Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/e601058c-5974-3a51-a610-ced957e767ca.roa
File:                     e601058c-5974-3a51-a610-ced957e767ca.roa (raw, json)
Hash identifier:          hIsV6wqsLSG4mXT+OnSZFCpbsplCciqQ8fZDUi7gUN4=
Subject key identifier:   BF:26:56:24:68:F7:52:11:F4:29:3C:B6:1B:39:3B:4A:ED:AB:8C:E1
Certificate issuer:       /CN=47ebfec0-de9f-4253-8391-0bb6095c8f7c
Certificate serial:       010D0C9F4328584E5619F351BC27A43C11441100
Authority key identifier: 14:B1:65:46:D5:84:9B:8E:BC:81:4C:47:84:7B:83:03:B9:4C:46:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/e601058c-5974-3a51-a610-ced957e767ca.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     7356
IP address blocks:        23.133.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f3:51:bc:27:a4:3c:11:44:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ebfec0-de9f-4253-8391-0bb6095c8f7c
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=ded91fd5-0992-4e35-af65-8b0d5b8b6bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:ac:2b:22:db:6d:e1:15:cc:bf:de:7a:86:
                    f6:11:c3:3b:e5:3e:fe:16:5c:e6:8a:02:8b:77:46:
                    ab:bd:f5:ce:17:2d:d2:68:40:28:31:32:ac:a4:3d:
                    16:2d:33:cf:ca:a8:d4:84:a7:31:fa:ca:fc:ff:ff:
                    32:0c:83:4b:d0:fe:f2:11:31:2f:73:3d:15:4d:e0:
                    8f:87:24:c1:75:4c:ea:f7:75:20:7a:6d:96:ef:7b:
                    f6:77:47:86:32:70:dd:cc:ea:7e:7e:64:dd:c9:99:
                    a8:0d:70:f1:1e:e7:2d:eb:26:8a:c2:99:0e:64:2b:
                    83:c8:7e:5b:f1:02:62:ec:1c:90:15:bf:e5:ef:37:
                    9a:b1:64:a2:b6:4a:8d:dc:77:19:b2:29:a3:a4:1d:
                    31:d7:49:f6:15:b9:f1:89:49:86:7c:f3:d7:9e:d7:
                    da:64:ce:b4:2c:86:59:2d:e0:e1:80:34:51:de:05:
                    e7:3c:87:93:ee:c9:cd:7f:e7:1f:3b:4b:bd:0f:f1:
                    06:d8:ce:76:02:05:61:94:5e:ed:9f:2f:4d:53:53:
                    63:85:50:21:34:97:1d:9e:48:82:d7:40:2b:88:ae:
                    40:c0:0f:02:ed:7b:e8:c4:8f:18:a1:6a:29:05:2b:
                    33:93:7e:62:8b:fe:1a:11:e2:24:de:ce:0b:ba:f8:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:26:56:24:68:F7:52:11:F4:29:3C:B6:1B:39:3B:4A:ED:AB:8C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/e601058c-5974-3a51-a610-ced957e767ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.crl

            X509v3 Authority Key Identifier:
                keyid:14:B1:65:46:D5:84:9B:8E:BC:81:4C:47:84:7B:83:03:B9:4C:46:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:84:3b:59:83:fb:49:f2:88:22:55:f2:ac:27:e8:50:57:c3:
         a2:c6:2d:cb:52:f4:ea:a6:81:9c:d6:50:06:95:47:9b:f3:57:
         2b:be:57:d9:54:27:af:34:73:56:05:c6:b9:78:06:c5:df:f0:
         3e:d6:13:58:a6:d1:9e:2e:00:41:d0:78:f9:b8:a2:67:ce:c9:
         dc:a6:d8:2f:ed:9c:9a:b6:e8:93:cc:ad:b8:17:0b:8b:11:f5:
         2d:94:1f:71:bb:35:8a:aa:e6:cc:96:06:23:20:58:7f:56:62:
         6e:7f:13:43:fc:3c:d5:3e:68:70:08:5e:26:ee:06:4b:4a:0f:
         4e:1e:44:2f:04:cf:a3:c0:02:d4:d7:47:da:fc:c3:fe:a0:49:
         de:35:33:9b:39:01:4a:32:2f:03:fb:86:49:d4:ce:96:85:c9:
         dc:d0:38:d2:a7:99:f8:4e:02:3c:bc:05:3c:70:d7:44:a8:8e:
         82:a4:fb:26:35:74:68:f5:5a:d4:36:36:9b:34:97:57:4d:17:
         ba:87:1d:57:b1:14:e2:4a:64:f0:42:a4:28:4e:05:de:40:28:
         bf:70:22:06:19:71:23:f1:fa:b4:95:05:4d:6d:50:aa:b3:14:
         04:43:58:c9:97:2d:8e:74:af:6a:1d:4d:9a:61:13:37:33:69:
         b5:c0:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:05:29 2026 by rpki-client