Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/7dd9fce2-0cca-3fa6-9222-98f1df4a9d22.roa
File:                     7dd9fce2-0cca-3fa6-9222-98f1df4a9d22.roa (raw, json)
Hash identifier:          K9FKY6M3b6SUGoE3XWEWM7PhUTp+aqqeBfIvUAwhNdI=
Subject key identifier:   31:49:6F:0E:60:E0:4D:DA:80:75:0C:7C:8D:66:7A:C7:7E:8B:12:14
Certificate issuer:       /CN=34d1b905-337d-46f2-b028-65359c387fee
Certificate serial:       010D0C9F4328584D4EBFA9891949BCB483F65A80
Authority key identifier: 13:95:BF:1E:0C:4F:C8:E2:4F:2A:40:0A:33:2A:60:5B:83:C8:D9:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/7dd9fce2-0cca-3fa6-9222-98f1df4a9d22.roa
Signing time:             Fri 27 Mar 2026 13:00:40 +0000
ROA not before:           Fri 27 Mar 2026 13:00:40 +0000
ROA not after:            Thu 25 Jun 2026 13:00:40 +0000
asID:                     152918
IP address blocks:        23.147.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bf:a9:89:19:49:bc:b4:83:f6:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d1b905-337d-46f2-b028-65359c387fee
        Validity
            Not Before: Mar 27 13:00:40 2026 GMT
            Not After : Jun 25 13:00:40 2026 GMT
        Subject: CN=f7a3a960-f634-4199-b626-4ea8c5177543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:67:db:30:88:0c:cd:eb:f7:70:72:1e:da:d1:
                    9d:fd:8e:cc:37:3e:b7:5a:67:1f:d0:da:f3:8c:57:
                    65:31:d8:88:64:58:43:34:b2:5b:0e:80:8f:7c:66:
                    31:40:1c:fd:bf:73:ec:7b:35:e9:fe:85:24:c2:26:
                    a3:8e:6a:61:09:9a:48:f8:d5:da:31:b7:41:6e:e1:
                    eb:6d:2e:2d:e2:18:38:ff:e3:b1:fa:0f:bd:bd:6c:
                    6b:5e:c6:ad:46:27:9b:cb:a3:c9:a0:01:52:dd:6c:
                    ef:38:65:fe:dd:f8:0f:8f:0f:ba:7b:13:ec:ac:c3:
                    c4:43:16:7c:f0:77:77:eb:b5:d0:92:c8:96:ed:4b:
                    49:8c:a5:f6:6f:53:71:1c:0c:6c:f9:36:9c:ad:3c:
                    88:d5:48:f8:63:94:4b:51:ae:44:b9:2a:43:e8:26:
                    e5:f5:af:ca:61:54:e5:a3:1a:a5:1a:05:fd:a0:01:
                    88:79:98:94:be:83:32:51:3a:72:be:ca:d1:21:e7:
                    98:66:ba:79:1f:b9:74:f1:ca:af:02:62:e9:e5:39:
                    5c:f5:3b:ef:4c:b1:0f:ef:85:6c:7c:19:20:79:82:
                    10:d8:30:35:dc:d0:33:75:d2:0c:66:ce:98:e1:a3:
                    0c:ed:67:67:ed:de:12:ec:30:f9:40:5d:b3:3a:58:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:49:6F:0E:60:E0:4D:DA:80:75:0C:7C:8D:66:7A:C7:7E:8B:12:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/7dd9fce2-0cca-3fa6-9222-98f1df4a9d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee/34d1b905-337d-46f2-b028-65359c387fee.crl

            X509v3 Authority Key Identifier:
                keyid:13:95:BF:1E:0C:4F:C8:E2:4F:2A:40:0A:33:2A:60:5B:83:C8:D9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34d1b905-337d-46f2-b028-65359c387fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:ef:00:a0:4d:ff:96:8b:ab:a3:38:6d:6c:5b:28:a2:2a:
         e7:1f:56:3f:a4:6c:ee:2b:11:c0:6f:32:2c:48:3f:d8:70:b3:
         2d:ab:09:c3:f5:1e:af:0a:79:58:6c:a1:49:24:9a:39:fc:bc:
         ce:45:c4:18:26:dc:ae:47:a6:b9:7a:70:95:f7:5f:01:8b:b1:
         71:12:06:6a:4b:d6:c0:00:45:3b:70:ef:f6:ab:9b:d3:90:49:
         23:64:88:2d:31:c5:54:4a:30:16:8b:ca:96:19:cd:26:8c:c5:
         ae:44:19:79:e8:b6:27:da:0b:1f:e5:6b:7d:da:6e:d3:2e:e7:
         04:18:6d:23:3b:3d:e7:b7:35:c2:cd:b3:7e:f8:38:8f:fa:a9:
         41:37:16:68:58:4e:53:20:75:89:c9:b1:d3:8f:da:14:38:75:
         b1:93:12:dc:ef:d5:29:78:5d:77:f2:f3:47:3e:fa:22:26:fa:
         3c:94:69:4e:66:3a:a4:b7:8b:0f:f1:18:c8:d9:e6:99:86:7d:
         0e:a2:22:ab:50:8c:52:47:e4:21:36:1c:ac:bb:67:6f:b4:45:
         d3:00:83:f8:90:47:95:81:08:12:2f:03:3d:cc:7a:c6:5d:fc:
         d4:97:a9:dc:96:b3:2e:7e:ef:96:13:4e:0c:9f:cc:c5:5b:91:
         fd:23:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:09:20 2026 by rpki-client