Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/731fc45d-5836-3b2e-8759-3b5b8d5dea2e.roa
File:                     731fc45d-5836-3b2e-8759-3b5b8d5dea2e.roa (raw, json)
Hash identifier:          wtcBVugHsQit9c6A3F7YT0aoXXT5qSWW2cqyumtlOlo=
Subject key identifier:   77:AA:9B:42:E7:9A:F5:99:AB:D4:40:06:41:1D:3B:79:39:6B:FB:93
Certificate issuer:       /CN=5ba004db-1efd-4272-b777-2fdf9dd9dcf1
Certificate serial:       010D0C9F4328584D5CB4F1992EDB11D16615A800
Authority key identifier: A2:E9:61:61:C1:16:55:C6:AF:A4:43:4B:6C:52:11:61:33:E3:C2:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/731fc45d-5836-3b2e-8759-3b5b8d5dea2e.roa
Signing time:             Wed 01 Apr 2026 13:00:30 +0000
ROA not before:           Wed 01 Apr 2026 13:00:30 +0000
ROA not after:            Tue 30 Jun 2026 13:00:30 +0000
asID:                     152918
IP address blocks:        23.148.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:b4:f1:99:2e:db:11:d1:66:15:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba004db-1efd-4272-b777-2fdf9dd9dcf1
        Validity
            Not Before: Apr  1 13:00:30 2026 GMT
            Not After : Jun 30 13:00:30 2026 GMT
        Subject: CN=e3f6cb64-9c0b-4bdf-a0a9-70d0a74784f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:15:2d:d0:41:80:90:dd:93:f1:b3:d5:03:3b:
                    9e:f6:da:60:ec:d9:ae:a5:8d:71:91:e0:29:e2:1b:
                    ed:66:9d:f9:c5:2e:38:af:96:1f:05:13:0b:77:9c:
                    20:53:83:ff:06:05:8a:bc:2f:23:97:03:13:0c:65:
                    de:f6:9c:5a:e2:d4:d0:a2:77:63:d4:ed:91:4e:e2:
                    f1:69:ba:9f:ff:43:a4:2a:57:e8:89:bb:64:3f:a4:
                    91:e2:32:91:c7:e4:f7:a5:2f:35:fc:5e:96:25:e9:
                    08:e0:26:61:8e:0a:12:f8:d7:9f:d6:94:52:5b:ee:
                    69:6f:15:cc:29:71:32:6f:a1:09:4d:93:f1:21:64:
                    c2:f3:4e:85:75:06:30:fd:15:1c:c3:cf:5a:f9:05:
                    68:b2:28:b4:85:13:fe:f6:e5:29:5a:71:c3:91:54:
                    48:76:61:2e:1a:8c:2a:44:b6:d6:1e:64:c8:89:83:
                    76:14:8f:9f:46:71:82:ad:5e:56:f6:2a:ff:49:c1:
                    07:8b:80:8c:47:f8:2a:56:fc:8d:97:d6:54:c3:4f:
                    d8:d2:d7:29:75:2b:77:0f:be:f1:b1:51:2d:94:76:
                    b1:f1:a2:2d:52:15:a5:f4:b5:68:37:c7:b8:62:ec:
                    2e:59:f3:be:10:2b:27:83:5e:33:64:f9:85:bc:33:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AA:9B:42:E7:9A:F5:99:AB:D4:40:06:41:1D:3B:79:39:6B:FB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/731fc45d-5836-3b2e-8759-3b5b8d5dea2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E9:61:61:C1:16:55:C6:AF:A4:43:4B:6C:52:11:61:33:E3:C2:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5ba004db-1efd-4272-b777-2fdf9dd9dcf1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:f1:a8:54:da:da:2b:2c:0a:25:a4:35:9a:69:36:b9:5e:
         84:56:ee:d4:b3:5c:7f:a7:80:04:93:2f:cb:9a:6b:c0:1c:5c:
         0e:0b:5b:ae:5a:15:67:70:4f:21:46:04:07:1e:3a:a1:55:5c:
         18:fd:72:fd:6c:ac:05:d8:e3:d4:86:9b:3d:fb:be:89:9a:ab:
         d4:07:b8:42:b2:bc:98:c3:03:f5:b1:e6:4f:f6:d4:19:94:27:
         c2:b0:ff:03:ab:11:96:36:0f:06:66:1d:7b:fd:c6:8b:4c:62:
         f8:d9:ae:b4:a0:c3:88:4a:d2:ab:3f:e5:d9:13:9c:32:7c:ea:
         cc:49:08:86:c2:84:4a:18:99:38:41:cb:6a:6f:25:78:3f:a0:
         e2:9c:d3:15:38:08:68:4f:d4:4e:ff:c9:e7:d2:ab:b5:ac:16:
         67:d5:5e:47:a8:19:be:e4:7b:d6:98:1a:0e:24:48:ae:d9:b2:
         f9:48:27:f1:b1:0e:50:3d:f9:88:46:76:1f:d6:a6:23:92:62:
         a2:c9:d1:e3:fe:66:66:cd:70:9b:fa:17:5b:43:71:33:f1:93:
         1a:1d:36:f3:9c:a3:25:c3:50:21:90:d0:9e:85:68:6a:d3:96:
         08:07:f7:5a:25:66:7d:44:3f:2f:24:95:21:44:10:55:86:f3:
         67:82:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:58:03 2026 by rpki-client