Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa
File:                     92d66eb8-87d0-3516-b034-8a4520c54d26.roa (raw, json)
Hash identifier:          +cRR5EgAbpTyy8SN1qE4F4971mh9e2ip/Jp0bXlWMnw=
Subject key identifier:   EB:14:53:EF:55:A2:4A:9C:85:4F:D8:C6:0E:2C:1A:CC:96:4B:61:B7
Certificate issuer:       /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
Certificate serial:       010D0C9F4328584D8AC546CDEFCEE4C794EEA790
Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     203020
IP address blocks:        23.129.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:46:cd:ef:ce:e4:c7:94:ee:a7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=60a1720f-b757-4f60-9f30-6e56d552e825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:dc:e4:59:41:90:b4:1a:ed:59:00:d5:f6:
                    40:95:46:4e:08:de:72:01:f5:32:51:f2:3e:7d:58:
                    d7:5f:69:03:6e:06:07:0c:05:36:ea:a6:8f:0a:a7:
                    f4:32:9b:40:e5:00:f5:1b:90:bd:8e:0d:08:43:98:
                    5b:8b:49:e0:d2:2b:ad:da:96:ca:4e:f9:b7:63:71:
                    d6:1b:7f:81:72:b4:b7:17:7f:bb:16:4b:4d:38:49:
                    fe:99:aa:df:c1:0f:ab:f3:ce:0a:3a:2d:57:ed:47:
                    3f:42:60:2e:96:e6:b4:88:d4:75:37:c0:81:84:cf:
                    30:1e:be:a7:d8:82:fc:84:93:b8:be:89:33:95:3e:
                    b6:db:f2:86:a2:42:33:5d:0d:46:01:fd:3c:0d:96:
                    aa:12:2e:a5:34:c4:4e:3e:84:77:dd:19:98:66:27:
                    9b:c5:47:b8:9e:39:0f:20:10:7f:97:28:79:01:3a:
                    ad:e1:a0:3b:c4:e2:3a:44:05:a8:24:e1:f4:22:32:
                    f1:a9:47:b9:22:d6:d5:55:4c:ac:e0:da:32:ea:8a:
                    1d:08:47:d1:e6:04:d1:4b:8d:f4:2b:4a:0e:80:8b:
                    9f:8c:0d:2d:a2:34:62:a6:5e:8e:50:28:99:bd:92:
                    ce:9a:26:a6:86:3e:ec:16:eb:b9:c2:88:5a:02:f3:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:14:53:EF:55:A2:4A:9C:85:4F:D8:C6:0E:2C:1A:CC:96:4B:61:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl

            X509v3 Authority Key Identifier:
                keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:31:3c:4c:3e:6c:ba:a0:17:19:90:db:d6:6d:2b:14:44:21:
         53:20:c9:8b:ad:eb:18:c0:f0:b1:50:90:98:37:db:08:1d:ee:
         40:64:39:ce:5a:ce:54:53:ef:15:8b:dd:28:8c:4b:69:3a:45:
         eb:f2:a5:6c:30:38:3e:ba:ca:53:4d:c1:ae:a8:59:c7:fa:df:
         f7:b0:6f:44:29:6a:6f:8c:c5:56:ff:16:88:e3:a6:b4:58:38:
         39:ba:75:c0:ca:c0:8d:fd:16:b1:07:99:d2:83:a9:35:59:4a:
         48:58:2a:d0:50:6e:3f:74:19:80:20:1c:1e:50:46:5d:47:71:
         31:7a:fa:db:cb:62:27:af:c0:19:78:b7:82:24:fb:ef:3a:d4:
         aa:a5:56:00:98:dc:59:95:2b:9e:e3:ef:49:44:c2:f7:97:b5:
         48:ae:3e:de:f9:d1:74:ba:f1:86:23:74:a9:f9:6d:5a:9b:53:
         58:db:7b:8d:e5:ee:b6:80:6d:69:98:1f:76:44:9a:d2:ad:cc:
         0a:36:72:ff:9c:15:bf:e6:2a:2c:4c:3d:4c:bd:54:e5:9a:aa:
         33:64:5f:e0:1a:3a:d9:2a:49:83:d2:77:4c:58:bb:97:ff:58:
         da:b9:98:ae:b4:f4:3f:50:a8:1e:1c:95:5c:ac:9a:82:c4:ac:
         fa:c8:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:27:15 2026 by rpki-client