Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa
File:                     2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa (raw, json)
Hash identifier:          KA/603baFwhPBPOFIxRbzYeCo/xW38+YOewGVmDQiXo=
Subject key identifier:   34:3D:A2:61:BC:4D:13:07:92:8C:59:1E:FF:E9:CC:79:37:E7:23:57
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584E4AEF4507ADB6B5D21E004200
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     138643
IP address blocks:        23.226.57.0/24 maxlen: 32
                          23.248.217.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:45:07:ad:b6:b5:d2:1e:00:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=1206f670-afb0-405f-a1fe-82f73e49e9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3a:e4:fe:38:e2:97:6f:9e:26:93:f4:4c:17:
                    6f:a6:da:b5:d6:9b:cd:ca:ad:25:92:ae:93:f3:74:
                    17:4c:0a:12:68:7e:2b:a0:fb:2f:fb:2c:88:de:a5:
                    bb:fa:fc:4e:62:ee:39:d4:8b:11:2f:46:29:66:34:
                    6e:ef:82:a7:98:59:7c:78:40:bb:8f:ea:64:a4:e7:
                    0d:de:27:28:f2:fd:e3:e9:b2:1c:d4:61:a3:b2:21:
                    f3:77:e9:9b:a5:39:cf:7a:8d:de:32:c6:4e:54:aa:
                    c4:da:f6:8d:af:e2:c3:d3:e1:cf:31:85:fa:37:e5:
                    ba:3b:02:73:15:24:fb:db:92:20:c2:f2:25:fd:03:
                    fe:84:37:82:48:a5:5d:ee:46:fe:6b:95:44:25:9a:
                    5f:52:d7:5b:8b:90:7d:4d:92:0c:d5:ad:a9:b1:f0:
                    f8:20:37:61:e1:89:ba:93:5b:c3:5c:55:20:09:9f:
                    a8:53:0f:ff:23:a8:2b:89:dd:40:d5:a3:9e:99:0b:
                    33:af:cd:01:28:f6:44:67:57:4d:98:56:89:ba:77:
                    86:2c:22:bd:22:cf:f0:aa:ad:67:75:aa:5e:a2:ec:
                    4d:b1:3b:ca:68:01:82:2a:48:95:2c:8e:9e:e7:8e:
                    aa:bc:56:39:23:9c:30:9a:55:56:22:6f:8e:66:26:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3D:A2:61:BC:4D:13:07:92:8C:59:1E:FF:E9:CC:79:37:E7:23:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.57.0/24
                  23.248.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:29:ff:ae:4c:b9:19:81:eb:7a:69:b2:c9:cc:2b:d0:f2:
         01:f2:8d:b9:b0:09:83:08:b1:70:39:0d:df:22:43:23:ed:4e:
         a1:2e:d9:15:ca:d3:48:30:da:19:11:8a:ec:d1:14:13:e0:91:
         0d:40:c6:a5:f6:b1:ee:eb:4d:77:f4:cf:8d:18:02:57:79:54:
         f2:6a:0f:13:3d:74:a1:d4:ba:1c:d8:38:96:05:d2:28:8b:b3:
         f5:20:ce:f1:47:45:cf:53:82:86:63:d4:06:2c:4c:ee:23:da:
         63:50:2a:6c:d5:f2:41:12:ac:cd:01:ef:70:44:12:42:b6:f4:
         2c:65:e4:98:eb:dc:17:0c:60:bb:94:22:e6:20:eb:13:7e:bc:
         44:19:63:43:e8:28:4e:ea:d6:10:7a:08:4e:29:64:78:ae:0d:
         2f:c1:8f:e5:bf:2a:42:72:97:44:da:33:6b:56:10:33:02:d0:
         b8:f5:b2:c3:6f:e4:d8:cf:10:65:e9:e6:81:dc:dd:26:38:2c:
         b5:7d:44:e2:da:cf:a0:ad:9e:15:a7:b1:41:42:2c:22:d1:a9:
         a5:51:8f:bc:70:8f:a8:c0:c8:3c:da:d4:36:d5:6d:a5:c3:e5:
         da:9e:cd:5f:54:3e:6e:7a:05:14:37:68:90:56:e6:63:98:55:
         dd:9d:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 04:37:25 2026 by rpki-client