Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/e0b4c95a-ab26-3ce1-bc15-9a713f7d3171.roa
File:                     e0b4c95a-ab26-3ce1-bc15-9a713f7d3171.roa (raw, json)
Hash identifier:          RwmQp01xXEDsteEuEoSsCjZMUDHwZbM301xBueZ+Q40=
Subject key identifier:   18:6D:3E:9A:C8:98:96:9F:E7:27:E1:F1:46:96:E9:E4:E1:1B:86:E4
Certificate issuer:       /CN=3008c6be-8f83-4728-81bb-6e10f0181cf3
Certificate serial:       010D0C9F4328584DAF101EDAB06C37A1D0E07E80
Authority key identifier: DC:1B:D4:9D:8C:91:9B:A4:43:15:B7:82:0D:B1:7B:EF:89:99:18:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/e0b4c95a-ab26-3ce1-bc15-9a713f7d3171.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     397915
IP address blocks:        23.159.88.0/23 maxlen: 24
                          2602:815:5000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/3008c6be-8f83-4728-81bb-6e10f0181cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/3008c6be-8f83-4728-81bb-6e10f0181cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1e:da:b0:6c:37:a1:d0:e0:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3008c6be-8f83-4728-81bb-6e10f0181cf3
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=e34f1de3-6abf-4fc1-8748-9c3bf123a45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a5:34:83:32:69:f5:77:3a:8d:78:08:f4:5a:
                    67:3b:92:c8:0a:55:8f:3b:d4:3a:b8:28:d9:bb:92:
                    ee:c3:98:71:84:25:8e:4c:48:ee:d9:ec:3c:7b:b2:
                    51:27:6e:fa:c6:95:65:2b:c6:62:b5:c2:38:79:81:
                    71:5d:0c:48:89:2f:52:66:6f:c6:b4:11:36:fb:e3:
                    dd:17:a6:3c:4f:40:e7:01:e4:46:b6:08:13:2c:63:
                    7f:f5:b2:67:2b:5b:8f:5c:9e:29:c2:e9:1c:e8:af:
                    0c:4a:3a:88:ff:c8:d9:9e:6d:70:5d:a2:8c:78:1a:
                    5c:89:40:ac:00:5c:28:c0:07:06:db:30:ac:74:d1:
                    5b:6a:f5:5f:71:40:2a:60:d2:7a:c6:9a:a8:91:b9:
                    fb:41:39:53:8d:a6:0d:69:75:a5:71:63:e8:b5:15:
                    dc:62:dc:a2:07:70:a0:e7:c5:55:16:65:c8:92:3b:
                    35:1d:ca:f3:c2:6d:97:d6:d1:6d:5d:a2:66:9b:dc:
                    9d:3e:b4:33:19:f4:01:cb:16:b8:ce:3e:d8:39:83:
                    16:98:d7:e3:9e:78:04:16:99:b5:2c:b6:3c:74:04:
                    87:73:94:cd:1d:49:37:2d:7c:e9:85:cc:e2:62:db:
                    63:31:82:0b:20:5e:9a:82:5d:d4:c2:dc:aa:ac:f0:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6D:3E:9A:C8:98:96:9F:E7:27:E1:F1:46:96:E9:E4:E1:1B:86:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/e0b4c95a-ab26-3ce1-bc15-9a713f7d3171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3/3008c6be-8f83-4728-81bb-6e10f0181cf3.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1B:D4:9D:8C:91:9B:A4:43:15:B7:82:0D:B1:7B:EF:89:99:18:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3008c6be-8f83-4728-81bb-6e10f0181cf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.88.0/23
                IPv6:
                  2602:815:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:3e:4d:b7:ff:ea:f5:a4:cf:b7:04:6d:9b:3a:60:48:26:
         ab:e3:ce:18:5f:8b:fb:8a:45:02:5b:05:22:06:c3:20:69:b7:
         3c:00:9a:d7:75:a9:e6:2b:1a:d4:ac:96:50:46:fe:ac:bb:45:
         49:59:de:b4:27:09:66:6e:a2:79:43:c9:ca:02:59:9f:43:a3:
         d8:30:b3:eb:8f:7a:0f:7b:3f:7b:7a:34:10:9a:34:dc:23:9b:
         89:16:96:f9:40:8f:05:ba:eb:23:f4:bb:4f:8c:54:25:d6:97:
         ae:66:b4:40:ac:c3:02:ea:fc:8d:c1:8e:99:05:05:e0:63:ef:
         46:cf:4b:e2:0c:ad:ca:e3:8a:65:89:df:1e:69:9e:dc:4c:b8:
         0b:77:e2:30:ad:c1:45:96:dd:b1:04:84:46:99:8f:f0:63:63:
         36:f9:51:46:8e:ac:68:d4:7b:4a:cf:5a:1b:b8:e5:e8:16:8a:
         99:d3:e5:02:08:a3:68:ef:f4:2d:95:16:f3:46:89:01:dc:f3:
         d1:94:b0:36:37:a0:47:8b:4b:1d:19:a4:43:80:e8:49:54:a4:
         06:90:67:ab:2b:5a:3b:06:ce:52:56:c6:6d:5e:a7:c3:fe:aa:
         e2:4c:c8:d2:00:20:b8:df:bd:2c:aa:a0:0d:3a:e3:68:85:6e:
         36:51:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:27:23 2026 by rpki-client