Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa
File:                     6f898a92-27c5-34f5-ab5d-94a7194d0508.roa (raw, json)
Hash identifier:          iPO+rwkdndgIEY9bScnarRl6R3QjgzLjAdyxA8p4+m0=
Subject key identifier:   DC:23:89:0D:33:B8:59:FA:EA:0B:44:11:BA:D6:33:7E:E0:20:0C:15
Certificate issuer:       /CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94
Certificate serial:       010D0C9F4328584E360182EBC49C2F288E514F00
Authority key identifier: 06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     10753
IP address blocks:        23.132.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:82:eb:c4:9c:2f:28:8e:51:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=510da58d-e762-47da-9d71-0211ba23d67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:aa:8e:0a:64:31:a9:d4:5d:87:da:bb:b0:
                    1e:29:4f:80:5b:dd:e5:5c:2a:17:46:07:80:d4:c3:
                    88:1c:7a:71:bc:18:ec:f1:0e:7a:20:77:6d:57:b2:
                    d7:a4:34:18:5c:9e:81:5a:36:7a:a4:87:b1:d8:30:
                    3c:d6:81:cd:68:23:04:11:41:33:d0:7e:cd:ca:87:
                    eb:5d:74:6b:b3:ef:8f:99:76:39:d0:da:10:d0:19:
                    7e:cd:55:ef:81:bf:cc:3b:14:76:d7:b5:b8:b3:de:
                    ec:d4:94:f3:c9:39:da:63:ff:27:6b:ef:f1:44:d9:
                    c1:74:d7:70:88:0a:f8:bc:3a:22:6b:c9:ff:58:5e:
                    91:21:14:68:f6:cb:a4:f0:22:38:27:14:12:c3:4a:
                    7d:44:59:8c:73:ab:7b:7e:66:cf:6e:99:47:d4:ec:
                    74:2f:cf:e2:18:ae:33:83:3a:8e:ca:c6:0b:57:41:
                    2f:20:b1:d8:b9:1a:52:b8:ac:73:ee:22:b5:a1:bc:
                    8f:a1:0c:77:11:b0:c5:91:3c:24:46:12:48:04:3b:
                    0b:0c:db:c6:60:92:f1:11:16:aa:fe:f5:d3:3c:37:
                    e3:02:32:b0:d6:27:8c:b1:3c:8b:3c:3b:da:42:49:
                    7e:77:97:25:ac:04:ea:ab:5e:9d:ce:87:36:9f:43:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:23:89:0D:33:B8:59:FA:EA:0B:44:11:BA:D6:33:7E:E0:20:0C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl

            X509v3 Authority Key Identifier:
                keyid:06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:91:3c:6a:ff:e3:5c:94:79:cf:d2:1a:ec:92:82:d2:66:
         1c:06:4b:e3:0e:80:4d:29:bc:4b:1d:f4:19:75:3f:68:cf:85:
         1b:41:cb:95:80:06:e3:c0:84:17:69:cb:c4:1b:50:38:65:9b:
         fa:cc:7a:10:fa:b4:eb:8d:47:6a:73:f1:1a:74:2c:95:9d:a7:
         bc:b6:23:52:31:a2:72:a6:a5:3b:89:de:85:68:37:46:e8:e1:
         29:02:fb:d5:44:21:73:de:ff:c8:08:09:f8:cf:60:b1:b6:c8:
         09:d6:27:4b:01:d2:12:fd:e9:6e:db:a1:72:65:bc:ed:cf:90:
         cf:d7:a8:a9:d3:01:64:66:c7:da:d3:e7:68:12:83:c4:45:3a:
         8d:c3:cc:57:aa:b4:ea:7f:91:73:52:f8:d3:da:05:10:5e:55:
         ec:2a:ab:a2:32:9b:e2:ac:48:15:d5:c5:2b:66:8c:41:43:34:
         b3:1d:c0:2b:64:a6:be:29:61:2e:46:1e:66:e4:c1:95:12:47:
         3f:24:e0:ed:a5:50:25:ba:9c:e3:b2:3e:8c:09:9d:44:b6:38:
         7b:53:ed:37:0e:db:7d:5c:ec:1d:70:b1:2a:02:57:8d:d7:c0:
         91:f2:eb:87:e7:c7:5b:d9:58:32:fd:d6:02:8b:23:4f:4c:c5:
         7b:06:23:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 15:35:35 2026 by rpki-client