Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/b4e94829-d0c2-3eb6-81e7-01adab0bdcf8.roa
File:                     b4e94829-d0c2-3eb6-81e7-01adab0bdcf8.roa (raw, json)
Hash identifier:          w+7f/awQf+i+2xRzNXpntZmUIyHIYGYcOh26BfuG330=
Subject key identifier:   49:29:DB:95:F0:A2:45:EB:25:7C:48:3A:0D:81:EF:44:48:D6:11:D1
Certificate issuer:       /CN=67163ddd-ba7f-4a5f-91d1-39775f79b889
Certificate serial:       010D0C9F4328584D5454E236A8B503A61317C380
Authority key identifier: D9:5F:7A:2F:E4:05:83:B4:7B:A7:95:2F:1F:47:BA:24:00:43:B3:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/b4e94829-d0c2-3eb6-81e7-01adab0bdcf8.roa
Signing time:             Sun 29 Mar 2026 13:00:30 +0000
ROA not before:           Sun 29 Mar 2026 13:00:30 +0000
ROA not after:            Sat 27 Jun 2026 13:00:30 +0000
asID:                     152179
IP address blocks:        23.146.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/67163ddd-ba7f-4a5f-91d1-39775f79b889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/67163ddd-ba7f-4a5f-91d1-39775f79b889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:54:54:e2:36:a8:b5:03:a6:13:17:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67163ddd-ba7f-4a5f-91d1-39775f79b889
        Validity
            Not Before: Mar 29 13:00:30 2026 GMT
            Not After : Jun 27 13:00:30 2026 GMT
        Subject: CN=bae75859-4c68-4071-8216-a2ee309a6d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:fd:83:dc:9c:ac:af:67:52:25:49:ed:3e:
                    6b:a7:9b:6d:f9:8f:1d:48:f3:3d:53:c4:a6:d9:3c:
                    43:4e:67:47:21:60:c4:87:76:6e:26:24:e1:a6:29:
                    46:26:a8:16:4f:d5:1f:b1:f1:52:27:54:52:06:b8:
                    f8:5c:d8:06:a9:42:06:f8:72:89:2e:88:73:1d:29:
                    da:d6:22:e0:e3:c2:82:76:1e:3d:5a:dc:87:e8:22:
                    a2:39:cc:4d:7e:0f:ec:f9:b5:8d:c0:57:64:de:dd:
                    4a:16:69:a2:01:ec:44:a5:b7:64:ee:d1:ba:d4:ed:
                    29:ae:c3:32:b1:be:5a:83:58:ed:82:92:7d:b7:0e:
                    91:48:00:37:62:8b:92:f9:2d:8c:a0:00:17:55:94:
                    d4:d7:08:cb:6f:20:b5:8d:89:7b:b5:b9:db:c7:0d:
                    70:a8:27:6c:6d:4f:5f:7d:4d:11:64:57:6f:29:6d:
                    7f:6c:f6:17:df:63:f0:d1:1c:ab:fa:15:f7:7f:b4:
                    d2:87:ba:c1:5c:67:8f:be:b2:33:e4:70:ca:cf:dc:
                    69:b5:56:0c:5c:42:8c:3e:0b:f2:76:35:26:e2:47:
                    7e:f3:be:71:cd:1c:aa:e8:2c:57:b0:54:e1:29:51:
                    87:8c:13:5e:b1:82:42:8d:62:7f:a8:b2:3d:eb:e8:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:DB:95:F0:A2:45:EB:25:7C:48:3A:0D:81:EF:44:48:D6:11:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/b4e94829-d0c2-3eb6-81e7-01adab0bdcf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889/67163ddd-ba7f-4a5f-91d1-39775f79b889.crl

            X509v3 Authority Key Identifier:
                keyid:D9:5F:7A:2F:E4:05:83:B4:7B:A7:95:2F:1F:47:BA:24:00:43:B3:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/67163ddd-ba7f-4a5f-91d1-39775f79b889.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:53:ad:22:f5:59:0f:78:ed:f5:ff:5b:b0:30:ef:4f:e4:21:
         b5:62:ff:94:63:01:58:09:72:2c:b0:38:e6:b2:65:fe:ff:b3:
         54:87:8e:a5:63:69:e2:d5:2a:e7:73:34:2d:a2:7d:68:9c:17:
         70:c9:1f:cf:27:27:ae:92:d7:ed:fb:04:30:09:cb:61:69:88:
         d7:61:84:71:df:83:10:50:4b:de:92:e7:72:c9:6a:61:34:d7:
         6d:31:e5:17:6a:13:2d:f6:d1:6a:a0:02:e8:b6:98:53:b3:0f:
         24:1b:a1:83:55:6b:6e:59:75:40:ac:b3:f1:fb:6b:71:9d:0b:
         db:97:3f:55:c2:4b:56:a5:2f:ed:78:9b:e5:a7:86:8d:e3:1a:
         59:b9:54:ea:fb:f5:ba:6f:99:34:30:88:ba:02:0d:f8:4e:2f:
         93:bb:e0:58:d4:91:4e:98:2c:ba:07:84:f2:32:ad:ab:bb:ce:
         08:ad:f0:34:8e:a6:70:d3:64:60:b9:7d:54:c2:43:44:11:fc:
         ee:b4:4e:fa:64:c0:b4:16:fd:94:d3:68:79:70:b4:78:c0:dd:
         52:31:58:f3:d2:2f:8a:ae:1e:e9:af:4d:a5:1c:14:c4:f2:b4:
         b6:89:6f:0f:81:2e:ec:a0:fe:a4:bd:de:fe:1f:88:40:25:05:
         19:73:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:08:25 2026 by rpki-client