Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b7b6b1a9-a43a-39db-b8fd-ce562028001c.roa
File:                     b7b6b1a9-a43a-39db-b8fd-ce562028001c.roa (raw, json)
Hash identifier:          XSTqJjzJthwBgXY5mDhaVUChr1BHkuqSIbINxcij/kI=
Subject key identifier:   F1:6B:C5:79:CF:1D:DD:89:49:70:55:D7:37:CF:06:F6:6D:D6:9E:1B
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584DAAE02A08EB2E79F0CC589A80
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b7b6b1a9-a43a-39db-b8fd-ce562028001c.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     1024
IP address blocks:        23.172.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:2a:08:eb:2e:79:f0:cc:58:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=fa9b4f71-1e1f-4e73-86c1-494adfef5c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:48:a4:6c:ee:26:4b:7f:a4:dc:ae:a2:37:
                    2b:2b:95:c0:52:63:f8:ef:c0:a0:88:a5:2c:4c:b1:
                    54:ad:65:b6:f1:19:fe:7e:18:f2:7a:42:04:6a:6e:
                    50:bb:37:ab:91:41:c9:67:79:cf:64:bc:e9:83:27:
                    6a:87:3f:70:47:a8:69:02:20:63:db:9b:5e:7f:2f:
                    63:58:cc:de:6e:53:5f:88:d4:4f:7b:38:66:ad:12:
                    8c:4f:6a:13:8c:f2:9e:8a:6a:7d:d9:d2:f6:20:04:
                    e3:e1:b3:ef:1d:77:7b:42:87:87:4f:6e:a4:1e:a2:
                    db:8d:06:03:0e:fe:ca:fd:2f:39:0f:61:dc:60:0c:
                    c8:62:19:98:ee:25:68:2e:33:46:c2:b1:ff:9f:6d:
                    7f:a1:46:c6:0e:65:b6:35:47:74:88:81:66:03:21:
                    8e:38:dd:74:c9:d6:52:c5:30:29:c4:7f:2c:97:48:
                    54:93:cb:99:53:b8:d7:df:f4:08:23:01:ea:9e:a8:
                    96:00:ef:73:87:93:79:6c:20:04:a2:1e:2a:cd:b3:
                    e0:8f:23:56:e0:e5:32:f2:d2:b5:66:fb:76:9c:e1:
                    04:fa:ad:19:d4:01:14:12:18:c3:79:2a:ff:09:e0:
                    5d:f2:b8:7d:d1:20:64:0d:25:74:eb:59:39:ce:3d:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:C5:79:CF:1D:DD:89:49:70:55:D7:37:CF:06:F6:6D:D6:9E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b7b6b1a9-a43a-39db-b8fd-ce562028001c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:79:98:bc:5a:e2:8e:9f:10:32:de:eb:5a:63:fa:6a:60:c8:
         31:41:fb:4e:0e:ba:42:b5:98:67:ef:15:e3:98:a1:e9:f3:f2:
         46:3f:92:17:ee:9c:a7:b4:6c:3c:61:8b:45:8c:65:3b:60:c3:
         af:89:43:a1:02:4f:cf:51:b5:ef:cd:54:6a:87:5b:87:f8:e4:
         2c:44:d3:e6:2e:b3:12:24:7a:4d:ce:bd:b3:1b:59:90:64:18:
         30:1f:b1:34:bb:49:aa:e0:02:1c:a2:7f:5d:cf:99:ef:db:8f:
         4d:5d:d9:91:3f:96:48:f8:33:60:da:f2:79:f7:0c:54:be:33:
         f9:d0:96:62:dd:b2:9c:24:f6:d1:f6:ec:46:18:87:78:0f:e0:
         26:d7:96:23:f8:4c:84:e7:de:44:94:05:2d:07:cc:a9:58:a8:
         d5:55:7d:63:4e:82:36:29:3e:2b:1c:57:ac:82:ab:52:7b:7e:
         88:dc:41:db:f8:09:be:cb:d6:93:52:f8:87:b6:a8:03:c7:c4:
         d2:b7:72:38:0c:64:c1:52:15:64:aa:55:41:2a:4b:80:02:b2:
         7a:90:2f:c6:53:81:1f:9d:62:da:14:55:8e:d7:41:2a:d0:7d:
         55:16:dc:4e:3a:d7:b3:98:c6:5a:6c:18:82:e7:c4:c0:83:8e:
         8b:85:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:09:47 2026 by rpki-client