Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/61bab1a3-cf67-3b35-9f90-fbe6ac4163ff.roa
File:                     61bab1a3-cf67-3b35-9f90-fbe6ac4163ff.roa (raw, json)
Hash identifier:          ESqc/ovwFDoo9ebZdziiwCePUeeRUstn0u4/dpKUBJI=
Subject key identifier:   5E:60:1D:9F:AD:CF:07:C6:48:6A:84:9B:DD:37:0A:53:F3:32:BA:BA
Certificate issuer:       /CN=6e3cf28f-de99-4855-96c7-0a24bba23b51
Certificate serial:       010D0C9F4328584E5BAF42D3A1BA00A4C09CC600
Authority key identifier: D3:4A:0E:85:6F:5E:56:00:DF:F6:2F:E8:8B:D5:84:44:14:4A:0B:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/61bab1a3-cf67-3b35-9f90-fbe6ac4163ff.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     215051
IP address blocks:        23.191.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/6e3cf28f-de99-4855-96c7-0a24bba23b51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/6e3cf28f-de99-4855-96c7-0a24bba23b51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:42:d3:a1:ba:00:a4:c0:9c:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3cf28f-de99-4855-96c7-0a24bba23b51
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=000bf719-9916-40e5-8650-97032742449a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:0a:0d:95:fb:82:ca:47:fe:aa:bb:26:d4:
                    4a:37:ff:b5:dd:a6:02:df:0b:53:68:1d:75:05:59:
                    3c:50:88:2e:84:47:de:c6:ba:a8:34:67:10:f7:53:
                    70:68:e3:48:e8:a7:10:8e:c9:ef:2b:6e:d5:db:14:
                    d1:a8:02:67:d9:a5:53:d9:9a:af:15:fa:f9:09:4b:
                    92:71:4f:9d:29:9a:d1:14:95:c8:a0:84:9b:ff:9a:
                    09:3a:c9:d0:b7:9f:ab:ea:52:c8:9c:ba:d2:86:a0:
                    0f:a4:32:2e:3f:d9:7d:cf:07:46:b3:8e:e9:7a:0f:
                    43:85:19:27:33:73:72:00:87:a3:4f:e0:b0:d1:a6:
                    73:f7:29:ac:a7:9e:a3:2b:86:65:07:15:72:4e:3a:
                    a0:4c:ac:9d:44:fb:df:9b:a8:a3:68:73:fb:cf:47:
                    1c:19:eb:27:e5:72:d1:46:d2:b4:56:f8:41:27:a5:
                    fa:2e:3e:be:27:72:f2:d4:20:63:c2:00:e4:1b:83:
                    3e:7d:aa:ba:22:6d:2d:a6:ba:ac:eb:f0:0a:41:8e:
                    72:da:41:9a:20:da:9b:6a:55:48:0a:18:17:48:db:
                    08:e7:4f:e2:83:74:c6:ab:56:94:35:3d:f5:ac:07:
                    1f:3c:63:b9:d5:10:ca:c5:fa:39:29:42:6d:d2:bc:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:60:1D:9F:AD:CF:07:C6:48:6A:84:9B:DD:37:0A:53:F3:32:BA:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/61bab1a3-cf67-3b35-9f90-fbe6ac4163ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/6e3cf28f-de99-4855-96c7-0a24bba23b51.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:0E:85:6F:5E:56:00:DF:F6:2F:E8:8B:D5:84:44:14:4A:0B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e6:0d:92:db:43:0d:9b:d9:69:fe:7b:f7:e0:d1:9e:8b:a2:
         b2:87:4e:a6:4b:f2:5d:58:30:06:12:29:b8:16:22:6f:d4:97:
         9f:e8:04:c7:6e:b4:25:ad:3e:36:bb:90:b5:0b:b7:54:76:c3:
         30:b0:bc:58:da:5a:ce:a6:cb:df:2a:96:dd:22:b1:47:bd:d1:
         73:54:0c:f0:c9:d2:14:14:4a:29:53:c5:46:4e:ae:b7:ce:21:
         e3:60:4b:fb:13:01:28:10:b0:19:71:d9:95:1d:0b:e6:9d:7a:
         87:6a:30:e2:6c:12:39:cf:91:65:69:c8:3a:dd:44:01:9f:71:
         18:bf:c3:e4:9f:74:85:a2:44:5c:96:8b:4a:ce:6b:f9:79:11:
         6a:bc:fa:e2:29:d4:50:d5:34:08:b7:1a:82:a0:a6:ce:9f:99:
         6b:cf:4f:4b:28:85:a8:0c:90:b9:5c:43:09:c1:0a:e2:ac:64:
         54:92:50:7c:62:59:ce:08:83:68:13:45:40:48:e8:70:02:22:
         b6:e6:6c:69:8e:dd:3f:f1:c8:8f:99:40:cb:3f:56:c4:ab:bb:
         43:cf:9b:6b:c2:c6:28:f2:23:b0:5a:82:ce:ed:61:02:8f:ef:
         ec:79:06:20:6b:3d:84:be:20:5b:76:f9:6c:17:9b:d6:da:86:
         8f:c6:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:49:51 2026 by rpki-client