Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/67e2c40a-6066-3103-8de2-c9344dbe943d.roa
File:                     67e2c40a-6066-3103-8de2-c9344dbe943d.roa (raw, json)
Hash identifier:          0DxSbBn3ffgYnDkPJ35vwQAk5n9zVVOQ3KJCWnzKR1k=
Subject key identifier:   C2:EB:6E:DB:9C:CE:91:AD:4C:98:7F:EC:F7:F3:A3:36:D0:0F:01:D8
Certificate issuer:       /CN=a147e187-b8c3-49c2-a3ce-43f40332387c
Certificate serial:       010D0C9F4328584E4AEF462A37C3C4E92DB2ABD0
Authority key identifier: B0:3D:57:00:7F:9B:A4:9C:5E:51:E1:65:84:DD:B3:A8:B8:F0:34:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/67e2c40a-6066-3103-8de2-c9344dbe943d.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13717
IP address blocks:        23.170.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/a147e187-b8c3-49c2-a3ce-43f40332387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/a147e187-b8c3-49c2-a3ce-43f40332387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:46:2a:37:c3:c4:e9:2d:b2:ab:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a147e187-b8c3-49c2-a3ce-43f40332387c
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=e36a7145-16f5-4831-9872-5033fec5f201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:93:69:c4:ce:26:21:bc:73:4b:07:fc:9e:
                    be:60:4d:a2:78:d0:c6:eb:14:40:66:d9:63:4d:03:
                    08:6a:17:7b:28:54:0c:65:aa:1a:84:cf:be:e2:b6:
                    15:6e:53:96:1b:96:37:d6:8c:24:32:8c:ee:6a:16:
                    9e:78:d6:cb:99:39:a0:f3:83:4d:50:bf:1d:77:49:
                    96:de:1f:19:47:5b:5f:d7:1e:18:e0:20:68:b3:40:
                    34:de:77:0a:b0:6a:5c:3c:f6:23:0a:02:f8:a3:04:
                    ac:ea:a9:51:e3:8a:20:e6:73:14:af:10:3b:57:05:
                    88:63:df:c0:69:e0:e1:ab:9a:cd:eb:be:d3:83:53:
                    90:cc:91:8c:dd:87:a6:54:32:af:65:97:91:96:b9:
                    ce:5e:bb:4a:c9:fa:58:11:fd:47:bb:89:b7:54:b6:
                    ce:00:2d:82:d4:4a:be:b0:c2:f9:83:6f:23:c0:76:
                    55:a4:3c:0e:b1:e8:03:8b:0a:3f:80:e4:c2:26:e7:
                    67:b0:3b:24:66:cf:a6:86:4e:b1:bc:bb:52:4a:d0:
                    c4:39:6a:5c:6c:08:7b:a5:8d:e0:68:68:1a:69:48:
                    c8:87:5b:2b:7b:ca:94:8b:38:53:ee:3c:00:45:b6:
                    29:24:d5:71:00:42:0b:99:b2:19:3c:96:c3:e6:bc:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:6E:DB:9C:CE:91:AD:4C:98:7F:EC:F7:F3:A3:36:D0:0F:01:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/67e2c40a-6066-3103-8de2-c9344dbe943d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c/a147e187-b8c3-49c2-a3ce-43f40332387c.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3D:57:00:7F:9B:A4:9C:5E:51:E1:65:84:DD:B3:A8:B8:F0:34:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a147e187-b8c3-49c2-a3ce-43f40332387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:3d:ed:f7:41:46:6b:c8:22:eb:f2:3a:a5:4f:b4:39:58:
         9b:4a:ef:88:41:a0:fc:4c:b9:3d:e6:71:33:f4:81:2b:01:a0:
         5e:82:72:d9:d2:8f:ed:8e:b5:67:f6:63:d1:b8:ba:a9:60:ae:
         d7:54:8b:3c:6e:fa:25:ae:8e:5e:43:a2:f5:29:4d:56:14:54:
         d2:42:2f:21:f5:34:c6:9e:1c:a8:4c:98:8a:4e:34:28:81:11:
         de:f7:e7:f0:81:4a:2b:16:93:c0:38:5d:36:61:91:38:ed:d7:
         fd:c7:2d:0e:48:ee:92:5f:d9:d5:38:71:bf:c4:84:14:91:d7:
         62:f7:4b:1e:45:cb:53:2d:c0:6b:83:f8:e1:d4:9b:f9:36:da:
         10:03:fb:45:9a:b6:70:8a:e5:e8:7c:e7:01:5d:0b:eb:ce:5d:
         ff:99:e8:7e:98:51:be:70:d5:2f:02:6b:08:74:9e:f4:c6:82:
         64:c1:63:71:35:74:3c:ab:c7:bc:92:0b:c5:54:a4:a8:cd:42:
         04:96:60:ea:04:5c:84:a3:28:38:7f:58:a0:80:02:c1:18:cc:
         2e:cc:a8:fd:b6:ac:fd:97:6c:a3:1a:cd:5c:5b:64:9c:14:8a:
         5d:05:e2:96:cf:5a:a6:12:df:41:dc:54:15:d0:aa:3b:9d:f4:
         62:c4:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:50:39 2026 by rpki-client