Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ad91d305-1aea-3fc6-af03-bcc976c10995.roa
File:                     ad91d305-1aea-3fc6-af03-bcc976c10995.roa (raw, json)
Hash identifier:          48MUWL/QQU+T5jA2NTzcQqiK96JELhPF5KnCQjhNimA=
Subject key identifier:   F5:A4:CC:80:4D:5F:0D:68:82:65:31:2A:B1:13:02:E2:4D:1D:C9:D2
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584D75D5226CD865E42334004600
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ad91d305-1aea-3fc6-af03-bcc976c10995.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     40818
IP address blocks:        23.131.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:22:6c:d8:65:e4:23:34:00:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=3d289e33-c9d6-4b09-8786-05cf861ba207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:7f:ea:9e:b8:11:2c:57:36:e2:34:49:e5:
                    cd:89:f8:53:35:fa:44:66:14:a8:32:21:15:95:85:
                    ce:5d:dd:55:d9:4c:79:39:9e:95:47:26:af:5e:55:
                    10:7a:65:7c:5b:86:2b:b4:75:c5:43:c8:f4:1d:c3:
                    41:c2:48:8f:52:32:3a:43:23:0e:11:14:1b:e6:7d:
                    54:15:f3:61:58:79:0e:00:4e:32:51:94:20:df:6b:
                    a4:02:8d:24:aa:4a:44:2d:0d:ff:37:5c:c0:50:ae:
                    c4:0b:e5:32:4f:87:6c:63:2a:c5:34:1c:ee:69:27:
                    35:6e:5d:b5:89:01:d9:3e:94:7b:fa:a0:d4:c5:19:
                    38:61:87:9e:b6:6e:8d:fa:62:bc:68:14:6b:f7:9f:
                    18:f4:a5:63:25:47:a5:14:2a:8c:02:a3:d5:f4:b5:
                    6f:40:3a:33:a6:f2:76:26:b5:6d:cd:c2:6e:2d:07:
                    e0:65:81:1d:37:75:cd:a2:a2:2d:53:e2:47:52:4f:
                    5c:25:db:54:ed:7f:4c:9f:fd:64:d7:12:2d:d2:37:
                    5f:67:89:7f:f3:31:fe:4e:32:cc:63:19:c9:62:66:
                    e3:09:f3:13:01:e7:dd:49:cc:4a:c6:ca:09:8f:03:
                    35:ab:af:cd:cd:f5:4e:8b:b0:9c:c4:3f:8e:2a:cd:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:CC:80:4D:5F:0D:68:82:65:31:2A:B1:13:02:E2:4D:1D:C9:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ad91d305-1aea-3fc6-af03-bcc976c10995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:77:a4:47:75:b4:a3:97:9f:6b:2f:60:3a:38:d1:80:e1:
         0a:92:d6:5c:75:1e:ca:9d:c2:43:43:8e:15:c6:1c:fb:d4:73:
         11:82:dd:c5:bc:35:75:35:65:d3:96:cc:9a:e7:f0:81:57:fd:
         12:00:c0:fc:db:04:38:7f:f4:2d:4f:ff:4d:12:fd:1c:4b:e6:
         38:81:b6:7f:f8:ca:bf:ca:47:e3:f6:91:a7:64:fb:ee:23:25:
         3f:a1:40:0b:c4:9c:1e:71:15:e7:96:3c:33:10:e6:96:fb:fd:
         34:37:29:7c:9b:92:d6:93:79:3d:5a:66:02:8b:9d:d0:90:2a:
         a5:f4:77:7e:dc:e5:70:98:7e:c8:46:00:79:06:31:26:e3:54:
         2a:43:03:8b:d5:7b:1f:f5:71:34:37:ad:e2:c5:31:65:b6:62:
         43:19:a4:ae:b3:6a:52:51:d9:86:78:ff:57:c7:35:63:26:f6:
         c0:ac:f4:53:12:f5:d5:f3:af:c9:2e:90:c4:15:5f:2c:44:9e:
         61:92:53:cc:a4:de:e1:67:19:00:6e:0d:06:c3:33:a3:02:35:
         30:56:9d:77:10:78:5c:2c:04:01:a6:48:e0:e9:02:4d:c7:84:
         bb:f3:96:74:a3:6f:18:2e:80:ec:30:13:8d:34:d3:9b:f3:6a:
         91:d5:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:36:21 2026 by rpki-client