Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3037fa29-18e5-336a-9fc1-a30ab5e111ef.roa
File:                     3037fa29-18e5-336a-9fc1-a30ab5e111ef.roa (raw, json)
Hash identifier:          bzuYsVhVBvwx2PeGTSQZsuK3iUsv0Z3Hd/mI+4saY2g=
Subject key identifier:   B5:21:37:24:34:33:60:C3:7E:0D:AE:05:08:9B:02:EA:D4:E7:25:C2
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584DE88BA912E9A5A3CB358AC7B0
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3037fa29-18e5-336a-9fc1-a30ab5e111ef.roa
Signing time:             Thu 21 May 2026 15:10:31 +0000
ROA not before:           Thu 21 May 2026 15:10:31 +0000
ROA not after:            Wed 19 Aug 2026 15:10:31 +0000
asID:                     13335
IP address blocks:        23.235.168.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:8b:a9:12:e9:a5:a3:cb:35:8a:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: May 21 15:10:31 2026 GMT
            Not After : Aug 19 15:10:31 2026 GMT
        Subject: CN=397af099-60ca-4164-825e-9220bfce3134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:75:7d:9c:fc:22:56:59:73:7d:f2:3e:e6:
                    a2:8e:de:25:b5:9a:4a:91:19:50:cc:69:b2:87:43:
                    70:a0:e2:7f:41:59:ca:85:ef:24:59:fe:40:bd:35:
                    0c:8f:b1:4c:4e:4e:69:40:86:5f:42:bd:eb:b3:90:
                    45:1a:f1:6f:50:d4:fb:4e:95:cd:fe:ae:58:e7:52:
                    d0:81:d5:a0:b9:80:e3:a0:40:27:49:4b:25:23:00:
                    53:4a:5f:44:da:46:6c:40:60:4a:23:0a:8f:58:d2:
                    22:c2:eb:5f:a5:80:0d:98:55:a5:91:60:96:bf:10:
                    d0:2b:d4:68:60:4e:a4:74:6b:f5:d1:80:c8:b9:f2:
                    55:f4:d1:95:b9:43:c1:2d:5f:04:dc:f5:e0:58:ee:
                    ef:a4:8e:5c:98:11:0c:78:2f:9b:3c:8e:d3:91:44:
                    83:3b:6c:d8:17:dc:9c:b6:89:de:8e:9f:f0:b9:c8:
                    14:85:e2:b3:d3:23:19:8e:db:47:c6:4c:91:7f:d8:
                    f8:14:87:7c:9e:15:3d:84:1e:9d:2c:07:16:29:fe:
                    2a:9a:a9:1a:2b:15:4f:dd:d8:5c:7c:f6:0e:fa:a3:
                    41:c2:a2:47:db:34:7c:74:91:7e:aa:4f:4f:b2:81:
                    8b:62:c5:fb:e7:07:9f:f1:91:e7:3b:77:ec:1f:9b:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:21:37:24:34:33:60:C3:7E:0D:AE:05:08:9B:02:EA:D4:E7:25:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3037fa29-18e5-336a-9fc1-a30ab5e111ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:4a:f6:72:bd:56:22:5a:12:56:ab:69:db:ea:59:4a:51:5a:
         0b:87:ef:41:82:8d:cd:52:b6:0e:d1:91:33:e0:04:36:9a:2d:
         76:09:09:cb:5f:cb:54:57:a0:f7:d2:83:ce:11:08:ce:0f:4a:
         aa:b4:79:5a:ee:22:6b:3b:c5:d4:1e:e9:e9:07:f4:87:53:78:
         fb:fc:54:12:92:8c:90:aa:09:64:39:58:3b:41:ae:72:4c:0a:
         4e:5f:b3:86:10:f0:b0:01:55:a2:a1:b6:66:bf:01:ee:e5:fc:
         f9:75:fa:ad:25:ff:5b:72:34:b4:30:fb:5f:52:82:06:32:9b:
         25:46:2b:fc:c8:be:a8:ef:d2:c1:16:8f:09:79:1b:bd:a9:62:
         32:22:5c:54:66:b1:2c:94:ad:f8:cb:c1:86:c9:31:41:fe:e7:
         ed:02:f0:fa:1f:e0:c4:5e:42:45:bd:76:13:53:cd:dc:dd:0f:
         ba:02:34:2a:31:56:50:aa:2e:f0:5f:d2:33:a4:1e:6a:70:80:
         7f:c8:1e:b1:28:82:bd:4b:c8:a9:e6:2a:40:0d:b3:ba:66:e0:
         0a:0f:7a:30:94:05:f2:71:94:3c:0f:e1:9e:ff:a7:4c:83:96:
         cf:38:7c:61:9e:13:58:05:8e:16:80:32:69:d6:1b:46:f7:76:
         a6:dc:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:09 2026 by rpki-client