Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa
File:                     b233ed48-0941-3a4f-aef1-ba15444613f4.roa (raw, json)
Hash identifier:          DN/1WrmiPRl8tQaSe48igDEHMYpct1RqL2Mi42k6c2M=
Subject key identifier:   8B:91:72:EA:BE:1C:BE:0C:E7:04:5C:52:2C:BF:73:68:B8:B0:7F:AD
Certificate issuer:       /CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947
Certificate serial:       010D0C9F4328584E621494D05E065E28D4710D00
Authority key identifier: 41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa
Signing time:             Sat 04 Jul 2026 03:59:12 +0000
ROA not before:           Sat 04 Jul 2026 03:59:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     15312
IP address blocks:        23.148.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:62:14:94:d0:5e:06:5e:28:d4:71:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947
        Validity
            Not Before: Jul  4 03:59:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=af940fc3-73b5-4457-9ae5-41f080486546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:22:a8:19:9b:d1:b4:92:b8:23:a5:40:70:
                    44:00:6b:83:12:85:89:b0:78:d4:9a:45:82:8c:46:
                    e8:9d:e1:23:c8:8c:e2:8b:46:2a:d2:90:f5:17:84:
                    84:e1:aa:f8:a9:03:06:bb:cd:a6:f0:c3:36:d5:0d:
                    3b:68:0b:95:eb:20:4b:34:c7:48:85:25:87:bb:3c:
                    17:8e:b2:fc:91:e1:7d:5c:0d:4d:52:3a:2d:de:39:
                    16:3c:0a:af:13:e5:2a:d2:bb:f4:58:24:fb:3f:a6:
                    7b:65:65:e9:5d:26:98:03:eb:3f:f2:0f:a5:de:39:
                    5d:b9:bc:d0:de:d5:9f:22:4b:12:9c:16:c3:0b:67:
                    48:49:90:88:5d:b3:34:d9:ad:82:24:e9:0e:4d:e4:
                    de:3f:45:0f:8b:2c:a9:6e:c7:05:e2:11:a3:b0:b5:
                    a1:2b:e5:61:0d:f8:10:8b:eb:e7:c5:dc:73:79:f7:
                    eb:44:3f:c6:2d:e8:dd:89:52:bf:73:a9:1a:d9:dd:
                    63:97:00:23:d0:fa:61:3e:5e:1c:0c:f9:bd:c4:72:
                    8d:52:1a:c5:55:31:d6:a1:51:db:65:74:a3:08:de:
                    66:a7:d4:35:e5:95:e5:82:30:2e:6b:aa:6a:0d:2e:
                    87:7a:cb:6c:a0:98:c0:8f:a6:37:97:e9:b0:50:37:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:91:72:EA:BE:1C:BE:0C:E7:04:5C:52:2C:BF:73:68:B8:B0:7F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.crl

            X509v3 Authority Key Identifier:
                keyid:41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:ff:50:bb:49:53:4e:a3:67:95:13:71:42:a8:d9:2d:9d:
         b4:69:32:5e:60:5f:86:d8:66:c0:76:5f:48:b2:ec:0d:20:a5:
         72:46:f1:95:e1:d2:b8:71:2e:7b:88:5a:de:52:8d:f3:64:09:
         5f:3f:78:f5:a5:e0:a5:12:a3:de:7b:cb:9a:ef:ce:55:df:3b:
         02:cb:72:0d:1a:1e:db:c8:1a:3d:86:3e:34:c2:78:17:d1:b5:
         fa:60:17:24:90:48:35:7b:40:d8:a5:e7:f9:0c:da:62:aa:3e:
         6d:85:5f:25:63:00:8c:03:b7:14:35:29:ab:b5:de:03:8e:c7:
         83:f8:24:88:9b:94:0b:64:8f:7f:0f:61:63:e0:33:4e:d4:82:
         74:f4:4c:53:e8:ca:79:f5:87:6e:98:f6:00:6f:89:0a:8c:25:
         81:03:d1:0e:aa:47:a6:66:0f:8e:f1:e4:97:b1:cb:01:ff:4f:
         d6:db:fd:68:f9:51:df:bc:21:af:59:99:fe:5c:f4:1b:b0:8f:
         16:3b:c1:8a:80:46:a4:d2:0c:69:e0:10:c3:5b:10:ec:d5:aa:
         a5:92:28:fb:0c:7d:28:54:1b:e1:95:93:93:17:4f:05:6f:70:
         ce:4b:28:e4:7c:77:02:8d:6a:c5:c2:4b:4a:49:75:54:b0:a7:
         0a:78:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:18:57 2026 by rpki-client