Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/c58b258b-197e-3941-b20b-0eb2ae16d229.roa
File:                     c58b258b-197e-3941-b20b-0eb2ae16d229.roa (raw, json)
Hash identifier:          vN3Sh6DNktynOhh6N9hpiM/uxD4yGwmiXqWDwL3vSiU=
Subject key identifier:   55:56:08:5E:C1:A9:50:F4:96:CC:8B:A3:14:3B:74:97:24:74:5F:3E
Certificate issuer:       /CN=6b527806-37a2-4d56-8213-ee9130cd0038
Certificate serial:       010D0C9F4328584D65153EE371E9C6A7A3CBEAA0
Authority key identifier: 07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/c58b258b-197e-3941-b20b-0eb2ae16d229.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     400760
IP address blocks:        23.141.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:3e:e3:71:e9:c6:a7:a3:cb:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b527806-37a2-4d56-8213-ee9130cd0038
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=ee1b8751-9eae-43d0-b31e-19ebc6fb87a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:49:2c:ae:48:2d:55:94:5f:81:6d:47:72:
                    e0:a0:0d:74:84:cb:f4:bf:14:16:03:10:63:33:8c:
                    84:84:db:87:56:a4:8e:51:64:0c:d7:29:7f:ad:ca:
                    7f:9b:fd:99:e8:8b:95:5a:c1:31:e5:d1:90:59:b7:
                    b5:43:d6:a5:d2:fe:70:71:91:a5:49:37:89:8c:b4:
                    9a:1e:e9:07:a1:cd:33:d7:10:fb:bd:9a:18:76:be:
                    d3:78:7e:12:7a:a4:87:c9:ae:a3:d5:ce:62:6e:8d:
                    c0:92:11:98:56:00:50:4e:b8:32:70:ac:9e:2a:b9:
                    db:35:2e:f7:a3:62:4e:0c:f4:88:65:57:b1:9f:11:
                    05:2d:bf:e0:57:d1:7b:e3:0b:8d:5f:d7:1e:cf:4a:
                    35:bd:b4:f6:6d:75:05:4f:32:61:7b:f7:c9:a6:ac:
                    9d:59:22:12:e4:d2:1b:40:18:df:23:95:35:50:a2:
                    75:75:6a:af:d4:f1:eb:ee:63:40:63:e5:40:01:64:
                    52:78:01:28:f6:c5:c5:4f:d2:8e:53:29:13:da:73:
                    27:96:a9:bf:c5:a9:98:97:e9:12:80:74:e2:d5:05:
                    01:b6:58:f6:71:d9:79:f1:07:1c:75:c1:92:de:27:
                    9b:be:cb:84:3e:28:83:8f:fa:04:4d:7e:27:71:a7:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:08:5E:C1:A9:50:F4:96:CC:8B:A3:14:3B:74:97:24:74:5F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/c58b258b-197e-3941-b20b-0eb2ae16d229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl

            X509v3 Authority Key Identifier:
                keyid:07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:57:5d:38:55:ce:48:d1:82:6c:e3:00:7a:ef:83:fa:7c:
         a2:d6:ed:9d:ea:c3:cd:ee:b1:ac:b0:b6:ee:18:1e:4f:85:00:
         db:44:50:f3:95:88:23:6f:0e:65:de:73:ae:2a:d4:86:db:69:
         b5:cc:de:83:99:e7:cf:90:71:18:78:db:9d:a5:59:a0:cd:58:
         b8:ac:83:07:a1:7e:75:23:3b:3a:86:e6:45:c3:9f:11:92:c1:
         77:e6:51:ec:92:29:35:36:6b:78:18:d0:8c:43:b2:55:c0:83:
         fd:e1:7b:79:d3:28:d1:80:5a:a8:54:9b:38:85:94:63:a9:9e:
         0f:08:3e:2b:22:f3:69:b4:e2:88:49:c6:51:d1:a1:24:74:a4:
         a4:a9:88:37:21:9d:6d:e6:17:bd:6a:9c:df:a1:b9:d2:20:29:
         31:b2:ac:e0:3d:9e:94:50:eb:74:e5:31:ce:67:bf:c1:cb:55:
         eb:e4:3e:08:e3:9f:75:e1:f7:68:fc:dc:4e:a4:bb:61:f6:6c:
         68:a7:26:cb:b9:f6:33:4e:06:0f:04:06:0a:ce:7b:e1:f0:af:
         ab:5f:e3:5a:76:57:11:7e:fd:72:8f:f4:29:72:89:4c:ae:3a:
         ee:0b:dd:6f:e9:1c:ab:f5:bd:48:3b:02:c9:15:41:d5:9b:12:
         21:1c:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:18 2026 by rpki-client