Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/31b65189-8eb2-3493-9618-10fee67e4d35.roa
File:                     31b65189-8eb2-3493-9618-10fee67e4d35.roa (raw, json)
Hash identifier:          KPaKNGI5G7Ab7/UwY9wci4hnja3jNBQVIpa24L5RAiw=
Subject key identifier:   1B:88:B3:6F:79:12:35:47:17:D6:C7:84:92:AC:1C:40:8D:D3:D0:32
Certificate issuer:       /CN=3b8b33e0-517e-41cb-b3e3-00af3defc90b
Certificate serial:       010D0C9F4328584E2C39A50325F07A1A15828B00
Authority key identifier: BC:32:2A:02:6C:EB:43:9C:43:AF:C1:25:62:9F:AC:CA:38:1B:D8:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/31b65189-8eb2-3493-9618-10fee67e4d35.roa
Signing time:             Sun 14 Jun 2026 21:00:12 +0000
ROA not before:           Sun 14 Jun 2026 21:00:12 +0000
ROA not after:            Sat 12 Sep 2026 21:00:12 +0000
asID:                     214483
IP address blocks:        23.150.188.0/24 maxlen: 24
                          2602:f4af::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2c:39:a5:03:25:f0:7a:1a:15:82:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b8b33e0-517e-41cb-b3e3-00af3defc90b
        Validity
            Not Before: Jun 14 21:00:12 2026 GMT
            Not After : Sep 12 21:00:12 2026 GMT
        Subject: CN=09970540-845f-4aa6-b058-23f8b1d8f486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:7a:26:cb:f8:2a:c5:46:d5:2c:f8:27:91:
                    ee:4b:e5:d9:16:00:4c:44:47:47:40:77:6c:21:62:
                    6a:cc:c9:4e:49:c8:a9:97:ed:a2:9b:c0:0a:83:74:
                    a9:c8:c5:b7:81:25:84:7f:24:d2:56:63:98:04:3b:
                    84:dc:e8:dc:2b:a7:9e:2b:14:a9:18:08:a0:b3:3a:
                    4e:93:85:2b:07:29:4c:1b:2a:45:2b:fc:a1:80:f7:
                    8e:33:77:09:cc:2e:12:78:2e:20:cb:e8:7f:1f:23:
                    60:66:54:2c:2c:37:ae:57:c9:5f:f8:b6:dc:25:e7:
                    9d:f0:90:6c:14:b3:be:8b:f5:0f:f0:48:a7:d6:3d:
                    92:bf:4a:58:cb:ec:9a:53:37:f2:f8:11:aa:3c:71:
                    7b:16:e0:0f:39:10:01:7a:8c:ba:54:b3:52:38:96:
                    81:24:93:b4:41:58:4a:fc:e7:b5:65:c8:bc:a0:21:
                    6e:02:f1:44:05:b7:0c:06:22:23:2f:81:2a:b9:7c:
                    f6:bb:fa:9d:7a:ac:0d:6d:4a:42:b0:4e:e7:2d:9d:
                    4a:f5:9e:62:a1:45:e0:47:aa:58:d3:2c:15:9e:1f:
                    53:bf:0c:d0:d8:af:28:b0:b2:e9:d8:93:a2:af:d1:
                    6d:dc:fc:c8:f7:50:5e:50:f6:36:ce:0c:a8:93:e1:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:B3:6F:79:12:35:47:17:D6:C7:84:92:AC:1C:40:8D:D3:D0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/31b65189-8eb2-3493-9618-10fee67e4d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.crl

            X509v3 Authority Key Identifier:
                keyid:BC:32:2A:02:6C:EB:43:9C:43:AF:C1:25:62:9F:AC:CA:38:1B:D8:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.188.0/24
                IPv6:
                  2602:f4af::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:fc:0a:7c:c4:58:2f:7a:4a:e3:63:86:88:c3:60:3f:35:
         8f:4c:9e:06:86:72:f6:08:3c:36:5d:f0:41:f8:1c:58:ec:21:
         cd:50:a0:cf:ef:48:02:d4:31:5f:09:ff:8d:36:3c:77:7b:83:
         f4:3e:b0:c4:8e:b2:70:90:64:74:c9:ce:a9:90:1d:3e:e7:b3:
         f5:49:c3:94:3b:62:64:1c:1f:d1:41:7f:0d:17:c6:91:39:c7:
         66:53:fd:39:ad:d8:74:38:6c:13:d7:fa:7f:e0:18:97:be:2a:
         07:e3:b3:7e:6b:df:3a:4b:ed:c1:c4:51:4a:5b:34:10:71:9a:
         d1:6f:ae:7a:64:f1:3d:ef:2e:68:30:83:60:64:85:f0:73:aa:
         e1:6d:62:6c:83:1b:7b:cc:51:0a:3e:b6:ea:57:7d:46:35:d6:
         20:fc:55:66:63:40:1d:b7:e8:3e:df:78:d6:db:68:33:a8:b6:
         35:f5:b9:8c:e6:54:81:d4:92:9e:3e:5f:1d:2b:9a:7b:89:d0:
         b0:4f:c3:29:a7:65:4c:d7:09:a5:01:8e:1a:da:1f:c8:c9:b7:
         e3:db:c7:b3:7a:07:b9:ab:ab:8f:ae:6e:f0:f2:a7:83:8f:ed:
         df:c5:95:1c:73:5b:47:70:0e:5f:1d:63:2b:5f:3b:24:99:a9:
         8a:b5:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 03:05:51 2026 by rpki-client