Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
File:                     4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa (raw, json)
Hash identifier:          57mE1dtzznDuksy1YommBHt+62Ik1Bd/U2Cko3kgsrQ=
Subject key identifier:   D6:62:D2:83:B1:BB:A2:B1:19:73:B6:7F:4E:EE:99:71:79:4E:F0:F6
Certificate issuer:       /CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
Certificate serial:       010D0C9F4328584D39CF825A3A2745DA4D7B6100
Authority key identifier: BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     400240
IP address blocks:        23.189.112.0/24 maxlen: 24
                          2620:9e:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:82:5a:3a:27:45:da:4d:7b:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=2d41a86b-313d-428d-892e-6e69564e79e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:66:1b:f8:73:d0:f6:2d:2f:d6:11:bc:fd:
                    d8:31:55:1b:0c:9d:91:6c:83:f6:68:e4:a8:c6:4d:
                    d9:37:41:26:20:41:8e:73:41:c2:78:79:c2:fd:bb:
                    48:cc:95:3b:5a:d5:f2:7d:4a:4b:ee:28:62:a0:dc:
                    af:40:e2:73:f3:66:46:8c:28:ed:fb:ce:f0:49:b0:
                    a2:d1:92:92:ff:78:b2:2f:9a:d7:8d:83:af:f1:e5:
                    da:13:56:db:36:0d:f3:44:b8:1f:1a:0f:4d:d8:9c:
                    f6:85:d2:81:6a:41:28:8f:bb:18:f4:6c:1a:49:f0:
                    0b:ed:f7:17:49:ba:2b:cd:12:53:84:ac:2b:b4:e2:
                    fd:42:6b:3a:9d:00:7c:e5:ce:57:e0:4d:44:cc:97:
                    91:41:20:d1:89:b0:78:9d:eb:d7:36:2b:d9:ed:02:
                    0d:e8:a1:62:03:f2:11:a0:88:45:67:cc:0f:c2:1f:
                    ab:ff:6e:0e:f8:d1:9f:7c:fe:91:99:16:f6:b6:b8:
                    b1:50:5d:b0:0c:b0:ec:1a:1d:3b:cd:80:36:b0:1c:
                    99:2c:68:0f:f4:3b:0b:25:ca:f0:ed:19:5e:c7:95:
                    20:62:ba:a2:eb:0d:13:7c:0e:8b:31:bf:59:70:5c:
                    2b:70:98:46:4e:05:29:3e:5e:11:61:ee:af:39:51:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:62:D2:83:B1:BB:A2:B1:19:73:B6:7F:4E:EE:99:71:79:4E:F0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.112.0/24
                IPv6:
                  2620:9e:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:43:dc:f8:25:ce:4e:bb:e2:13:32:ae:21:0d:cd:51:c1:
         9d:06:01:cb:83:8c:f4:5d:2a:a4:79:47:b5:25:c5:f6:f8:ba:
         04:86:fe:bf:65:c5:17:4d:ef:ad:35:be:59:f3:04:66:a0:1b:
         22:ba:ab:dc:ed:cc:6a:ff:45:1e:be:b9:21:a7:b5:b3:64:5e:
         e0:50:66:72:a7:de:37:07:2c:ce:b2:43:1f:69:17:1f:45:ed:
         e6:25:56:05:de:c1:50:2e:b9:7c:2c:21:e1:d6:51:f9:5f:1e:
         2b:3a:44:d3:86:a9:34:c9:76:ab:13:41:20:16:04:24:4e:de:
         81:31:57:eb:ab:2a:84:2b:a8:53:db:4c:4a:44:c7:79:cd:d2:
         6e:db:5c:ae:34:bc:a5:23:de:20:89:dc:63:5c:90:dd:b2:36:
         2a:bb:c3:f7:63:1f:63:1e:a8:96:7c:f6:04:51:09:bb:49:bb:
         f1:1d:3d:60:80:cb:ff:a6:0b:7a:19:a9:3c:57:e2:94:fd:8e:
         c6:2d:d6:be:f5:86:5d:15:fc:a5:64:b9:ad:75:05:16:c2:13:
         fa:25:ec:86:f1:a4:f1:91:04:d6:26:33:19:df:14:20:f4:6d:
         bb:31:aa:4a:8a:d7:d7:69:1e:21:ea:b2:1e:45:f7:57:72:3e:
         5e:3e:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:32:37 2026 by rpki-client