Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa
File:                     0ed965f1-d881-3302-a57e-78c8e4449123.roa (raw, json)
Hash identifier:          nXQW36IgwEn6ed5xn3GK0c16+V33gjZNamIW702ot6s=
Subject key identifier:   96:F5:69:62:5E:DD:06:C8:7C:69:01:D8:3D:AF:DA:6B:25:1B:75:53
Certificate issuer:       /CN=13f57bc2-46f7-4081-86db-6187bbb84dae
Certificate serial:       010D0C9F4328584E31CF1682DDF7E9E29141C270
Authority key identifier: 96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     54046
IP address blocks:        23.187.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:16:82:dd:f7:e9:e2:91:41:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f57bc2-46f7-4081-86db-6187bbb84dae
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=a4f364e5-ac7b-4f4a-b08f-2b90cc4444a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:26:74:70:ff:f9:c1:c5:bb:cf:fb:9d:ca:
                    a7:d0:0d:f2:b2:55:a0:78:08:f6:a4:2a:4a:0c:11:
                    3d:04:63:85:25:26:f1:83:30:1f:4a:13:35:27:f4:
                    9d:0f:5c:0f:f1:8c:07:80:40:dc:6e:d4:2d:7a:f2:
                    99:7d:60:32:3d:45:1c:a8:ac:c7:08:69:94:de:b0:
                    40:2b:06:4f:be:06:27:95:ae:e9:fa:30:b1:af:e5:
                    ac:e1:fe:b8:5c:7f:16:52:3f:e2:09:5d:cd:a8:97:
                    04:09:6f:82:31:89:ab:7b:ab:68:ea:6e:02:94:ad:
                    ca:50:bb:32:12:d2:20:53:a4:79:bc:e3:de:2a:d5:
                    d4:d0:e6:69:5c:99:13:b8:33:09:2c:bc:38:3f:6c:
                    ca:4d:23:47:fd:75:d8:ec:f2:d9:59:b9:5a:30:91:
                    e3:b4:ed:c2:cc:36:1d:97:b5:bc:03:5a:0b:8d:7f:
                    c7:0a:c4:0f:6a:b2:2e:ea:48:92:61:35:b6:78:1c:
                    24:c2:01:c5:5b:d6:5c:5f:d0:8c:86:79:3d:84:e1:
                    fd:00:24:14:09:09:19:db:b4:4e:34:a1:97:f7:25:
                    b2:33:10:55:aa:bc:3b:96:9e:38:af:79:07:97:4b:
                    3c:43:65:37:ba:26:14:37:34:1c:0a:cc:49:3a:83:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F5:69:62:5E:DD:06:C8:7C:69:01:D8:3D:AF:DA:6B:25:1B:75:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/0ed965f1-d881-3302-a57e-78c8e4449123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.crl

            X509v3 Authority Key Identifier:
                keyid:96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:77:0b:5a:bd:33:b5:1c:0f:1e:00:8c:1d:2f:b4:51:55:3d:
         cb:d1:48:69:7a:b1:8b:12:9c:d1:23:6b:4e:54:1a:c1:02:55:
         3c:e5:ae:c8:2f:a7:43:fa:5e:fc:8f:8e:02:43:17:8f:50:95:
         76:d8:29:6f:0b:d7:e0:d6:2d:3d:73:78:15:5d:61:00:5d:3d:
         0e:bd:18:ef:58:36:eb:8a:01:02:93:3c:10:29:9d:5f:d5:3b:
         4a:ee:fe:d9:44:b7:e9:f4:3e:94:b5:01:1c:16:0a:cf:ce:b3:
         bc:a1:0d:4b:7c:1d:7f:da:5a:c5:24:03:e6:9e:ca:fa:89:94:
         db:e4:5e:8b:f4:f9:d7:58:ac:ad:65:45:23:d5:44:cb:d2:f3:
         d8:d9:fa:5e:5a:27:cc:d3:0e:59:36:06:83:55:29:6b:3c:d9:
         e7:10:4d:7a:43:8d:25:3e:22:eb:e1:6e:a0:b5:ab:a9:d1:ac:
         1b:ed:e3:ea:da:de:40:10:39:bc:60:68:42:92:31:c2:43:9b:
         a6:a8:1e:d0:f9:2c:d8:0a:bf:65:c1:1e:a7:93:8c:b9:6f:84:
         c8:5c:31:d1:1d:e8:19:ae:aa:d5:f7:b4:91:3a:45:5f:24:c7:
         90:bd:72:f8:bf:33:67:eb:34:ea:af:eb:16:6d:cc:a6:bd:51:
         00:28:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:18:32 2026 by rpki-client