Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa
File:                     db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa (raw, json)
Hash identifier:          0pOPW3YgNcGSNsmFTcuBYwVJnad27fCdROf9+kShMGk=
Subject key identifier:   EF:18:FE:C8:32:C8:E1:29:8F:30:FB:D5:79:25:2C:92:7D:56:A4:48
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584DFBD5EE18539BB9319C69EB40
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     134365
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ee:18:53:9b:b9:31:9c:69:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=a899e623-7c56-44dd-ab59-057329e367ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:d2:4f:45:69:f6:39:b8:77:bf:30:0e:90:
                    e4:f7:00:ce:8f:0b:f4:22:03:9e:b2:ec:e8:0d:b5:
                    e4:92:81:ba:df:5a:60:04:ab:ea:34:c0:08:47:bf:
                    c8:89:c4:3c:fd:f1:d8:f3:cf:6e:6f:3d:2d:75:31:
                    56:df:92:b7:87:ff:48:1b:80:27:49:50:48:b0:7f:
                    54:02:3c:08:57:b5:f4:f5:50:97:f6:00:92:da:46:
                    7b:42:6e:89:0e:c8:58:81:4d:19:b4:25:f1:7b:bd:
                    19:7f:9e:48:ec:a3:4e:5a:7d:31:3a:f7:7c:45:1b:
                    a7:88:bb:1c:79:59:92:68:a8:16:8e:7b:73:f2:37:
                    ea:a2:47:f2:2c:c5:4e:11:44:a6:d5:20:03:c0:cc:
                    6a:f2:3a:d0:6f:d9:f5:30:69:5e:cd:55:f0:cf:18:
                    73:92:b8:f1:72:a9:d1:18:46:5a:ed:d2:d0:88:1d:
                    4b:4f:7b:b8:d1:fb:13:d5:f7:80:fe:ee:fb:90:13:
                    f9:4a:ac:27:06:55:a3:d2:c7:21:bf:4d:06:b9:db:
                    b0:5c:3b:e2:6b:0d:42:90:79:6a:51:9e:ad:da:85:
                    7f:c5:69:57:14:e0:d5:8b:ca:55:3b:18:60:b5:b9:
                    3a:ef:7d:6d:3c:71:85:b6:d7:ff:40:3b:0e:61:ba:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:18:FE:C8:32:C8:E1:29:8F:30:FB:D5:79:25:2C:92:7D:56:A4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:71:84:b0:16:be:a7:a1:b7:75:f8:e6:bf:3c:9f:6e:b1:bf:
         8d:4f:d0:b3:b3:5c:eb:62:79:9b:22:ae:77:b7:1a:d5:6e:52:
         d9:ec:ea:f0:11:7b:14:e3:bb:37:2c:bb:79:e8:e3:c8:61:99:
         a5:9c:32:60:df:4c:b4:db:b7:d9:89:91:f5:ac:5e:aa:98:ab:
         81:26:e5:48:2e:8a:73:67:f1:92:db:2c:68:e9:4b:be:67:32:
         b3:98:3d:c1:09:83:fa:6e:91:32:70:a2:9e:53:20:43:f2:01:
         fd:91:dc:aa:fc:e5:ae:30:20:6d:bb:35:36:f3:dd:1d:ac:8f:
         f8:df:6c:1b:58:63:67:fc:2a:5e:fe:31:f3:94:43:c9:48:80:
         9f:76:2c:9e:45:14:7e:4c:a1:a0:44:c1:f4:a9:75:ec:b6:cb:
         d0:17:36:d3:fd:88:54:c8:6c:46:b8:7b:90:15:82:de:cb:30:
         6f:64:f8:63:52:a2:ef:db:85:6f:bf:11:f5:94:33:83:3e:ed:
         d6:35:74:ae:97:e1:f1:32:f5:8f:ea:a8:7d:b5:cc:79:82:c2:
         18:25:4b:09:ec:b2:c0:4b:d0:d3:24:5d:7a:f5:85:cf:ae:64:
         60:04:a1:bc:5a:de:54:98:70:0f:dd:ab:7e:8d:dd:ac:42:4b:
         f0:66:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:06:07 2026 by rpki-client