Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
File:                     4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa (raw, json)
Hash identifier:          7wmuaiaLmsHiwyhqlnfGBuhfhIznYGaBe4jkGW8MugI=
Subject key identifier:   DD:6F:6D:18:C0:EF:14:98:F5:0A:19:8C:1F:31:A2:E2:2E:4F:9D:8A
Certificate issuer:       /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
Certificate serial:       010D0C9F4328584DA11ABED3228CC4641A63CC80
Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     395332
IP address blocks:        23.146.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:be:d3:22:8c:c4:64:1a:63:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=2a3bbbd4-d479-42c8-884b-82121a0ed4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:28:f8:94:8a:8c:74:45:35:5f:4f:b3:7c:
                    5c:d5:b7:4c:50:6b:d5:93:0a:6d:d2:66:b4:2d:1d:
                    43:8d:ec:65:5c:2c:d7:34:5e:f1:43:1c:f7:c0:f6:
                    98:07:71:ab:e4:3c:a1:d9:2f:58:29:86:9d:1a:91:
                    f9:09:15:a8:63:75:12:1c:b9:da:91:8f:7e:c9:c1:
                    3d:33:52:13:5c:52:ea:b9:35:55:4f:a8:4b:04:dc:
                    28:c1:7d:2f:8b:a2:f3:cd:2a:6d:fd:89:56:26:1c:
                    a4:e3:a9:c3:50:ee:94:7a:81:d7:f6:c7:99:dc:5a:
                    fe:8a:c7:f2:be:40:bb:29:1a:90:e4:e7:ad:d8:91:
                    ca:a0:2f:72:57:2b:00:59:09:c5:00:03:f5:ce:c8:
                    25:c6:28:e5:52:10:63:26:4d:9b:89:07:75:59:86:
                    ad:46:d4:f4:d8:a8:c1:c6:6c:14:79:bc:5d:ee:8b:
                    46:bf:b0:38:ed:8e:e5:ad:41:80:a3:dc:11:98:70:
                    ab:7f:85:de:d7:92:6f:e8:24:7d:3d:e1:ea:77:51:
                    c1:05:9d:e2:60:20:52:26:e0:5e:2c:7d:9a:7c:2e:
                    82:b1:b3:c4:4f:f2:73:c3:e8:93:42:39:d5:93:95:
                    66:a5:cb:97:49:c2:d2:57:1e:df:14:f9:41:f7:a1:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6F:6D:18:C0:EF:14:98:F5:0A:19:8C:1F:31:A2:E2:2E:4F:9D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl

            X509v3 Authority Key Identifier:
                keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:83:0c:41:6b:69:dc:48:3f:85:5b:b1:e1:46:d5:58:36:
         d9:ed:06:47:8c:e3:f5:18:37:bf:4d:aa:df:1e:35:8e:77:62:
         6b:94:ab:af:b0:fd:0b:3d:53:fa:23:b6:d4:ac:2d:71:5b:68:
         79:06:89:25:ec:44:a0:99:f6:ef:70:58:f9:1b:c2:7a:95:42:
         04:44:1e:30:03:08:c8:df:bf:43:31:aa:81:25:2f:3a:20:cf:
         eb:73:6f:d4:ba:b7:aa:90:2c:37:6f:e1:fb:23:f3:b0:37:f6:
         fb:88:a3:4c:82:01:b1:07:a0:c0:b1:16:6a:fa:49:d0:65:bb:
         f2:f1:9d:2a:9a:72:30:b4:27:6b:eb:7b:d2:d7:ea:fc:01:c5:
         d6:49:9e:fa:b4:1c:dc:dc:5d:a5:99:94:74:8f:33:42:93:17:
         7e:91:46:f4:b1:5e:89:82:86:28:15:82:33:cf:3b:6a:33:1e:
         16:d1:17:3e:38:21:56:e5:63:74:5a:76:f5:ff:bc:d2:57:4e:
         c5:89:da:7c:79:7c:6c:63:a4:6a:31:20:d6:3e:59:a9:a8:70:
         9f:7c:4b:40:1b:12:2a:0c:2f:31:a3:a8:4f:6c:c3:5a:4d:8b:
         38:2f:0f:4b:77:50:83:a2:22:8a:ec:14:f9:7b:a0:e8:df:6d:
         35:05:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:58:26 2026 by rpki-client