Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa
File:                     3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa (raw, json)
Hash identifier:          SAa2CQspQXsfqx0+JFmYPEWh4sytskvFllV3BF49TD8=
Subject key identifier:   D6:A0:52:EB:94:7C:D0:D8:8E:85:5F:C4:48:4A:AE:F6:1D:F5:86:4B
Certificate issuer:       /CN=00742cea-2e97-42c0-9c46-fc566e540c74
Certificate serial:       010D0C9F4328584D2A74BD2D142CFF63FF229400
Authority key identifier: D8:AD:EB:65:7A:D1:A0:E6:9A:BF:DF:F9:31:FC:27:A8:32:1C:99:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     979
IP address blocks:        23.178.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:bd:2d:14:2c:ff:63:ff:22:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00742cea-2e97-42c0-9c46-fc566e540c74
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=148bf6c3-db77-4585-8fbd-5dfea3b8b690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:5f:4b:6d:b4:ed:51:b4:d2:7b:98:70:dc:
                    67:21:66:94:a4:8b:a1:30:58:44:32:8c:7f:3a:9f:
                    b1:09:10:9b:51:c6:2a:e3:79:7a:24:32:73:c7:5d:
                    6e:bb:5b:27:be:bc:5d:b5:0d:38:e3:4f:a0:0e:8e:
                    28:36:45:52:bd:d5:7e:16:ef:55:26:24:55:98:c9:
                    be:47:b6:ab:6a:1c:cc:90:ba:db:24:ac:02:e5:bf:
                    f3:d8:11:59:b8:0f:d0:98:40:b8:7a:ea:20:f8:65:
                    5d:04:a7:bb:98:5a:3f:34:a4:c4:24:6e:8d:ff:a1:
                    e1:bd:6e:30:5d:5c:02:10:a9:d5:54:d0:e0:98:95:
                    db:1c:6f:98:09:07:f3:47:d8:ca:ea:62:d0:00:ef:
                    a9:34:5c:40:54:b5:c5:3e:68:e8:f8:e7:80:cb:3e:
                    8b:36:4d:3f:0b:26:b6:c8:6e:b3:0a:48:a5:c6:2c:
                    9e:8b:32:52:42:82:2a:be:be:b2:da:c5:17:2f:87:
                    cb:40:03:28:cb:2e:2c:61:ed:80:ca:25:30:1b:ce:
                    39:ff:13:bd:6d:7a:2c:a1:57:ba:20:91:9e:81:90:
                    e9:77:05:86:1a:d9:77:ff:e2:1e:3a:39:cf:4f:c2:
                    eb:fc:50:b4:db:84:5b:83:c9:4a:f0:84:3d:a8:c5:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:52:EB:94:7C:D0:D8:8E:85:5F:C4:48:4A:AE:F6:1D:F5:86:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.crl

            X509v3 Authority Key Identifier:
                keyid:D8:AD:EB:65:7A:D1:A0:E6:9A:BF:DF:F9:31:FC:27:A8:32:1C:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:6f:f4:a8:b0:c7:fe:25:1e:ff:12:55:0f:92:54:5c:2b:
         49:6f:be:e0:ac:d7:43:7b:99:1a:3d:66:21:ec:e0:f3:9b:c8:
         6c:23:a5:f3:1b:bd:a7:e8:f8:9c:d2:21:4c:40:d4:9e:c2:a7:
         ea:c1:93:50:e0:dc:4f:39:70:d1:3c:27:a9:20:e8:42:ce:d5:
         0d:57:09:8b:e2:6c:9c:c5:76:8a:e1:a9:65:5d:6b:01:51:bf:
         c4:7f:9e:2a:25:91:d1:d4:f3:3e:fd:e4:ae:3e:b3:66:f0:b7:
         26:3b:6a:47:19:c1:cd:c5:3d:c4:27:55:5d:48:86:7c:3c:55:
         1e:81:d4:aa:2e:3f:2d:9a:0e:19:5d:ef:cf:70:d6:26:4a:d1:
         81:4b:fb:0c:dd:d5:d8:4c:73:5c:ed:13:78:57:79:c8:2d:28:
         15:9f:5e:c9:57:86:3f:cd:5f:cd:f4:f1:94:6a:39:f0:bd:0a:
         d9:6e:a8:e1:1b:bd:2f:6e:11:db:43:d7:5d:4b:0a:f5:ba:77:
         a1:0f:9a:13:60:c5:f5:57:02:b7:1a:9c:9c:e1:7e:13:db:d1:
         5b:b8:ff:43:01:d2:a8:3b:11:06:5a:2c:cc:3b:a3:b0:89:0e:
         04:4c:4a:a7:7b:dd:da:95:03:ff:29:64:73:ec:9c:f9:3f:aa:
         6d:03:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 14:20:33 2026 by rpki-client