Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10055e8e-030b-3058-ad52-59a561a42775.roa
File:                     10055e8e-030b-3058-ad52-59a561a42775.roa (raw, json)
Hash identifier:          U0hYb6nA+TsqzVgL7hxbAFDIzDLTIZB0/6jVRMttUwA=
Subject key identifier:   C6:F9:AB:FA:E3:0D:06:64:C0:44:90:E8:92:90:48:82:C4:72:17:EA
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584DBBA0429BB5F39F343E87325C
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10055e8e-030b-3058-ad52-59a561a42775.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     398549
IP address blocks:        23.162.176.0/24 maxlen: 24
                          45.59.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:42:9b:b5:f3:9f:34:3e:87:32:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=a25d368b-175a-4b7e-909e-401fc2806f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:02:f8:6f:08:cf:4d:11:85:d4:13:b3:85:
                    08:fe:c5:9c:70:90:2f:b3:2d:da:f2:08:2c:35:f9:
                    81:e0:45:23:98:ff:66:d1:76:d2:c2:4f:17:6c:e4:
                    b0:15:14:9f:50:4f:8a:0d:79:c2:e1:5a:8f:5a:60:
                    a4:09:ad:7f:2a:ad:3b:9d:b2:c7:8f:62:0b:7f:e4:
                    22:b2:df:73:36:45:ea:a5:47:80:3c:e1:6b:95:b0:
                    61:7c:c3:f5:78:20:b5:89:52:ed:6a:5b:36:ee:ce:
                    14:ab:e8:08:af:7f:23:80:41:c4:40:29:8a:fe:f7:
                    a8:42:ea:93:5f:2c:0b:37:98:26:a5:46:0c:1b:18:
                    bc:65:f9:6d:38:28:02:8e:37:dc:97:9a:5c:bb:9c:
                    80:35:cf:93:ab:ef:cc:64:8d:7d:fb:8f:ef:dd:cd:
                    3d:42:85:90:2a:0a:3f:0b:df:4e:22:ab:a3:3c:8f:
                    50:aa:81:6d:cf:73:62:66:48:3a:74:d4:64:3b:c5:
                    6b:55:14:a9:76:ce:dc:32:b9:dd:d0:67:52:69:20:
                    0e:2c:ea:e5:47:3b:f7:05:0f:54:86:9a:6b:eb:2e:
                    f7:77:58:23:a4:4c:40:fc:8f:3d:45:1f:51:5f:8e:
                    d8:a6:a3:f6:a2:33:65:d6:79:5b:b2:f7:cf:e0:b4:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F9:AB:FA:E3:0D:06:64:C0:44:90:E8:92:90:48:82:C4:72:17:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10055e8e-030b-3058-ad52-59a561a42775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.176.0/24
                  45.59.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:bd:24:26:5c:82:ee:23:d1:6d:4b:3e:42:64:80:8f:87:
         5a:09:c1:41:e1:af:8b:8b:04:97:17:6d:72:4b:a9:1b:b4:4f:
         86:e3:8f:56:e7:80:08:e4:50:07:cc:11:1c:00:82:6e:2d:5f:
         50:c1:6f:40:7b:0c:d4:fb:34:25:c8:17:65:19:be:3e:c1:26:
         48:31:43:58:55:8c:29:aa:d2:a3:cb:16:ef:bf:ed:43:2f:8f:
         96:98:59:aa:0b:2a:44:ab:d3:5c:13:13:2c:5e:65:07:88:f3:
         21:e1:1b:bb:ac:79:1c:45:56:fd:1b:65:6f:13:c0:44:59:88:
         5b:2b:10:bd:40:3e:b5:40:06:07:53:2e:f4:70:76:51:c2:28:
         ce:a4:58:37:5f:6f:b0:3c:82:85:ac:a6:c8:2a:6a:ab:ab:8d:
         28:ac:ae:45:af:08:3f:78:8d:58:64:2a:d2:bd:85:41:a9:02:
         f0:4e:8e:d3:2a:34:a4:39:e4:36:1c:a7:a7:e0:25:fe:06:b2:
         30:44:ca:1b:ca:34:c2:e9:c6:93:73:b5:f6:56:70:bd:6b:35:
         21:3e:74:33:92:eb:8f:57:96:4c:57:f3:5b:43:ea:d3:ce:99:
         ae:ff:91:92:eb:d9:95:9b:3a:30:9f:e1:4f:c0:85:b4:61:70:
         1f:8b:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:27:52 2026 by rpki-client