Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/c72148b3-fe00-36d6-b0de-ebf216149337.roa
File:                     c72148b3-fe00-36d6-b0de-ebf216149337.roa (raw, json)
Hash identifier:          kFMmuKlcCKc0peOEC7RkWiyZJnyZT145+a8yXPbrGto=
Subject key identifier:   86:4A:31:33:CA:87:59:23:1F:29:DE:78:FE:C9:BF:89:13:3B:E1:65
Certificate issuer:       /CN=3d03670e-6ce7-48e2-b935-4bb50a95122c
Certificate serial:       010D0C9F4328584E43F473283C55E89AAF3F93C0
Authority key identifier: C2:B1:FA:F9:F7:9A:6F:F1:22:30:D1:40:E5:B4:EF:6C:6D:54:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/c72148b3-fe00-36d6-b0de-ebf216149337.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     402347
IP address blocks:        23.155.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:73:28:3c:55:e8:9a:af:3f:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d03670e-6ce7-48e2-b935-4bb50a95122c
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=6ca92316-64ef-44ca-b066-c4dff2aef643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e6:73:e3:a0:01:f4:5c:bb:cb:1e:4d:89:7c:
                    ed:18:26:4b:0b:0a:b4:36:7e:25:a0:d0:ca:a5:f3:
                    c4:6b:94:0f:e7:cf:07:37:37:59:98:16:9f:d3:fb:
                    9e:13:6d:86:0e:0b:b9:94:54:b1:94:12:5a:fa:cf:
                    08:47:a8:e9:c6:cc:98:fb:f5:15:c8:fc:8b:6c:6a:
                    ec:76:b0:0d:20:e5:10:47:b7:28:9c:84:c7:93:f9:
                    ef:37:90:d7:9b:26:18:b8:d6:66:4b:2e:00:76:89:
                    7c:8d:8a:86:d2:b7:d6:88:88:79:a1:02:2d:84:c3:
                    fe:9b:ce:59:ea:e3:a1:6e:6b:83:85:be:14:da:b1:
                    f1:a9:cb:45:aa:6c:5b:4f:a1:3e:d5:df:5a:70:eb:
                    64:51:e2:c2:f7:d7:06:60:fe:4b:cd:07:62:a8:a8:
                    03:5e:e1:e5:a8:df:d9:b5:67:f1:25:07:87:14:bf:
                    6d:70:af:e6:41:82:83:a3:0e:93:9d:2b:29:59:a1:
                    dd:b2:ac:9b:01:e3:e4:6d:d7:85:ff:a2:74:6e:d2:
                    83:1d:24:e6:a0:bb:16:73:e6:18:ff:6f:ce:51:3b:
                    f3:6e:7f:b2:9d:f5:7e:21:e1:cd:46:54:bf:78:e9:
                    91:92:89:d8:ee:a7:4e:8a:94:c1:58:4e:75:e4:87:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4A:31:33:CA:87:59:23:1F:29:DE:78:FE:C9:BF:89:13:3B:E1:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/c72148b3-fe00-36d6-b0de-ebf216149337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c/3d03670e-6ce7-48e2-b935-4bb50a95122c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B1:FA:F9:F7:9A:6F:F1:22:30:D1:40:E5:B4:EF:6C:6D:54:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d03670e-6ce7-48e2-b935-4bb50a95122c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0d:a4:f0:8e:5f:1d:b8:3e:b3:e6:2f:04:74:94:da:52:9c:
         ca:a8:3e:84:66:0e:ec:47:1b:13:e6:5b:37:93:0e:b2:35:b7:
         e8:64:b3:69:02:8a:f6:18:81:c4:53:61:8d:64:5a:1c:d5:e1:
         c5:c5:78:af:78:a2:37:7f:22:6b:25:51:15:fe:b2:38:94:1f:
         2c:59:de:1b:cb:13:0c:ed:b4:12:e1:95:8e:a2:ca:a8:e2:5c:
         9c:0d:cd:3a:d3:c1:23:67:fc:65:b1:73:d0:b5:67:c0:b4:4d:
         5d:60:f7:61:e8:51:0c:b5:ed:c4:6d:68:e3:05:1c:79:4a:ab:
         0a:f3:b2:16:85:c2:30:fd:79:ac:0c:94:a4:09:2d:a8:52:a7:
         17:ce:73:78:a4:b1:2e:03:fa:ce:5d:91:9b:d6:23:b3:45:17:
         ba:38:99:f5:c1:5c:32:a6:d2:41:22:b3:29:54:62:24:e5:af:
         a9:35:66:b6:b7:75:13:2b:93:81:2e:8b:e6:5c:d4:91:86:12:
         bb:58:de:cf:cb:a2:7c:9b:7b:d5:6a:ea:24:d8:dd:e4:cf:76:
         ba:03:60:c7:b1:b6:4e:ac:9b:b3:63:cd:bb:b5:52:1b:ba:f1:
         2b:39:69:b1:64:9a:e2:24:ac:89:76:09:80:9b:d0:12:b5:07:
         2f:b8:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:23:46 2026 by rpki-client