Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4ca70706-d458-3688-b9b2-a4a37ed39384.roa
File:                     4ca70706-d458-3688-b9b2-a4a37ed39384.roa (raw, json)
Hash identifier:          I/deDMzzw+x52Mbxur4e9gi7jwikksOPbB9eGXV35E0=
Subject key identifier:   55:51:1D:10:69:E9:FB:86:4F:0D:FF:5B:6B:4E:4E:14:4B:16:C6:52
Certificate issuer:       /CN=4965f432-2d7f-4618-aa63-bb50ab54c527
Certificate serial:       010D0C9F4328584DBC488C562B2FF35DF7A5CDE6
Authority key identifier: 83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4ca70706-d458-3688-b9b2-a4a37ed39384.roa
Signing time:             Tue 05 May 2026 18:39:43 +0000
ROA not before:           Tue 05 May 2026 18:39:43 +0000
ROA not after:            Thu 30 Jul 2026 08:45:46 +0000
asID:                     394232
IP address blocks:        23.134.32.0/24 maxlen: 24
                          2604:d040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:48:8c:56:2b:2f:f3:5d:f7:a5:cd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4965f432-2d7f-4618-aa63-bb50ab54c527
        Validity
            Not Before: May  5 18:39:43 2026 GMT
            Not After : Jul 30 08:45:46 2026 GMT
        Subject: CN=58bd2864-3566-46cc-ae7f-d12d348a5982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:a0:1a:0a:e2:57:c9:d6:03:5e:6f:23:41:
                    fb:91:12:0e:1b:f5:ba:eb:7d:d1:cd:8a:7a:49:3f:
                    98:17:81:69:95:b9:ee:0f:61:f8:83:8d:1c:46:fb:
                    6d:80:b7:13:8f:88:9d:49:30:ef:51:85:3d:3d:41:
                    16:4f:af:e4:44:37:7b:d3:85:c9:8c:33:d4:ad:c1:
                    e5:14:1c:3e:dc:bf:81:10:36:cb:95:03:07:60:da:
                    c8:0b:5d:d3:b5:37:e0:8e:a1:4c:34:b7:57:e4:4f:
                    de:47:6b:05:7f:e5:fc:f7:25:97:bf:98:94:02:db:
                    4a:e2:9a:a2:3b:e1:a9:00:10:83:1b:61:cd:91:63:
                    70:f3:45:bb:d9:1e:8e:cb:3c:d9:63:9b:1c:52:66:
                    68:81:35:d7:62:6e:c6:1c:bd:49:2e:00:c8:70:d6:
                    32:0f:2b:de:c5:1e:71:49:a2:30:c2:d7:d9:07:cf:
                    27:65:84:45:d1:b3:12:f2:3e:1e:10:b1:da:a4:8f:
                    ed:2c:8d:f4:89:e4:a8:f2:40:2f:e3:76:86:a2:5c:
                    64:9e:34:6d:71:17:5a:c0:b7:a8:d4:da:9d:13:ea:
                    e9:aa:da:23:45:3e:03:ad:e4:f9:46:41:13:46:79:
                    be:4c:a1:4f:c9:a1:3d:b7:c6:68:c0:6e:d2:c1:77:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:51:1D:10:69:E9:FB:86:4F:0D:FF:5B:6B:4E:4E:14:4B:16:C6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4ca70706-d458-3688-b9b2-a4a37ed39384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.crl

            X509v3 Authority Key Identifier:
                keyid:83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.32.0/24
                IPv6:
                  2604:d040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:65:0c:5b:61:06:a4:d8:43:e8:11:72:aa:31:ad:54:46:7e:
         2b:95:05:a9:e8:2f:98:89:57:f1:27:93:b0:f9:3d:15:1c:13:
         b4:77:aa:6f:fd:0e:74:45:d4:ca:02:9b:15:d3:4b:db:b8:62:
         10:e7:b2:c9:52:cd:0b:fa:6a:2e:42:f4:04:30:cc:7d:e3:18:
         98:fd:75:5e:9c:7c:f0:54:a3:bd:b8:f3:12:b1:37:4c:01:3f:
         41:55:d6:1d:92:42:38:e3:bc:7a:f4:25:33:bd:d4:14:f0:47:
         89:9e:c0:5e:0b:53:f2:14:10:20:52:fa:49:77:54:d8:ae:23:
         a4:3a:0c:87:d5:86:be:65:a7:43:af:29:99:bf:b5:9a:80:60:
         42:9d:1b:69:cc:1d:4c:1c:5f:70:09:f4:54:68:62:03:94:d1:
         85:92:ec:3a:45:e0:6e:a1:b8:ed:65:38:54:44:94:1d:b4:ab:
         80:4d:1b:6a:d4:db:46:b9:e5:66:94:96:d6:be:6f:50:06:07:
         f9:c4:bb:ce:05:2c:d9:90:2a:0f:31:8a:8c:df:83:d3:19:7d:
         06:b7:fb:25:de:2d:3c:18:98:bf:80:58:e7:83:fc:bc:eb:4a:
         a7:00:6f:64:97:91:f8:2b:93:0c:b0:07:d2:78:a5:22:9f:1e:
         97:c0:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 22:53:23 2026 by rpki-client