Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/d3870104-ecd4-34c3-bf3b-4835fca0ca83.roa
File:                     d3870104-ecd4-34c3-bf3b-4835fca0ca83.roa (raw, json)
Hash identifier:          TR+9cfYtSu0IYY8+qxo44rGY3C2pwrGdXklDE/Rciyc=
Subject key identifier:   23:56:2B:A6:3E:3E:D1:2F:41:8A:1E:23:AD:3F:B7:95:16:80:32:B2
Certificate issuer:       /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214
Certificate serial:       010D0C9F4328584D5884E6D9EFF7F4C58E96CC00
Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/d3870104-ecd4-34c3-bf3b-4835fca0ca83.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     9304
IP address blocks:        23.145.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e6:d9:ef:f7:f4:c5:8e:96:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=0f24756a-ac4b-40bc-88e8-650ef303dbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:a9:b7:79:b3:33:66:86:76:42:d0:af:05:
                    33:85:a8:d7:ee:80:44:c0:bd:e8:d4:e2:b2:24:44:
                    52:d3:df:60:98:3b:52:a6:98:ff:f7:74:a3:88:83:
                    28:d3:3b:ac:79:3a:16:c2:71:50:5a:e1:f3:1f:38:
                    5a:40:82:64:42:71:8c:85:87:7a:bb:c5:cc:2b:1c:
                    5a:64:a9:63:43:1e:c3:98:cc:45:c9:1e:1d:cc:43:
                    34:ef:c4:01:95:bf:cf:45:56:f0:12:7e:b7:5f:59:
                    62:48:63:22:e9:db:81:04:26:af:f0:3a:4d:6e:ca:
                    61:bf:3e:38:1e:68:0c:07:4e:25:9c:e0:d6:60:0b:
                    d9:8b:ca:f6:2f:cb:a6:71:e8:75:ec:78:e7:93:c6:
                    3a:64:f6:8a:ad:e7:9f:c3:f2:bb:58:c5:af:56:d3:
                    40:5d:02:11:55:74:00:e1:e6:22:86:ab:8f:25:0c:
                    f4:c2:bc:0e:79:4c:12:32:66:6a:e0:d8:57:5d:55:
                    a1:ce:5d:cc:8d:2c:9e:10:64:37:2a:0c:a1:34:aa:
                    06:77:1e:d5:c4:58:d2:a0:6a:29:b7:dd:4a:07:0b:
                    b6:b2:d0:e0:7e:d0:cd:d9:80:9c:25:bf:eb:90:a0:
                    6c:7a:e3:5b:da:75:19:23:ff:c5:5b:5b:d9:3c:09:
                    58:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:56:2B:A6:3E:3E:D1:2F:41:8A:1E:23:AD:3F:B7:95:16:80:32:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/d3870104-ecd4-34c3-bf3b-4835fca0ca83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl

            X509v3 Authority Key Identifier:
                keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c6:a8:59:78:18:f1:2b:55:8f:db:70:32:26:56:ad:91:c9:
         fe:2c:3a:21:78:c2:30:8c:65:5f:06:67:b2:62:09:7e:17:ee:
         20:30:ae:83:cb:75:2c:af:57:08:1f:45:ac:45:15:e2:4c:8a:
         b6:cd:89:ca:5e:19:78:04:aa:8b:13:8d:0b:8a:09:0f:3b:50:
         47:fa:c6:89:e3:cf:3f:7b:27:97:fc:54:a9:d0:3c:bd:b9:c8:
         71:40:0b:a7:be:99:03:45:17:d6:df:50:d4:96:19:d8:86:b0:
         12:2c:0f:1c:8d:58:b5:9d:f2:ed:2a:b3:89:96:2d:e8:e2:3e:
         96:9a:05:91:76:21:b8:d5:d4:fe:f1:67:11:5a:62:7d:07:66:
         0e:d0:3b:ff:66:b8:86:b0:08:d3:34:fd:f1:88:d5:fb:22:15:
         8b:6b:91:d3:39:b2:f7:bc:6a:74:c8:fc:77:1d:da:73:e7:12:
         e8:de:f8:29:6c:8c:30:b3:07:23:22:76:2f:29:ad:7c:6f:a0:
         c7:07:5e:6d:29:cc:65:4b:cd:3a:3f:68:15:86:f7:81:ce:63:
         f8:0f:03:1f:ce:5d:fa:87:d6:f0:b1:95:9c:fd:53:1f:88:ac:
         b5:45:b1:9e:63:dd:07:86:b6:74:27:ce:4d:6b:15:92:83:09:
         f7:04:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:34:09 2026 by rpki-client