Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
File:                     57901a8d-3025-36c9-bed1-42964cd3980b.roa (raw, json)
Hash identifier:          OFfJ+jMTFTc9K/hCqrCz6uOZ8deBHAXMH04VK9Iz8Ws=
Subject key identifier:   C3:AD:7F:DD:DC:84:57:46:3E:E8:2E:5B:AD:5F:1A:A1:82:F7:96:D3
Certificate issuer:       /CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
Certificate serial:       010D0C9F4328584D2644C31463026BA9131F8760
Authority key identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     54785
IP address blocks:        23.160.104.0/24 maxlen: 24
                          2602:fa57::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c3:14:63:02:6b:a9:13:1f:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=a34a4e25-a498-41d4-88ac-eec8468ca6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:de:77:af:f0:14:c4:34:4d:8b:3f:2b:72:54:
                    36:4f:6d:f1:3f:d7:1a:7e:1e:b9:2d:85:37:75:8a:
                    22:b1:53:6b:5a:46:fe:55:39:71:03:d3:f2:3c:46:
                    44:5c:7d:38:d9:1d:3f:3e:d1:ae:32:79:e5:3e:4b:
                    5c:e2:98:75:92:10:4e:3c:d5:ae:38:f4:c3:96:2c:
                    47:1a:03:a6:b5:b2:f8:b2:04:a6:16:8c:c5:40:68:
                    3e:8a:01:94:83:b5:75:87:6f:58:17:f1:28:7e:38:
                    2a:21:21:22:1b:a1:8a:71:a3:21:b9:b1:6e:ee:c6:
                    23:24:37:12:2f:2b:83:06:d0:88:87:ad:23:4e:5f:
                    1c:bd:2a:b8:5c:a4:6b:c7:d8:45:37:70:d2:aa:47:
                    86:a1:02:1f:9a:a5:a0:10:3d:89:6d:4a:8f:8c:b9:
                    99:99:78:28:8b:a1:68:98:4a:37:12:21:ad:2b:ad:
                    a4:58:d2:9d:39:0f:12:6d:7a:c9:8c:f2:ac:1a:1c:
                    c5:5d:dc:c4:56:75:3d:92:2e:f2:f6:21:b1:66:02:
                    c1:26:e0:97:39:dc:96:2c:06:02:be:3c:c1:d8:16:
                    72:c1:03:98:15:c2:7d:66:67:85:13:fc:d4:c5:c6:
                    a4:10:96:8c:4d:76:30:bb:be:ed:ec:6b:3f:29:b3:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:7F:DD:DC:84:57:46:3E:E8:2E:5B:AD:5F:1A:A1:82:F7:96:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.104.0/24
                IPv6:
                  2602:fa57::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:d9:e8:e6:ea:41:1b:5a:d4:57:9e:9d:22:c6:ab:fe:a2:
         61:d4:c9:18:a3:8f:22:05:fb:c6:a0:fb:ee:44:38:a0:36:ca:
         26:65:15:c3:21:94:a0:26:9d:b8:19:02:16:39:68:0e:dd:99:
         45:b3:d5:59:b4:10:48:4a:26:44:85:af:f4:cf:28:13:67:13:
         79:b2:65:7b:14:ee:3f:9a:a2:b6:0c:71:88:a6:94:33:71:a7:
         a3:27:1b:fd:70:ea:72:7b:16:28:c6:45:91:7c:20:03:bb:55:
         cc:29:e1:99:42:ca:89:eb:73:0d:be:d6:6a:fd:48:0f:f3:a9:
         64:77:f8:d7:0d:05:ca:00:a8:3d:a0:15:e7:3b:f6:cb:d3:4c:
         d3:55:a4:be:ca:4e:6f:56:c9:62:5a:55:7f:b6:5a:75:34:56:
         e3:4e:07:4c:bf:b0:c4:2e:33:09:c7:03:b2:3e:87:6b:41:74:
         5d:5c:79:aa:8f:4f:aa:48:82:65:66:3a:c6:dd:99:f8:ea:1b:
         73:ed:05:b2:14:b5:00:6d:8b:cc:8f:b5:3f:e8:b8:3f:dc:ce:
         52:fd:27:96:75:98:2b:32:f2:ac:36:0d:7f:7b:d6:fc:06:1a:
         9a:48:7b:a0:05:ee:c3:ac:e1:7e:52:1d:65:65:fa:b9:ef:29:
         30:a8:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:43:50 2026 by rpki-client