Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/020bd197-92f7-34a7-8834-cf913b23a02f.roa
File:                     020bd197-92f7-34a7-8834-cf913b23a02f.roa (raw, json)
Hash identifier:          +TDoKgg/0GyjVvF11kJJVxcAzzxTkJIBLR6fPCNf86k=
Subject key identifier:   D4:B7:BC:50:4A:84:8C:FC:87:94:80:0E:AD:0D:C8:63:AF:44:E7:E7
Certificate issuer:       /CN=050e47bb-bc0f-4540-9e2d-42e08982e4d3
Certificate serial:       010D0C9F4328584D0912626E1F09731A56B30AC0
Authority key identifier: 16:44:88:91:39:5C:8D:AD:E8:D7:18:F5:16:87:40:5C:2B:2E:8B:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/020bd197-92f7-34a7-8834-cf913b23a02f.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     7018
IP address blocks:        23.132.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/050e47bb-bc0f-4540-9e2d-42e08982e4d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/050e47bb-bc0f-4540-9e2d-42e08982e4d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:62:6e:1f:09:73:1a:56:b3:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e47bb-bc0f-4540-9e2d-42e08982e4d3
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=580440cd-782f-46b6-8ca3-74721c42bddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:6b:56:dc:25:51:4c:a1:db:48:ad:31:b6:
                    bc:a3:ce:5e:f4:a9:83:61:98:ba:c5:8a:76:a6:ce:
                    56:75:72:89:eb:32:33:79:4b:87:ed:27:fc:ee:09:
                    43:26:41:cf:01:66:30:fd:ec:b5:34:40:49:34:b1:
                    57:10:84:86:03:5e:d9:cb:a7:1b:bb:ef:95:bb:e4:
                    20:e7:1e:3b:c2:dd:39:21:7b:59:b1:54:14:85:87:
                    71:77:cb:c1:2a:d1:37:a0:bb:31:e1:6d:b7:1b:19:
                    13:56:2e:85:81:d7:f7:2c:7a:93:0d:cb:f4:7e:20:
                    f4:68:01:a8:13:e7:c7:42:21:d5:d3:b9:e6:a7:94:
                    98:1e:82:0e:83:bd:ec:6d:c3:82:66:2c:ed:07:5e:
                    81:84:46:6d:a1:f5:d5:9a:f6:3c:77:87:15:28:78:
                    33:4c:bd:db:0a:1f:90:94:73:8d:b5:a9:df:41:5a:
                    91:13:b1:a2:0a:93:22:25:f1:19:8a:5f:74:51:3b:
                    79:d9:37:00:82:55:dc:30:7d:a8:4e:f5:42:70:a7:
                    b5:3e:5c:7a:f0:d6:be:c5:aa:2c:76:7a:3d:62:62:
                    8a:72:b6:28:19:59:8d:9b:fb:00:0c:ab:71:5f:4c:
                    18:7a:ff:48:5f:13:85:ef:cc:9f:94:fe:cb:e2:4c:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B7:BC:50:4A:84:8C:FC:87:94:80:0E:AD:0D:C8:63:AF:44:E7:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/020bd197-92f7-34a7-8834-cf913b23a02f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3/050e47bb-bc0f-4540-9e2d-42e08982e4d3.crl

            X509v3 Authority Key Identifier:
                keyid:16:44:88:91:39:5C:8D:AD:E8:D7:18:F5:16:87:40:5C:2B:2E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/050e47bb-bc0f-4540-9e2d-42e08982e4d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:09:e1:fa:51:02:76:7c:b0:ea:ab:4e:4c:69:60:e6:b1:2f:
         29:db:8b:79:dd:13:4c:aa:b4:d4:f0:fc:bc:5f:e0:1f:81:88:
         83:49:84:e2:fd:5b:0c:95:15:fd:4b:4e:02:0c:56:e9:0b:ad:
         af:5a:e8:93:f9:76:aa:ed:54:33:ca:92:88:e3:a8:4b:b5:a8:
         c6:eb:b8:21:c1:03:52:13:4e:ef:ef:f6:c1:93:6b:b2:c4:4e:
         94:98:14:d9:76:fd:04:65:3d:f4:4f:bb:e1:56:7f:9a:ce:51:
         30:f7:a0:b4:c0:c0:70:36:7c:f6:04:fa:08:41:df:0c:91:ee:
         70:37:a8:96:c2:f6:7d:59:de:82:b1:cf:35:e4:78:c5:7d:2f:
         33:f5:6a:82:79:e0:0c:fc:89:03:89:22:be:06:d4:ed:34:72:
         61:5d:d8:22:89:9e:88:33:5f:4a:e8:56:72:29:65:22:d1:0a:
         71:ab:ed:03:fd:59:17:57:a0:80:9d:9f:56:cf:5c:b5:c9:0e:
         fe:ed:bd:e2:ca:a8:cb:fe:12:e4:91:3f:37:27:9b:64:40:cc:
         db:c3:f5:68:47:3f:51:05:fe:be:c6:53:3a:66:89:fd:e4:26:
         b4:69:be:4a:08:67:ff:ca:38:54:6a:7c:bc:26:31:5c:33:99:
         70:33:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 01:59:14 2026 by rpki-client