Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa
File:                     9195e538-fa0d-39e7-ade2-e40801552963.roa (raw, json)
Hash identifier:          XorP03x4W4Yg0Rnu5fIAchc5ryyRb48PRawzQdsDD+4=
Subject key identifier:   40:29:F0:38:66:23:2E:86:BA:0B:21:96:78:6E:21:FE:11:57:37:AA
Certificate issuer:       /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial:       010D0C9F4328584D9A2018DE57EE2164CD755780
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     398020
IP address blocks:        23.133.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:18:de:57:ee:21:64:cd:75:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=d355be16-16c5-4470-87c3-8d439a3ffdc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:b7:c9:3c:04:6a:57:e9:d5:59:03:b0:ea:
                    ba:66:45:b9:2b:eb:30:62:2c:bb:c5:74:6c:d4:b2:
                    b2:9f:00:35:be:ed:6c:c5:e8:0a:48:56:6c:39:f2:
                    ad:b9:d8:ac:a9:43:79:f6:61:73:f0:b8:a6:db:fb:
                    97:2f:07:da:98:f4:7d:f5:8f:54:6b:a2:19:ba:e3:
                    c7:66:a8:c1:14:00:30:58:1b:c4:22:1d:30:06:e2:
                    a1:09:fe:f5:29:20:e2:68:e0:f1:fd:9c:46:9e:b6:
                    77:72:3f:59:80:4a:7a:cf:66:73:e9:03:e0:b9:e8:
                    f6:12:e6:74:34:ea:e2:3e:77:cb:72:54:e9:9b:e2:
                    af:bb:c4:7a:57:ef:0b:58:7a:bc:c2:78:5d:38:fe:
                    33:46:30:4c:72:66:20:d3:c3:93:ad:82:0c:0d:e4:
                    39:8b:62:88:c1:51:6e:99:20:e8:88:16:a3:7f:59:
                    94:1c:6e:6d:44:23:cb:9b:7b:99:72:2d:c9:54:2d:
                    bb:6d:47:30:52:69:6b:0d:a2:74:57:20:fa:53:30:
                    5e:59:a6:58:c6:d2:75:63:cb:c0:88:01:c7:3f:e0:
                    71:1a:72:e5:a5:32:c0:a3:d1:fe:10:82:22:6f:15:
                    15:48:93:0a:a0:d6:0b:f6:82:ae:48:42:bf:59:66:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:29:F0:38:66:23:2E:86:BA:0B:21:96:78:6E:21:FE:11:57:37:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl

            X509v3 Authority Key Identifier:
                keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:da:2f:fc:e8:3c:64:b1:7c:77:e5:c8:28:85:6b:8b:f5:71:
         6b:22:92:08:37:4e:29:15:bd:91:b2:9a:1e:42:e7:e3:65:6d:
         6d:4c:50:60:8a:54:ca:8a:14:89:5c:e5:c7:63:a5:0a:8c:c6:
         45:6f:de:5e:9c:95:97:f0:80:d6:0e:3f:a2:3a:3d:7e:b1:32:
         50:6d:22:5d:13:84:ab:19:19:17:32:b4:c9:9a:59:08:87:bb:
         62:82:8a:ad:e2:24:71:e0:d0:22:81:88:6c:13:0e:24:67:b8:
         4e:f0:65:0a:5f:8f:01:d3:65:d5:c9:dc:e3:0d:95:a4:76:45:
         dc:68:4f:84:85:14:34:5c:9a:26:00:00:aa:d2:be:ba:7d:17:
         a6:11:b7:6e:3d:0d:94:ca:0f:83:54:31:f6:b3:7f:09:4f:23:
         1e:0e:2f:05:63:18:eb:db:98:a7:14:4b:a1:8d:84:98:f5:51:
         2b:a0:5c:94:47:8f:e8:67:95:60:19:d0:00:61:cd:04:df:01:
         75:2d:6c:0f:35:bd:f3:51:76:72:b5:90:11:0d:c3:50:09:2b:
         ef:bd:8a:f5:16:00:54:fc:10:64:c7:bb:0b:89:be:8d:ee:e0:
         09:fd:50:c8:9c:f4:4f:2f:bd:31:04:56:02:c7:09:75:48:8c:
         39:14:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:24:58 2026 by rpki-client