Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa
File:                     ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa (raw, json)
Hash identifier:          YrJZKD4eHA0toqdhkDjRbnT/L0eeeyjuyuK+BnV4Ig8=
Subject key identifier:   D8:31:1B:68:D7:1D:1F:55:6D:46:36:6C:8F:0E:BE:60:C6:F9:03:49
Certificate issuer:       /CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e
Certificate serial:       010D0C9F4328584E0D84250FA5F9773438806680
Authority key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     35870
IP address blocks:        23.144.200.0/24 maxlen: 24
                          2602:fac0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:25:0f:a5:f9:77:34:38:80:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=da1ed17b-7efc-4089-91b8-11b54b543d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a0:6d:f3:f5:38:ab:a2:6e:05:97:27:97:48:
                    15:b2:ba:fa:22:2c:dd:ce:67:f4:0c:c1:ca:85:fa:
                    3c:58:ab:e2:67:d5:ee:d9:95:b1:85:be:14:70:ea:
                    29:a1:b3:fb:5e:e7:bc:dd:6a:7e:b3:cf:9f:18:f6:
                    ca:7e:f0:e2:41:3f:75:97:b1:72:cd:2b:a0:f0:1f:
                    9e:c6:b0:e7:e0:84:4d:7e:10:d3:2a:3a:48:09:65:
                    47:d2:c5:b5:fa:c1:bf:d7:c6:f5:39:df:c6:4d:55:
                    ae:c6:34:ae:6d:65:02:3b:3c:90:02:18:13:85:c3:
                    07:76:0d:e5:ae:41:b5:53:1c:05:69:58:61:02:91:
                    53:22:6a:e0:ee:82:c0:3b:73:96:89:77:32:86:cf:
                    92:48:63:e7:4d:44:af:14:d9:a7:15:c8:c3:2b:4b:
                    6f:0b:a7:2c:a2:f1:01:e3:af:f5:13:48:fc:c4:ba:
                    e5:1a:0a:46:73:60:b4:8d:60:a8:52:fe:87:00:23:
                    9a:26:7b:9c:f7:42:4a:4b:91:c1:5c:7e:f6:17:84:
                    26:86:9b:b3:44:af:41:48:e9:b8:85:a4:73:fa:51:
                    fa:5d:c5:f8:d0:48:2c:17:bb:ea:32:88:fb:b1:e9:
                    3a:23:29:b5:f4:5f:12:bd:6d:7e:c2:3a:2b:65:9d:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:31:1B:68:D7:1D:1F:55:6D:46:36:6C:8F:0E:BE:60:C6:F9:03:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl

            X509v3 Authority Key Identifier:
                keyid:A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.200.0/24
                IPv6:
                  2602:fac0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:59:99:64:08:4c:df:50:a4:67:e2:c0:46:84:41:47:b1:08:
         3e:2f:7d:d8:ef:ac:ce:d5:4b:65:f9:de:06:99:14:d4:57:a5:
         9e:41:10:45:8d:bd:e3:e1:0d:27:3a:7d:a3:ff:1a:b2:43:47:
         2a:ac:1b:27:2e:63:1e:73:0b:9e:e1:53:b9:b6:13:1b:e8:f6:
         72:5a:fe:1c:1a:9b:c8:30:81:5c:cd:7a:44:72:c6:00:65:7b:
         22:85:06:fc:7b:0b:b3:c6:23:2b:cf:4a:9f:9d:37:36:43:38:
         fe:f7:5e:f0:be:0d:8f:36:96:db:3f:67:9d:0f:98:a6:b4:1b:
         ff:2a:3f:df:0c:f0:40:ae:ca:c1:d5:3a:8a:d7:eb:c1:1c:8e:
         00:83:39:36:74:c3:bf:f4:fd:55:7d:cf:5f:22:7f:16:64:c0:
         a4:eb:bd:55:30:a8:3e:ad:42:bd:62:be:83:6d:3b:61:e4:b3:
         b8:f4:ec:77:9c:ba:e7:6a:a7:be:27:b7:ed:ea:51:b6:c9:12:
         30:de:33:ee:23:e0:60:e9:72:7c:fa:bc:47:02:37:71:c1:21:
         35:cd:fc:6a:ed:6d:b9:e9:cd:4a:58:0b:8c:aa:7a:b0:37:24:
         7b:ea:50:69:f8:45:a8:68:4d:f5:e8:76:82:e9:79:d2:46:db:
         cf:27:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:37:06 2026 by rpki-client