Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa
File:                     304f2600-cd93-3a8d-a33f-9f57f863cc94.roa (raw, json)
Hash identifier:          d9cLp3FkgpoEFeZwh/Rg+MFYxg3yrB8/KSl33ueX5Qo=
Subject key identifier:   97:C0:D8:2C:80:B1:ED:54:7D:BB:4A:54:9D:50:2F:AD:D7:FC:CC:FE
Certificate issuer:       /CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b
Certificate serial:       010D0C9F4328584D5234FD2B63E3ECD0A51BB580
Authority key identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa
Signing time:             Sat 28 Mar 2026 18:44:38 +0000
ROA not before:           Sat 28 Mar 2026 18:44:38 +0000
ROA not after:            Sat 09 May 2026 20:09:18 +0000
asID:                     396982
IP address blocks:        23.148.252.0/24 maxlen: 24
                          70.40.190.0/23 maxlen: 23
                          2602:f4df:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fd:2b:63:e3:ec:d0:a5:1b:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b
        Validity
            Not Before: Mar 28 18:44:38 2026 GMT
            Not After : May  9 20:09:18 2026 GMT
        Subject: CN=89b42ce4-3c01-47fe-a144-0d0bf0aef8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:b7:6a:d0:49:39:4b:87:c1:6e:ed:da:ce:
                    4e:57:07:bd:70:04:8b:8a:14:5b:11:99:ab:ce:0d:
                    42:e0:f8:4a:43:99:cc:3a:16:36:ee:8d:f4:1e:be:
                    e3:be:e0:6b:60:e2:ac:c2:4d:a6:43:25:89:65:f2:
                    b7:60:47:4e:46:8d:12:e2:d8:af:65:cc:57:9c:6a:
                    fa:aa:e3:4d:f1:80:86:8f:f8:94:48:c7:be:27:4d:
                    e3:57:f6:bf:d0:6a:17:8b:1a:4e:21:a7:fe:90:29:
                    f0:1d:85:1b:f4:4f:ea:87:fb:57:89:8b:0f:27:5a:
                    b4:dc:41:63:b0:ae:c6:32:82:61:b9:1d:6f:d9:f8:
                    2b:c7:80:bf:e5:f5:d7:6e:a5:b5:e2:4a:ce:d2:e1:
                    0f:e3:7c:9c:c7:b6:ec:25:fa:98:94:c8:cf:c3:36:
                    84:72:34:69:84:99:46:be:cf:09:e7:16:a5:62:19:
                    3e:c4:bb:69:1e:22:2d:b7:0c:59:d2:38:2c:62:6b:
                    1a:60:a5:36:93:08:a6:9e:c2:4d:95:3f:8e:30:9e:
                    57:22:d1:b6:8f:db:31:fa:82:ef:32:c1:eb:7a:3f:
                    da:ea:61:b7:ea:20:85:24:7e:76:7f:d0:41:2b:88:
                    ba:f7:73:4a:c2:28:3f:ee:85:6a:8b:04:00:e8:29:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:D8:2C:80:B1:ED:54:7D:BB:4A:54:9D:50:2F:AD:D7:FC:CC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl

            X509v3 Authority Key Identifier:
                keyid:D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.252.0/24
                  70.40.190.0/23
                IPv6:
                  2602:f4df:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:65:ce:28:bd:44:8a:f2:d5:5a:34:df:f0:7b:16:ea:6e:41:
         58:ae:12:b8:b7:a4:e5:a6:bd:90:d4:91:0a:34:f5:73:6d:c1:
         cb:5c:59:81:8c:74:7b:5e:8d:3d:a3:6f:26:d4:00:87:63:a6:
         46:36:e7:69:be:12:44:ff:0e:a5:be:7f:ff:d9:3a:d0:82:45:
         8a:70:8f:e3:ca:51:7c:7e:4b:56:2c:d4:15:0c:e6:ee:47:d0:
         0b:63:f2:1e:db:c9:c1:85:c9:85:e8:80:2b:e0:71:22:90:f8:
         f0:5f:2f:49:7d:4d:f0:e6:67:63:c0:3c:b2:ba:5d:41:37:a7:
         90:6b:fb:49:94:19:ac:68:dc:5c:69:59:7f:c8:69:3b:98:55:
         b6:87:d3:cc:0e:89:83:25:07:16:f4:19:f6:d7:42:17:04:95:
         04:9d:2b:e5:16:55:75:43:4c:89:ed:7d:03:b4:bd:f5:bb:ec:
         a0:9a:82:96:e4:a6:7f:52:06:f1:8c:4e:00:76:77:f1:1f:21:
         74:8b:f5:a4:af:b5:00:bc:58:e3:be:ec:ca:92:b8:3b:88:75:
         23:56:1b:3b:b9:42:62:1f:19:a3:67:a5:ca:2f:a0:62:2f:f8:
         8c:61:89:5b:b3:09:0a:0d:1f:b4:f3:ea:79:28:86:62:f9:5c:
         63:f2:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 04:09:30 2026 by rpki-client