Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/b3aa5067-3544-31fa-a9d9-7a2c079a9030.roa
File:                     b3aa5067-3544-31fa-a9d9-7a2c079a9030.roa (raw, json)
Hash identifier:          F9JcNG8JisLCwqVOU30zaC3VtVdrn2y8qHos9qpJQog=
Subject key identifier:   40:D2:A8:8E:77:B3:A0:DB:2D:86:9B:45:C0:FA:35:B9:28:C7:B1:A7
Certificate issuer:       /CN=22e42724-5d65-4798-a360-69c4707835eb
Certificate serial:       010D0C9F4328584E043631E4E75838CD146FC968
Authority key identifier: 5F:33:31:54:AD:F9:EA:60:C1:97:A7:5E:E9:F9:D9:F1:A4:37:35:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/b3aa5067-3544-31fa-a9d9-7a2c079a9030.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     401854
IP address blocks:        23.142.116.0/24 maxlen: 24
                          2620:da:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/22e42724-5d65-4798-a360-69c4707835eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/22e42724-5d65-4798-a360-69c4707835eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:31:e4:e7:58:38:cd:14:6f:c9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e42724-5d65-4798-a360-69c4707835eb
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=e46abdaf-0c1e-4b69-8543-c2e5c131f6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:8c:62:88:02:99:7d:86:ef:78:ab:04:81:
                    80:8b:06:54:6a:84:ab:f0:22:cc:83:f9:04:c6:3b:
                    85:8a:66:2e:19:e0:32:98:82:bb:f6:f3:f3:2b:51:
                    35:1a:d0:38:ad:54:ac:e0:88:c6:49:7a:43:d5:c7:
                    d3:89:e5:5d:fb:12:b5:c4:98:cf:3f:4f:da:b3:34:
                    5b:5d:d6:c3:ee:61:c1:69:bf:dd:8c:9b:8d:cb:17:
                    cb:25:d9:a8:0e:70:9d:02:68:2f:64:c8:dd:6c:a7:
                    76:bb:a4:a7:8c:f2:c5:32:8c:91:ee:7b:da:d6:6f:
                    31:32:d6:5c:9a:f1:2f:d8:1a:9f:27:ef:2c:a3:d5:
                    32:c0:3d:11:28:d7:1e:19:c3:db:e1:be:54:28:a7:
                    61:e8:ba:b2:4a:a8:3e:93:58:5c:8d:d2:68:87:a2:
                    8b:25:f3:52:0e:70:c9:b6:a7:59:2b:5a:29:d0:e6:
                    4c:41:d2:fe:7d:1a:62:a1:80:4a:98:d2:be:b6:ef:
                    f5:94:4f:d1:12:dc:4b:dd:1b:5b:78:25:95:57:33:
                    0a:ae:1f:57:b5:a8:fd:50:ac:17:04:c1:f7:b5:ec:
                    1e:ac:d2:e6:b2:9f:35:b4:75:db:73:a0:0b:ee:e0:
                    a2:6a:65:59:b4:6f:8f:cd:ae:ff:3b:60:43:95:cb:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:A8:8E:77:B3:A0:DB:2D:86:9B:45:C0:FA:35:B9:28:C7:B1:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/b3aa5067-3544-31fa-a9d9-7a2c079a9030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/22e42724-5d65-4798-a360-69c4707835eb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:33:31:54:AD:F9:EA:60:C1:97:A7:5E:E9:F9:D9:F1:A4:37:35:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.116.0/24
                IPv6:
                  2620:da:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:a6:92:56:bf:d4:03:e2:f5:48:01:71:39:65:91:ce:60:
         fc:f9:ac:41:b8:e2:df:e0:52:6d:89:ba:13:41:2c:2d:3b:98:
         4b:bc:f1:fa:07:f9:39:99:e9:2e:2c:66:a6:00:e0:28:7f:0e:
         3d:34:9b:5f:5f:e7:9c:f3:ce:08:7d:5c:69:b5:c8:db:ac:02:
         ce:e4:0f:a3:f3:04:48:2a:32:dc:d6:f6:91:85:3e:fa:eb:c6:
         15:ba:03:da:bc:1b:c5:b1:da:a3:66:43:b8:21:aa:f6:21:4e:
         ab:c6:f8:a9:8e:9c:39:b3:a2:ce:dd:6e:78:bf:bc:01:44:45:
         e0:8a:07:56:a4:6f:0e:8e:b8:22:4d:62:a2:03:bf:10:b3:e1:
         fa:7e:da:8d:3f:19:8f:6d:dd:48:63:05:fc:05:13:d4:cc:c9:
         65:87:85:e4:be:df:61:a3:00:3a:66:ac:8c:2e:c5:96:24:31:
         44:d2:c1:79:c7:35:68:15:73:dd:84:30:c4:13:22:8a:93:7b:
         27:41:57:72:9e:85:0d:7d:60:2a:7b:4d:6d:56:99:3b:e6:8a:
         9b:d5:ea:23:a4:49:0b:d7:dc:ed:30:20:c3:b7:39:af:49:e6:
         86:98:48:03:ee:65:02:e7:8f:84:ea:86:91:cd:f3:fa:73:19:
         4b:ae:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:04:17 2026 by rpki-client