Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/e4358070-5aee-3f80-8375-e866a8d8358b.roa
File:                     e4358070-5aee-3f80-8375-e866a8d8358b.roa (raw, json)
Hash identifier:          g9dBeMmbjI4RhfrVojwOtVZEroRzHFvy8wrb9YoeioM=
Subject key identifier:   8C:81:8B:1D:06:3A:CD:98:58:E3:B5:9D:8B:BE:29:81:6C:9C:D2:1C
Certificate issuer:       /CN=8efd04a1-8809-4ec9-958e-8c9da694afe4
Certificate serial:       010D0C9F4328584E43F4730251005441CD17D480
Authority key identifier: DD:9C:43:3C:3E:81:AD:C0:EF:78:4F:E7:E9:E5:CE:44:57:75:6F:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/e4358070-5aee-3f80-8375-e866a8d8358b.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     396067
IP address blocks:        168.151.230.0/23 maxlen: 23
                          2602:fa12::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/8efd04a1-8809-4ec9-958e-8c9da694afe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/8efd04a1-8809-4ec9-958e-8c9da694afe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:73:02:51:00:54:41:cd:17:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efd04a1-8809-4ec9-958e-8c9da694afe4
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=eb47e737-874b-407d-9a33-b2930ce5cbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:32:b8:a9:8a:68:c1:a9:86:11:3b:11:21:
                    e5:92:19:f8:c4:35:4b:a4:fd:1f:aa:5b:ba:60:13:
                    4d:21:90:e0:c8:24:9f:bd:df:99:61:db:eb:45:11:
                    3b:dc:8b:41:3f:cd:2e:2e:06:45:20:04:f8:a2:89:
                    cd:c0:f8:64:91:c4:eb:d8:1d:d0:eb:04:e1:f2:0d:
                    b0:cb:1b:f4:d4:aa:25:57:7d:e4:67:3d:1f:a1:93:
                    c0:f4:6e:31:95:6c:21:13:22:7b:e3:f0:e2:d7:0a:
                    f0:07:9a:92:af:fc:3a:ce:bc:40:eb:57:52:09:6b:
                    b7:ab:ea:12:22:0b:79:38:db:76:f7:65:cf:50:61:
                    eb:e1:a6:5f:3b:cf:6a:a3:63:9a:7e:22:97:a5:24:
                    a0:ee:8d:77:1b:ea:d4:db:60:f7:14:69:c2:a3:d9:
                    ef:84:ec:b2:7c:6d:fc:fc:f8:6b:12:56:3a:5e:8b:
                    16:73:46:83:5c:07:3f:ae:3f:f9:2b:53:02:17:42:
                    73:00:a4:65:5c:a5:df:b2:d8:bd:2b:32:56:13:40:
                    0f:b0:38:2d:70:e7:c1:23:e3:7e:7a:74:6f:44:5e:
                    d5:ee:8f:a9:ad:ae:5c:d1:ee:7b:63:b7:15:f7:4c:
                    86:eb:3e:3a:3e:f1:f2:d4:7e:b6:06:57:d7:d3:cf:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:81:8B:1D:06:3A:CD:98:58:E3:B5:9D:8B:BE:29:81:6C:9C:D2:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/e4358070-5aee-3f80-8375-e866a8d8358b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4/8efd04a1-8809-4ec9-958e-8c9da694afe4.crl

            X509v3 Authority Key Identifier:
                keyid:DD:9C:43:3C:3E:81:AD:C0:EF:78:4F:E7:E9:E5:CE:44:57:75:6F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8efd04a1-8809-4ec9-958e-8c9da694afe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.230.0/23
                IPv6:
                  2602:fa12::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:dd:13:b0:06:08:82:0d:d4:c1:25:05:35:4c:a3:55:8f:
         07:79:00:d9:63:15:68:cf:6a:ab:2b:de:c1:57:81:ba:47:a1:
         5c:93:a0:aa:8e:32:07:e5:35:26:65:19:95:10:30:02:34:69:
         55:1b:21:ff:a3:60:f4:52:eb:41:e0:dd:75:6a:2d:04:93:3f:
         6a:c8:dd:68:8c:5b:e0:05:63:19:9e:1e:ee:c2:e9:93:32:fe:
         b8:c9:30:d0:cf:f3:54:f0:8f:00:a8:a3:1a:40:59:d8:a4:f0:
         12:50:b6:f4:e9:a7:92:fb:f3:33:92:15:2b:6b:20:f4:3a:fc:
         50:19:d4:9d:53:db:dc:e9:d5:2b:96:a3:05:64:6f:7a:f2:1b:
         ee:36:07:c7:8a:c5:39:9e:18:6e:e3:ea:90:c1:b7:ca:d7:44:
         0d:5c:8b:f0:a6:b7:e9:ce:60:fb:73:34:ee:7f:3f:40:f2:2d:
         d6:e5:94:4e:d0:2b:b4:54:eb:e0:10:d4:10:3e:4a:9a:5b:ff:
         45:f1:fc:e2:40:7b:91:d0:1c:8e:74:db:3b:cb:00:ae:26:41:
         f5:bb:0d:4d:48:17:dc:e0:ca:18:73:91:a5:e1:37:d0:8e:a9:
         6b:37:e7:6d:b0:94:46:c6:41:d8:e2:02:2a:2c:d5:7f:7c:39:
         77:65:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:00 2026 by rpki-client