Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/4c50f12e-00b1-369c-bd0c-e4874d03b817.roa
File:                     4c50f12e-00b1-369c-bd0c-e4874d03b817.roa (raw, json)
Hash identifier:          BRTir7uYxEtoaFvOzFelo871dHk55T2Gnvc73jnaMzw=
Subject key identifier:   96:40:22:FA:B5:94:CC:B2:1F:5A:FF:C5:48:17:29:E8:24:34:D8:45
Certificate issuer:       /CN=f628cf4a-b330-4609-8c85-bdee7cf18d7d
Certificate serial:       010D0C9F4328584D65153940EA81B938DDEE9B40
Authority key identifier: 1A:3A:65:D8:D8:C1:65:CE:F2:EE:80:4B:E6:18:8A:FE:04:62:33:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/4c50f12e-00b1-369c-bd0c-e4874d03b817.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     2914
IP address blocks:        23.135.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:39:40:ea:81:b9:38:dd:ee:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f628cf4a-b330-4609-8c85-bdee7cf18d7d
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=d1110500-1cba-4897-a6db-02a7ec9598d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:81:de:df:b5:ec:54:c9:dd:fb:fd:eb:fb:
                    4b:ad:69:35:c6:4c:df:ff:1b:2b:1e:ae:97:83:0e:
                    42:1b:40:c5:fd:1c:1a:df:d7:43:8f:b0:76:54:5d:
                    52:11:56:b6:05:9d:04:00:36:90:6c:e8:df:34:30:
                    98:99:3c:69:0d:26:27:0b:81:6b:2f:db:e1:27:06:
                    37:c7:34:45:c6:15:ca:62:54:97:74:1b:39:13:00:
                    24:f9:b2:d5:f0:3e:c3:28:2a:11:17:3f:b5:0d:36:
                    2f:78:eb:db:1e:ce:aa:d2:2d:31:0b:aa:e0:b1:b2:
                    89:fa:6c:c9:8b:24:a1:7c:1c:ef:ff:ca:6a:9d:4f:
                    8a:3d:a7:68:b0:dd:7f:13:40:97:7a:53:22:90:5b:
                    98:d3:13:ba:82:73:25:76:8e:34:b7:11:cc:00:12:
                    6e:77:c4:df:7d:1e:76:81:65:98:91:65:55:ff:d4:
                    2a:fa:56:ac:73:b9:0c:30:4a:30:91:f9:eb:02:04:
                    d7:0b:c8:02:9b:d2:ec:ec:e1:a6:1a:ad:38:a1:f3:
                    59:d4:51:fd:04:99:4b:c8:33:7e:ee:8d:fd:08:46:
                    19:02:a7:12:53:8d:10:38:a9:56:eb:90:28:96:ab:
                    5a:21:6c:a1:2b:32:c3:12:18:5c:ee:6d:8a:20:cf:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:40:22:FA:B5:94:CC:B2:1F:5A:FF:C5:48:17:29:E8:24:34:D8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/4c50f12e-00b1-369c-bd0c-e4874d03b817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3A:65:D8:D8:C1:65:CE:F2:EE:80:4B:E6:18:8A:FE:04:62:33:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:41:f2:71:00:d3:7a:25:65:42:ae:92:78:36:fa:32:66:
         de:36:6e:70:f4:e7:cd:27:82:ed:36:9e:89:f2:a0:fc:df:28:
         3b:e1:6e:db:a0:51:5f:ac:7b:f6:eb:b2:0b:0b:51:70:e5:89:
         c5:6a:73:8a:cf:eb:f1:31:d0:1e:93:64:47:c0:13:16:4b:ef:
         be:d5:2f:2f:c9:74:72:90:c2:2f:ab:28:21:d4:ed:b8:91:b6:
         6a:e9:41:e6:86:39:24:76:65:d2:2f:bc:50:86:a4:2b:6a:38:
         53:c6:2e:54:6b:a0:e9:b6:17:d1:9f:6b:2a:7d:dc:f2:d1:03:
         2e:e3:25:60:4a:57:84:2c:9b:4b:4c:8a:c8:98:4e:2c:1a:8e:
         e9:6d:9b:9d:2f:e2:4b:e6:28:9d:72:e3:f5:9d:bf:c8:ab:f0:
         96:50:9b:50:3e:5d:31:eb:87:30:c4:a5:af:55:3b:e9:5c:82:
         2f:ef:15:7f:87:32:ea:7b:ae:15:68:e5:14:6e:ba:3f:d3:0a:
         34:36:88:bc:76:da:5b:82:05:79:b7:df:77:3d:49:69:87:ad:
         55:e1:ef:ab:96:5d:8c:b7:a2:39:d5:68:30:82:6d:44:b1:8d:
         c7:48:b0:af:54:b6:de:ad:58:34:00:98:0f:3e:7b:9e:6d:dc:
         eb:8e:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 04:08:28 2026 by rpki-client