DA:2F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/f22204b5-6c03-3984-a41f-23bfca882f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.crl

            X509v3 Authority Key Identifier:
                keyid:E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e2:20:3e:aa:e5:73:2c:84:52:c3:59:4e:0d:13:b6:ea:16:
         10:89:ac:70:73:d2:7e:b6:38:f0:32:c2:e9:0a:97:3d:5a:28:
         7f:72:18:f2:73:4b:0b:5e:14:2e:ad:92:c6:e1:01:2c:25:52:
         19:9a:cb:f1:95:ad:a9:fd:78:ad:e2:7a:ba:93:0f:cb:94:2b:
         80:cd:6e:c5:a2:51:4c:b1:16:b1:dd:95:72:8c:f0:b8:76:75:
         34:e3:36:9d:d8:c0:47:cf:e7:25:ac:c2:8b:13:b2:5e:88:ba:
         9f:e1:f2:a4:32:b0:07:55:ac:75:7d:33:9c:5a:96:1a:17:7d:
         8a:c0:b5:b0:48:b0:ce:1c:91:9a:b4:7d:90:23:b6:d5:ce:ba:
         b9:bb:63:4e:41:38:8b:93:ef:e7:13:7d:60:ea:5a:3d:08:17:
         f1:9e:be:da:83:fe:5b:56:40:24:2a:3c:8c:c8:8e:02:5b:f2:
         57:08:cc:b1:73:c1:35:26:51:df:45:74:ee:c4:68:53:3e:7c:
         54:f7:58:f8:55:20:43:dd:8b:c9:7e:e6:7e:1c:b1:2b:c5:87:
         0e:03:b9:f7:3b:f1:f6:c3:42:c7:0b:41:a5:9f:7a:04:e1:98:
         b2:f5:d0:67:2b:88:e3:73:d5:59:37:6d:54:8a:5f:82:d2:7d:
         e9:02:62:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:13 2026 by rpki-client