Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
File:                     da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa (raw, json)
Hash identifier:          u6k9UDVDQBH+17CGFhiZ3lf9iLtKIrF7ANJwIIBRhgA=
Subject key identifier:   CF:7C:43:8E:9F:02:FA:45:A0:46:A6:99:25:FB:82:00:99:9D:7B:4D
Certificate issuer:       /CN=39cfcd95-1931-4846-b938-e8a3b993f2a8
Certificate serial:       010D0C9F4328584DD625AAF9C1BC976B65BBFD80
Authority key identifier: A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     63023
IP address blocks:        23.137.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:aa:f9:c1:bc:97:6b:65:bb:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39cfcd95-1931-4846-b938-e8a3b993f2a8
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=683f5365-09c7-47b5-b985-860ace3003ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:4a:e9:04:4d:43:9c:7c:26:ac:8b:79:de:
                    19:f0:1f:95:50:ac:f1:4a:9d:d2:e2:14:ee:eb:46:
                    de:78:ea:aa:3c:0e:5f:78:67:14:d5:fc:7c:43:0d:
                    d1:15:a0:d6:3b:b2:f8:bc:7d:70:65:91:6e:2a:1f:
                    c0:42:f6:5a:93:2b:4e:8b:ba:40:60:84:e9:f1:33:
                    df:bc:af:e0:52:d9:5b:7d:5e:4c:e0:7f:6f:a6:a2:
                    f7:48:a2:a1:23:a3:b6:55:0c:4c:0e:52:37:ef:34:
                    c2:7e:02:cb:e6:3d:47:27:94:67:3a:4d:1a:5d:3e:
                    39:21:83:6b:bc:50:a0:ce:9c:9f:93:03:10:a9:45:
                    7e:46:ca:fa:f4:4b:46:f3:32:53:fc:76:1e:38:11:
                    27:80:9f:e4:b4:78:a1:f0:39:01:1f:9b:41:5e:89:
                    85:19:81:2f:b0:65:80:23:9c:96:5a:4e:85:7b:db:
                    5b:3f:5a:9a:fb:b9:8f:24:f9:8b:ae:3e:a4:f7:97:
                    d9:4a:66:68:99:94:6d:8b:60:e0:47:9d:cd:61:c1:
                    07:3d:87:7c:e1:8c:4a:41:17:27:e6:60:69:11:35:
                    2e:e9:79:f7:fe:9c:6d:9c:aa:6b:a8:22:02:54:7e:
                    c3:3b:fb:bf:54:60:42:74:25:c3:13:52:1f:65:ff:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7C:43:8E:9F:02:FA:45:A0:46:A6:99:25:FB:82:00:99:9D:7B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:59:37:76:4c:bd:62:22:79:27:4a:9a:66:80:e9:6d:77:d0:
         da:e6:f7:ad:d7:55:0a:6d:dd:8d:19:4b:1d:3c:7f:35:e8:ee:
         42:b5:3d:05:43:2c:8c:04:de:c6:5c:2d:97:99:e3:2d:40:9f:
         bb:36:98:25:fa:e0:23:5f:47:88:10:23:a3:d3:42:82:81:22:
         83:50:4a:ba:66:f8:59:6b:90:cd:98:4a:92:b8:f1:ba:90:93:
         e9:95:8d:eb:32:c7:1c:cf:15:23:08:a8:f4:bd:8a:1b:2e:17:
         2f:74:a6:14:0c:2f:10:0b:5f:db:4f:62:d9:45:48:ae:04:b3:
         2b:66:a3:b5:55:49:b7:99:65:1d:53:13:ca:aa:04:0b:7e:40:
         91:99:d6:15:11:1d:eb:69:79:ba:44:8f:ba:0f:4d:84:2b:ee:
         6e:6b:a5:c9:47:df:f4:4a:e3:c0:a3:91:cf:fa:81:d9:04:df:
         69:4d:04:3d:88:69:98:6d:43:da:a6:76:a2:88:93:1e:ff:2b:
         23:c8:70:74:12:2a:ab:42:74:dd:34:83:e1:e1:af:f6:41:b8:
         78:ec:db:d6:62:03:5b:8b:3e:07:de:c6:6c:44:f5:10:a8:25:
         41:88:f5:d7:c9:7f:38:be:6b:c3:0e:03:76:c2:0b:52:42:ff:
         fe:49:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:15:39 2026 by rpki-client