Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/b5e0e9f9-6f43-378f-9fe5-17dba06bedc0.roa
File:                     b5e0e9f9-6f43-378f-9fe5-17dba06bedc0.roa (raw, json)
Hash identifier:          jM7ysqKmcubSD8+1RU2P/edb+Bp1v7s/LPKYPjEE+xw=
Subject key identifier:   1C:69:26:C5:A1:55:10:EF:50:49:9D:FB:E0:39:02:0F:6A:AC:9D:BA
Certificate issuer:       /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
Certificate serial:       010D0C9F4328584D4BF4EEE1E49741253708FD00
Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/b5e0e9f9-6f43-378f-9fe5-17dba06bedc0.roa
Signing time:             Thu 26 Mar 2026 13:00:41 +0000
ROA not before:           Thu 26 Mar 2026 13:00:41 +0000
ROA not after:            Wed 24 Jun 2026 13:00:41 +0000
asID:                     11761
IP address blocks:        23.148.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4b:f4:ee:e1:e4:97:41:25:37:08:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
        Validity
            Not Before: Mar 26 13:00:41 2026 GMT
            Not After : Jun 24 13:00:41 2026 GMT
        Subject: CN=c3d4e45a-07c3-41c0-a1ae-fc12a2c1bf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:c0:d7:d2:f3:98:30:91:7f:ad:75:3e:d4:
                    67:fc:e1:e1:4e:99:80:41:c9:db:c7:e0:35:b7:c2:
                    cd:fb:1b:79:f2:2d:06:f5:e0:89:0e:47:9b:89:99:
                    ff:e8:47:09:71:8f:c5:6a:4f:0a:b8:83:b4:43:be:
                    2e:0a:9d:9b:bf:91:b6:ed:56:a7:d6:ad:d7:f3:0e:
                    28:fb:dd:7c:36:51:6e:09:a8:30:db:4b:b6:4c:0b:
                    4b:ba:30:84:2c:b4:07:ca:2c:bf:9e:75:08:25:3a:
                    e6:32:40:1b:88:76:5c:ab:33:d3:9e:d7:dd:6e:b1:
                    5f:5f:be:e3:00:e2:bf:b2:57:40:ae:4a:33:f7:32:
                    d0:cc:d1:16:8a:68:48:06:e6:02:a9:0c:f2:f2:9e:
                    d7:e1:0c:d1:12:66:d4:10:ca:b5:3a:85:79:37:b0:
                    4d:5c:e6:b9:38:e6:4f:69:ba:b6:9c:34:1f:6c:87:
                    9c:38:6c:79:1b:8e:5b:e2:bf:79:78:67:63:0f:7c:
                    11:36:b7:dc:95:76:1f:94:40:68:d6:53:6e:1a:07:
                    61:57:ba:ac:19:45:4a:09:9e:b6:da:d9:d9:a0:1d:
                    ed:fe:2a:52:d7:b3:dd:63:1a:bb:9e:cc:38:49:36:
                    4f:b8:74:26:1b:17:aa:3f:83:c0:cf:83:77:4b:2c:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:26:C5:A1:55:10:EF:50:49:9D:FB:E0:39:02:0F:6A:AC:9D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/b5e0e9f9-6f43-378f-9fe5-17dba06bedc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl

            X509v3 Authority Key Identifier:
                keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:16:c7:72:b3:0f:13:05:43:17:b8:32:a3:1f:1d:a1:9c:
         96:b7:61:c4:25:31:b5:41:54:a8:06:77:ef:cc:3c:a9:af:85:
         41:da:2d:5b:f7:60:d2:08:d7:94:63:78:65:94:ed:ff:33:aa:
         c4:4b:98:9f:41:d6:26:01:4f:10:92:d7:37:43:ea:89:15:c0:
         a1:c3:65:69:fc:57:1a:33:c4:de:f1:44:7b:7c:4f:8c:d2:f5:
         3d:47:de:9c:a6:48:ae:f2:33:92:1c:ae:eb:b7:1f:f2:54:e0:
         26:c3:f5:db:0f:8d:eb:e6:ef:0d:85:cb:e7:b6:ab:d2:60:cc:
         cb:92:08:09:e8:a3:3f:b2:fe:d1:d8:2a:50:ff:7d:0f:cc:dd:
         17:e1:ce:0a:de:53:5a:68:a6:c7:fe:ad:43:84:d3:30:96:22:
         44:01:22:bb:84:11:02:f9:50:62:a0:35:5d:60:6b:2f:cb:b7:
         58:02:86:42:2e:ee:d5:ac:91:70:70:db:43:3c:79:04:74:7c:
         75:cf:21:99:1d:af:02:b1:03:57:e3:cb:8d:cb:5d:2d:f4:fe:
         cd:51:32:d3:8d:20:9b:a1:61:0a:02:d0:08:b7:80:93:bf:6a:
         68:b1:70:ce:63:f9:c4:50:be:70:e2:70:67:24:e5:ef:9f:c2:
         cb:ad:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:58:03 2026 by rpki-client