Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa
File:                     dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa (raw, json)
Hash identifier:          4MjP45HEqUIsnMJ62tU4lbann9fHusSQeMgYOABzXnA=
Subject key identifier:   55:FC:6A:BC:56:37:65:74:CA:C4:76:99:B1:1F:E4:BD:E4:5E:03:11
Certificate issuer:       /CN=b5c7f3f6-28f7-4e37-95f9-385583909b2d
Certificate serial:       010D0C9F4328584DD625C7A65ACB78AA856D06C0
Authority key identifier: 74:5C:82:1A:52:27:90:61:E0:64:58:2C:22:61:2F:69:27:5D:30:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     63023
IP address blocks:        23.136.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c7:a6:5a:cb:78:aa:85:6d:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c7f3f6-28f7-4e37-95f9-385583909b2d
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=c15c8a2f-05a0-4432-b3fb-e89f67b49f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:61:e2:07:c6:b2:b9:0c:be:37:7c:83:6f:
                    71:d1:f8:b0:fc:0d:01:c3:c2:75:82:54:04:3e:77:
                    86:61:e6:96:8a:3c:bf:6e:c3:ab:cf:96:57:0a:5d:
                    14:6b:57:ca:5a:47:62:e0:de:4f:7e:92:80:3d:d4:
                    b9:d6:e4:3f:f6:23:55:2f:62:ad:9c:00:83:51:0a:
                    a5:ff:a9:d7:52:ac:2e:6f:32:de:6c:96:79:44:15:
                    b3:f1:cc:42:c8:0c:8d:72:32:1b:98:57:78:1c:3a:
                    c4:ca:b0:3d:98:fe:a1:4d:85:68:5b:bd:fc:a4:ac:
                    8c:e9:98:5b:93:2b:56:23:76:89:61:2a:f5:a5:87:
                    68:ad:5e:59:62:06:19:37:6c:78:10:25:34:c4:44:
                    fb:dc:d1:fc:8c:5a:e2:f5:80:25:48:77:be:bd:4c:
                    d9:c0:f3:70:24:a6:29:66:c2:1a:49:b8:5e:04:f5:
                    41:62:0e:30:2b:ce:61:ab:1b:52:ce:e1:57:b1:c6:
                    57:dd:6b:c7:0b:6f:44:17:02:61:d1:3b:28:bb:f0:
                    78:d4:ab:39:4a:a7:06:78:6c:6c:d5:a4:d8:56:bc:
                    54:d6:f3:d2:57:a1:a3:76:e6:a6:8d:c4:ba:b4:06:
                    f3:58:71:4f:c9:d1:5b:60:4c:d6:08:67:9b:83:e0:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FC:6A:BC:56:37:65:74:CA:C4:76:99:B1:1F:E4:BD:E4:5E:03:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.crl

            X509v3 Authority Key Identifier:
                keyid:74:5C:82:1A:52:27:90:61:E0:64:58:2C:22:61:2F:69:27:5D:30:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:77:5f:f6:8d:5b:f4:53:2d:96:82:1e:04:15:cf:80:10:
         47:98:e2:ac:2e:27:f4:43:0c:9e:2e:4d:99:87:34:96:eb:a6:
         c6:bb:86:58:50:e6:89:cb:3d:91:4b:fc:cc:a4:ee:99:89:cb:
         24:d1:c8:3f:ee:aa:2d:0b:54:ba:7c:43:5c:c6:17:83:6d:c0:
         df:f7:6e:ce:df:92:60:64:34:99:96:39:97:8b:94:3c:89:d9:
         43:56:e2:b2:40:bc:06:23:30:04:fc:b8:d3:62:a2:17:37:1a:
         f9:a0:38:fd:24:ed:28:59:da:b2:59:a9:31:70:7b:81:a5:99:
         5c:f0:f5:e4:ff:77:b9:9d:f1:ec:ae:fb:c3:41:2a:1b:f3:4f:
         11:31:ce:07:d5:07:31:15:e9:8d:cc:d0:b9:f4:3d:4f:c5:1f:
         76:c0:ea:87:78:a0:e2:4e:db:bd:22:ab:12:90:56:2b:92:98:
         c3:2f:98:fa:3d:89:39:2b:81:7a:35:4b:34:3b:18:5f:e8:d8:
         fe:77:38:47:98:aa:4e:7b:eb:51:ec:71:fe:3c:47:fc:7a:0b:
         86:80:4a:9a:ea:12:ed:27:09:c2:e4:48:3a:a9:82:61:0a:cc:
         70:9e:7a:1e:9f:38:c1:3a:ef:5f:9d:fb:a0:ef:e9:01:47:6a:
         52:e3:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:16:20 2026 by rpki-client