Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa
File:                     6053494b-ad6e-3463-a4d4-78568350ab7f.roa (raw, json)
Hash identifier:          Up8q2eb2ELxK22h+q684wxaj3bmGCrb7DzS0WYxvZ5Q=
Subject key identifier:   51:F5:A9:9F:62:FD:F4:EB:CC:10:CA:09:E2:66:C9:7D:D7:1C:BA:5B
Certificate issuer:       /CN=ea962f40-5514-411b-b23b-2a5e787628d5
Certificate serial:       010D0C9F4328584D651528D12A68D266F9D5BF80
Authority key identifier: 95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     401336
IP address blocks:        23.189.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:28:d1:2a:68:d2:66:f9:d5:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea962f40-5514-411b-b23b-2a5e787628d5
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=8659e809-ee77-40c9-a8bf-2b3c0de08ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:f2:74:80:9e:ce:a6:82:2d:ff:84:56:74:
                    c2:60:0c:50:72:4c:ed:39:14:4b:c8:b8:d2:92:11:
                    8e:00:b1:b5:37:16:7a:d8:4a:93:0a:3f:08:5f:34:
                    df:26:cb:bb:a5:53:a1:1e:a0:02:c7:c5:b5:ee:85:
                    76:ad:90:bb:07:7f:56:40:6c:88:6f:ed:5a:d1:a3:
                    c6:c0:00:da:fc:ec:5f:f8:36:db:cb:0f:69:72:8f:
                    cd:a5:5b:95:29:f0:13:0e:e3:b9:10:ed:39:e6:ca:
                    f4:de:91:d4:65:44:e6:5b:d1:91:b8:38:d3:17:55:
                    42:be:06:8c:10:d0:11:0e:59:c1:0a:c4:1c:42:09:
                    8a:92:f6:80:72:97:5a:1a:e9:60:87:0b:4e:54:d0:
                    cf:3c:38:c2:61:7c:bc:7d:b0:3a:17:f9:82:17:fa:
                    b9:6f:9e:dd:45:e3:b9:52:bb:da:43:a8:6d:6b:e1:
                    3d:f6:b1:18:ed:54:b1:66:be:53:49:4a:1f:aa:ef:
                    38:34:58:65:86:48:c3:8e:54:4f:ee:7a:c7:fd:b8:
                    0a:53:b8:91:b0:08:d6:2c:32:2b:b5:89:fe:cc:e6:
                    42:d7:45:a8:7e:03:e7:c8:c0:54:b9:77:a9:9f:ac:
                    e1:46:da:02:d1:ea:7e:9a:2a:48:43:13:73:1f:e5:
                    a9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F5:A9:9F:62:FD:F4:EB:CC:10:CA:09:E2:66:C9:7D:D7:1C:BA:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl

            X509v3 Authority Key Identifier:
                keyid:95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:1c:81:43:db:9c:33:bd:36:9c:c2:db:30:64:57:f5:dc:
         74:e2:aa:f7:ca:95:26:a7:a8:2d:96:5d:8e:69:d0:fd:da:6b:
         45:57:d4:26:83:c4:e1:52:84:b0:0a:16:69:82:d3:db:4e:3f:
         dc:7f:47:42:12:af:66:01:f4:8e:5a:7b:60:02:df:91:d5:58:
         ad:8a:b3:b2:b2:68:82:6a:97:7b:b8:ab:ed:dc:28:b9:14:64:
         a9:6a:fa:8e:9c:13:0a:13:fd:89:73:4b:48:29:22:04:d2:bc:
         a7:e9:7c:f6:1e:4a:a6:93:fe:68:8a:04:96:e0:83:a9:09:bf:
         49:b8:40:bd:fd:61:03:ed:e4:93:e9:c8:f3:ad:ec:eb:ad:e9:
         68:d6:69:15:da:a2:a7:84:49:e5:e3:c4:ac:13:47:61:b3:86:
         55:86:00:0b:fc:f7:34:b4:c1:03:b8:9d:23:67:c0:33:e7:2a:
         c3:5b:d2:d7:35:9d:60:0a:df:c6:ce:70:67:e8:99:07:a1:c7:
         79:cc:81:93:da:c2:3e:30:d4:fb:3d:40:76:cc:8d:95:a4:9e:
         02:44:93:60:15:77:35:19:22:22:c6:a6:7f:04:8d:e8:b4:6e:
         31:a0:d4:6d:e3:13:60:b9:f4:74:15:d7:85:66:d6:36:f4:5b:
         29:5d:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:08:32 2026 by rpki-client