Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2/210fba83-db44-38c3-a662-ce4de3f574f6.roa
File:                     210fba83-db44-38c3-a662-ce4de3f574f6.roa (raw, json)
Hash identifier:          OWf7sJl/5S/yGXWCaRgrdNKpoFNBac1Z7zmwr9CufXQ=
Subject key identifier:   C7:F0:B2:28:E5:34:9B:BE:BE:55:03:2C:60:02:10:99:D2:A1:B8:82
Certificate issuer:       /CN=c91f79a6-da67-44aa-9b33-b20eb95073f2
Certificate serial:       010D0C9F4328584DD5B208E888CF4306AB5F1C80
Authority key identifier: 5A:8D:FA:BF:92:70:8E:40:0A:3E:1B:07:BF:9C:9D:C3:B6:6D:5C:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2/210fba83-db44-38c3-a662-ce4de3f574f6.roa
Signing time:             Thu 14 May 2026 21:07:28 +0000
ROA not before:           Thu 14 May 2026 21:07:28 +0000
ROA not after:            Wed 12 Aug 2026 21:07:28 +0000
asID:                     402512
IP address blocks:        23.158.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2/c91f79a6-da67-44aa-9b33-b20eb95073f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2/c91f79a6-da67-44aa-9b33-b20eb95073f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d5:b2:08:e8:88:cf:43:06:ab:5f:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91f79a6-da67-44aa-9b33-b20eb95073f2
        Validity
            Not Before: May 14 21:07:28 2026 GMT
            Not After : Aug 12 21:07:28 2026 GMT
        Subject: CN=ca608247-cce5-4845-94bd-688592b2a6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:4c:e4:c2:31:85:8f:60:67:0d:d3:dc:a5:
                    80:6b:68:35:da:1e:f6:5b:b4:2d:1f:31:93:8a:80:
                    93:39:93:49:e0:03:0e:1f:2c:74:30:a3:4a:24:39:
                    99:d7:ca:ae:52:c8:90:f0:1f:d9:6a:10:d2:5c:8f:
                    96:99:da:82:4c:7c:54:43:52:1f:c0:4f:39:86:04:
                    ca:ef:c4:0d:d2:b7:2e:4a:af:55:52:27:00:ee:13:
                    5c:77:6c:11:0c:57:f8:64:1b:3a:4d:ac:17:a5:9d:
                    cd:4a:98:58:da:3b:4b:01:5d:f7:ab:e2:19:4f:9f:
                    23:fe:79:c1:0e:92:39:f8:95:3c:ff:39:20:9d:46:
                    7e:64:3b:d9:21:bc:67:8c:86:aa:47:bb:68:d1:db:
                    7a:33:73:34:03:e6:41:4b:46:92:23:2a:15:37:21:
                    a2:91:86:fc:6a:86:51:a6:fa:6b:d2:32:95:35:41:
                    08:b4:10:97:f9:40:32:0c:1c:c5:87:e8:9d:e9:9b:
                    73:81:45:73:98:47:ba:7b:72:08:ce:5b:5a:ac:dd:
                    df:30:d1:5f:55:16:d3:7b:04:bd:d9:5f:fd:21:96:
                    b4:08:29:25:97:0d:3a:ca:26:b2:e9:e8:b0:ce:8a:
                    18:ab:bc:3d:45:ee:af:7b:ae:9c:92:3f:35:f0:83:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:B2:28:E5:34:9B:BE:BE:55:03:2C:60:02:10:99:D2:A1:B8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2/210fba83-db44-38c3-a662-ce4de3f574f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2/c91f79a6-da67-44aa-9b33-b20eb95073f2.crl

            X509v3 Authority Key Identifier:
                keyid:5A:8D:FA:BF:92:70:8E:40:0A:3E:1B:07:BF:9C:9D:C3:B6:6D:5C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c91f79a6-da67-44aa-9b33-b20eb95073f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:2e:16:35:17:c4:92:5c:0e:f9:d4:c6:28:3d:05:83:22:
         b9:85:5d:27:ff:f5:14:cc:15:65:2e:a8:dd:c2:38:f1:60:b3:
         52:75:83:13:8d:16:80:26:74:a8:a6:95:9f:a2:65:ba:4d:c1:
         f4:a9:ca:7a:72:ce:3c:c1:9e:75:dd:7d:ab:21:10:d8:9d:99:
         ae:f1:b2:0b:18:5c:2e:74:ae:99:6e:1a:bd:58:b9:bc:9e:1e:
         d7:d5:68:35:46:e2:01:02:9c:06:f5:9d:8d:9f:9b:40:57:aa:
         f1:29:b0:ed:1b:cd:9b:c0:66:93:bf:c8:cb:bf:54:3e:88:34:
         e2:4e:5b:6c:22:58:18:bd:2e:7d:ba:de:93:84:29:1f:a7:93:
         74:13:3a:ac:f3:75:1d:d6:b1:d4:0a:59:45:e5:f2:3e:90:8f:
         da:22:f2:42:f6:56:1b:82:31:03:18:0a:6a:e8:d6:78:74:56:
         f4:0b:1c:1a:c5:ac:f3:0e:5d:fe:5b:5a:4a:07:b1:8c:d5:03:
         4b:c0:e7:47:c8:bb:ad:07:3d:5a:3b:2f:fb:4d:61:ad:f6:14:
         bd:08:bd:1d:17:9d:1f:56:4e:58:01:af:ef:f4:66:9d:00:4b:
         93:ad:83:5a:fd:ec:c8:fe:2d:3f:42:0e:9b:17:1c:73:c7:0f:
         ab:a7:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:24 2026 by rpki-client