Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
File:                     599d3743-7271-3612-ac7e-b695738f62c4.roa (raw, json)
Hash identifier:          v9Kxnr/548EXGrrep3oVx56I9s4xTBsyboNrjLccofk=
Subject key identifier:   FA:9F:FF:4A:F1:3C:F0:6F:78:14:1B:BC:92:25:86:75:18:42:29:CD
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584DEDE09DAA6BA2FB3CED511DC0
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     44486
IP address blocks:        23.227.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:9d:aa:6b:a2:fb:3c:ed:51:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=d9d87bc7-a60f-4b22-b0b4-a2244446de00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:40:03:71:8e:b7:4a:33:c2:30:12:3f:2b:
                    10:61:7c:8c:b2:d3:ec:85:56:aa:57:ff:78:15:59:
                    5b:a0:04:3d:4b:7c:a7:67:c0:c6:69:2c:79:bf:34:
                    ce:c8:bd:e4:99:00:cb:f7:69:35:cd:4f:38:ce:1b:
                    e7:37:ba:35:71:d4:66:bb:56:9b:8d:20:12:a4:a6:
                    a9:cd:ca:b4:5e:df:0f:76:2e:e6:14:a7:c5:8f:6c:
                    9e:3a:ed:03:08:37:e1:df:72:f5:32:32:e8:da:cf:
                    1b:8f:0d:7f:a1:11:5d:8e:d4:4a:26:35:48:49:d0:
                    67:da:c9:ee:1c:89:b8:db:60:a9:83:98:58:ea:95:
                    dd:4a:f4:f0:04:c9:ec:70:54:c0:64:93:4a:1a:86:
                    24:d6:34:44:68:33:d8:bb:d6:ef:bb:3b:d4:d6:6f:
                    1c:71:ed:65:8a:8e:0a:44:9b:6e:23:5b:ee:b7:ad:
                    91:f5:b6:3c:bf:00:c4:01:ba:49:0b:f1:fb:4c:18:
                    41:3b:7d:f8:64:dd:7d:ea:a4:b5:0b:b9:26:06:d4:
                    fb:19:32:60:dd:49:9a:2c:09:52:57:1a:9a:e9:b0:
                    66:da:ca:af:ab:71:75:d8:91:d8:c9:8a:31:d7:55:
                    3c:12:55:1b:7f:92:b3:20:67:a1:cb:7e:9c:84:d2:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9F:FF:4A:F1:3C:F0:6F:78:14:1B:BC:92:25:86:75:18:42:29:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:43:9c:9d:3c:d8:e1:be:4e:5c:5c:60:61:40:bb:be:eb:
         25:bb:ae:4d:ec:35:16:90:7a:ca:22:c0:65:60:6b:c4:59:86:
         73:a9:a6:40:b6:47:32:c9:7b:75:f1:7b:e0:44:98:c6:72:78:
         c2:26:c0:cf:63:f5:35:3d:0b:b4:d8:cc:08:d0:8e:41:e3:00:
         00:81:88:69:21:c4:7e:a8:cd:33:0c:52:4c:91:d0:d5:fb:b5:
         b3:b7:6b:59:2c:aa:92:34:a0:14:ca:6b:20:47:9d:4e:48:4e:
         c3:59:ae:41:14:bd:03:34:2f:1f:bf:49:c1:0d:e6:4d:e3:85:
         21:d7:81:66:cf:cf:e4:a3:de:ad:b6:0a:ab:a0:82:25:c6:38:
         d9:e0:bf:50:6a:87:f3:ec:2b:94:1c:09:1b:6b:6b:c5:36:85:
         67:e0:5d:68:dc:98:b6:04:53:96:67:e6:9c:77:69:c3:9e:d0:
         6f:5b:74:0f:2c:23:1e:8d:20:44:0c:08:0d:7d:fc:cf:99:ff:
         ac:53:58:f4:c6:3b:fe:0e:00:d8:a3:66:cc:57:c3:45:6d:83:
         7e:74:2d:6e:4b:86:3f:b6:31:9b:a2:8e:3e:24:92:36:bf:ce:
         5b:7b:9d:b4:21:64:7e:6e:4c:15:3a:75:a0:68:ee:fc:3a:f8:
         36:61:db:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:22 2026 by rpki-client