Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/b8bdad08-de17-33b5-a6dc-1b64a1bdec6a.roa
File:                     b8bdad08-de17-33b5-a6dc-1b64a1bdec6a.roa (raw, json)
Hash identifier:          rm6zD6D3AZjAs181q2/Roc9sx4z6pvmdvowhheH3T/4=
Subject key identifier:   46:8A:53:C5:20:7E:E0:31:6D:DC:83:9A:BC:38:B3:E7:A7:3C:48:9C
Certificate issuer:       /CN=18c91241-805a-43ab-bbfb-d41ab0260dc6
Certificate serial:       010D0C9F4328584DF4DB45846BC26CD175BA6900
Authority key identifier: 55:EC:22:5B:45:AE:F2:82:14:1A:76:07:51:8B:CE:D4:5A:DB:F1:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/b8bdad08-de17-33b5-a6dc-1b64a1bdec6a.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     401455
IP address blocks:        23.146.228.0/24 maxlen: 24
                          2602:f7ba::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/18c91241-805a-43ab-bbfb-d41ab0260dc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/18c91241-805a-43ab-bbfb-d41ab0260dc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:45:84:6b:c2:6c:d1:75:ba:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c91241-805a-43ab-bbfb-d41ab0260dc6
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=7b2cee48-a500-4d48-afea-33ff3cce71da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a2:bc:63:3b:e7:91:59:ad:b9:4c:55:b2:1a:
                    cc:a2:0c:68:ff:ba:76:ca:ce:dd:20:8b:7f:3d:64:
                    75:6c:f5:39:9c:5a:6c:a2:5d:25:a6:3a:56:b7:09:
                    a7:a2:cc:5c:00:11:78:bf:9d:dd:d3:a5:f6:ec:84:
                    dd:b9:5b:bb:ca:2f:0a:d3:ce:9a:90:a2:69:0c:f2:
                    61:39:31:01:65:52:f6:75:73:a4:0b:41:03:e5:38:
                    47:da:ed:2b:03:1f:6b:45:2b:29:c3:0f:97:3d:43:
                    02:60:ee:76:b9:7e:a8:5d:da:10:6b:4c:7b:de:53:
                    f2:b9:c6:72:bf:69:97:1a:02:52:2f:20:ca:66:b9:
                    bf:81:14:22:ef:69:19:40:de:00:d0:61:c4:ce:f0:
                    be:ca:f7:3c:49:19:23:e8:0b:0d:be:45:2a:3c:4e:
                    fc:7b:29:b7:f8:9a:6f:56:d2:44:70:5a:b9:23:10:
                    1b:a1:f0:75:4d:29:01:2a:18:63:9f:e3:a7:01:fd:
                    a5:ad:18:8f:7a:e2:33:15:a7:3b:28:7b:2a:40:6c:
                    d8:93:50:95:51:a6:20:74:17:12:99:28:94:d9:a4:
                    5e:c5:74:99:14:12:5c:98:82:c5:09:85:a7:67:57:
                    48:c5:6c:b8:a2:f7:fe:1a:e3:11:a7:7d:7a:3d:b0:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8A:53:C5:20:7E:E0:31:6D:DC:83:9A:BC:38:B3:E7:A7:3C:48:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/b8bdad08-de17-33b5-a6dc-1b64a1bdec6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/18c91241-805a-43ab-bbfb-d41ab0260dc6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:22:5B:45:AE:F2:82:14:1A:76:07:51:8B:CE:D4:5A:DB:F1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.228.0/24
                IPv6:
                  2602:f7ba::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ee:b8:c2:43:86:79:e3:22:a2:ce:fa:0a:0c:ae:4c:31:ab:
         8c:9f:1b:bd:3c:fd:40:82:49:57:40:10:94:c1:3a:98:9b:39:
         34:8b:61:2a:d5:8c:f8:e8:27:24:ab:e5:c2:78:56:f6:dc:e7:
         43:54:c3:dd:39:df:4b:0f:00:39:65:32:69:56:82:32:fd:f0:
         1b:99:bf:80:4f:37:ad:c5:bb:95:9e:79:f4:74:58:98:f9:2c:
         4f:f3:6c:21:99:87:16:c7:03:37:a7:21:61:be:b4:b6:d0:26:
         eb:9f:07:06:43:d3:4c:b9:09:2c:0c:c3:0d:8a:06:a3:d5:4f:
         02:cf:48:ad:d4:82:62:7f:ec:0c:54:c7:e8:f9:f7:cd:f9:52:
         99:87:1e:b2:1a:0b:85:de:8a:b3:86:e2:e2:e8:3a:fe:44:ea:
         15:0e:56:ab:b8:65:4a:80:10:31:df:7d:31:26:de:38:94:93:
         9f:cd:5e:b8:8d:18:ec:c8:a1:61:2f:c1:48:03:f4:94:8e:f7:
         6a:c8:7c:27:1b:f5:b8:ed:b7:57:16:1c:1b:b6:c9:57:d2:b9:
         22:75:44:d4:f6:84:4a:e9:0f:62:41:dd:10:49:e2:42:6a:b6:
         43:9b:3c:8a:41:63:af:d9:ac:90:38:7e:ee:9a:8f:51:8e:9a:
         5c:5c:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:38:24 2026 by rpki-client