Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa
File:                     eb082195-7fc4-3717-9a4e-cf41f2a75416.roa (raw, json)
Hash identifier:          0F2RUsJXfETzYrMdupvxvgp6+e3p+cFV1cgIOlM1bZw=
Subject key identifier:   CB:37:09:32:49:FD:3C:CD:CB:4E:57:B2:C2:C4:D8:34:5E:22:18:65
Certificate issuer:       /CN=ce1f0349-3090-47e8-8ea1-4edcc2e570d4
Certificate serial:       010D0C9F4328584E48247A1502DFDB1367411480
Authority key identifier: 69:E3:30:C8:95:23:47:F8:5E:91:39:8A:77:5A:38:6D:1E:FA:B2:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     63023
IP address blocks:        23.138.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7a:15:02:df:db:13:67:41:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1f0349-3090-47e8-8ea1-4edcc2e570d4
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=84050d8c-4f58-48ea-87af-e2006d150cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:45:e7:7a:4c:db:d5:f8:d8:77:47:52:a4:
                    f6:64:f0:0d:96:14:35:75:2b:4c:68:f6:8d:d6:96:
                    9c:eb:7f:d1:09:59:3b:0f:11:73:96:f4:52:f2:46:
                    16:f1:67:21:df:c2:d0:97:b5:af:7a:3f:a4:e7:9b:
                    62:63:b8:8b:3d:a0:da:1e:27:01:84:b4:ba:e3:de:
                    0b:36:28:7e:83:0b:eb:c0:2e:cd:30:ee:eb:9a:ac:
                    f1:83:3c:1f:8b:c6:9e:de:9f:5d:a6:b4:e5:6a:3a:
                    c1:bb:26:35:18:bc:4d:0b:4d:2a:ba:6b:63:c8:20:
                    a1:e1:20:c0:33:07:e2:eb:b4:e2:96:49:65:2f:6c:
                    37:06:29:c3:6a:3f:07:b0:ab:5b:bf:35:d2:f5:a9:
                    b2:04:b6:1e:ad:bd:d7:a1:a0:b2:92:99:51:81:c9:
                    43:1f:62:4d:8d:e4:be:1f:65:af:5b:b7:4b:bc:24:
                    20:61:50:64:a4:f1:7f:ed:2f:89:5d:9f:ec:fb:0d:
                    76:49:79:90:2f:e1:3e:51:b9:25:c0:73:59:f7:e7:
                    a1:0c:8f:56:e0:b1:66:f9:e5:c3:3e:5e:e9:da:ff:
                    c3:9a:2d:06:3f:9d:df:4f:8b:98:19:33:c6:c5:43:
                    7c:d3:71:1b:62:3d:31:ee:17:c6:b3:77:34:f3:c7:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:09:32:49:FD:3C:CD:CB:4E:57:B2:C2:C4:D8:34:5E:22:18:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.crl

            X509v3 Authority Key Identifier:
                keyid:69:E3:30:C8:95:23:47:F8:5E:91:39:8A:77:5A:38:6D:1E:FA:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e8:16:79:25:1e:3e:a5:db:6b:8c:ac:39:96:b8:17:f3:2a:
         95:89:77:4e:98:93:69:6a:0c:b0:bd:f7:a7:a1:5e:2e:aa:d7:
         c7:33:b4:54:5b:c4:26:98:b5:d2:c5:80:fc:56:41:25:79:96:
         b7:3a:1a:ab:e6:e2:ee:e6:c6:3c:27:5b:e5:24:18:6b:7d:57:
         72:f4:d0:9a:07:a9:fc:0d:19:2e:81:d1:d4:82:d1:3b:82:d5:
         e3:ab:b7:69:6c:ba:53:dd:1d:ed:83:0f:c3:c7:4c:47:33:52:
         72:85:1c:77:df:36:86:8a:05:ca:a6:65:fc:27:89:2f:4f:f3:
         52:6f:40:8c:78:69:bd:95:85:90:7b:77:2c:b7:d5:2a:4c:1e:
         94:ee:a4:e5:90:c0:67:63:88:36:c3:24:90:13:eb:2a:25:43:
         64:52:1c:79:6f:6f:36:38:bd:9f:e2:fe:ed:91:3d:65:ef:85:
         28:a1:1a:7a:85:1b:0b:4a:e3:6d:fa:1a:3c:a5:e5:b3:a2:57:
         a0:e0:ce:b7:f8:58:b9:3f:d4:14:08:18:7f:e2:12:7e:13:a2:
         71:8a:63:7a:55:93:13:17:5c:18:80:fc:7b:52:64:b2:6b:2e:
         e0:7c:31:0b:da:b4:9e:44:eb:31:1b:36:a8:47:a4:49:88:f3:
         89:8b:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:22:38 2026 by rpki-client