Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa
File:                     7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa (raw, json)
Hash identifier:          eJOlzaMBlm5MtIcXBDW1U0qXmerSFq7QbG67lt/qZCA=
Subject key identifier:   2D:11:18:9A:17:DF:AD:3C:80:A3:36:7A:0C:F5:29:49:DB:57:55:8E
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584DD78B1A1F289299723124E680
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     63150
IP address blocks:        23.172.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:1a:1f:28:92:99:72:31:24:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=72582c4f-9b7a-404b-89c5-6b3f1ae38471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:3e:f2:af:9a:0d:c7:69:a8:37:67:28:b6:
                    cb:a8:23:80:54:f2:3b:3d:1c:af:68:bf:36:2f:01:
                    d6:f9:2d:f2:d8:ff:04:0f:0b:49:fd:3d:4c:26:65:
                    fe:55:c6:0a:8d:bc:cb:9e:1e:2d:4b:1a:34:97:40:
                    cb:56:36:a1:3b:fd:23:3c:aa:af:54:a2:62:ee:b8:
                    41:7e:80:63:4a:fe:60:13:9d:e1:2f:30:0b:5e:20:
                    26:77:0a:0a:d2:29:2c:d8:36:bf:10:62:ad:b1:c3:
                    9c:1b:e0:40:f7:a0:09:24:ac:a5:9a:6e:38:78:2e:
                    48:ab:9c:8c:89:db:df:3f:00:74:b0:b8:98:86:d2:
                    00:c3:68:d1:30:63:31:c8:be:88:ac:13:5c:c5:5f:
                    fd:57:c2:61:d9:04:0c:2c:bc:22:c7:49:55:a1:9d:
                    72:08:4c:7e:5b:9e:5f:60:02:3d:bd:ad:bc:65:3d:
                    bd:47:cb:dd:ff:75:29:c6:1e:b1:14:10:c9:74:cc:
                    2f:68:94:5a:dc:cf:d1:58:48:3c:0c:0d:87:88:36:
                    9c:8c:b3:9f:db:45:13:4c:08:d2:e2:2f:cf:1b:35:
                    24:97:59:ae:1d:a2:d9:4f:87:c0:38:f2:3d:a4:be:
                    94:13:cb:f0:54:c5:99:a6:3b:1a:6c:09:4e:78:aa:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:11:18:9A:17:DF:AD:3C:80:A3:36:7A:0C:F5:29:49:DB:57:55:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/7f992d52-25bb-3be2-8f41-2f8a77051ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:90:f2:a6:c3:49:79:c4:eb:d6:ef:e8:c5:d0:aa:b4:89:a5:
         58:ac:ea:b0:d2:11:8b:45:b7:af:a4:9e:e2:ca:88:02:c5:c9:
         a2:2e:2a:5d:e5:34:1e:32:2e:82:d1:cb:82:5f:e0:58:9e:cd:
         71:44:c1:53:a6:30:e2:9a:61:66:01:56:c6:fc:8b:dc:75:b6:
         61:9b:89:19:a1:d9:ee:26:2d:29:ce:91:05:36:b7:d7:1f:6b:
         10:3a:1d:44:9e:eb:57:8e:14:f2:0c:9f:6e:36:f7:72:9a:a3:
         7a:d3:2d:4a:5c:4a:cc:88:44:a5:f0:e3:94:9a:36:f7:83:fd:
         44:e1:15:84:d1:d7:ec:55:61:a4:cb:40:9e:95:ba:ec:ad:37:
         c5:e6:14:e4:22:72:70:34:3d:c1:bd:ff:07:10:2b:bd:82:17:
         06:06:55:79:cf:ce:84:4d:00:4a:b6:67:de:88:97:36:15:dd:
         95:5f:2e:d5:e5:60:d4:33:08:21:3d:77:60:fe:de:dd:4c:bc:
         23:e1:b3:b0:07:a5:39:a6:71:a6:29:51:5a:69:cb:30:e8:d5:
         e0:66:82:97:f1:a2:11:79:13:07:1e:22:2b:c7:8a:b6:1b:a2:
         01:ac:c4:05:e1:e4:6c:ea:76:1d:0e:72:7f:55:70:1f:e2:8b:
         a0:79:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:35:53 2026 by rpki-client