Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/cbd0ddf3-f7ce-3536-9d60-9cde8e71e5d3.roa
File:                     cbd0ddf3-f7ce-3536-9d60-9cde8e71e5d3.roa (raw, json)
Hash identifier:          A2P4PHF2BxMfvWE0XLApe82KEGen8gCwaUWTNSSqwXg=
Subject key identifier:   11:D8:75:24:64:D0:29:A4:E1:13:4C:45:06:48:B0:25:13:D8:CC:30
Certificate issuer:       /CN=1a168038-48c3-4606-9551-509bf3eb6071
Certificate serial:       010D0C9F4328584E583B04BD816DDDB390838500
Authority key identifier: 51:E1:F4:44:2F:CD:43:64:18:CD:96:8D:DD:98:40:79:74:F7:4C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/cbd0ddf3-f7ce-3536-9d60-9cde8e71e5d3.roa
Signing time:             Tue 30 Jun 2026 15:18:34 +0000
ROA not before:           Tue 30 Jun 2026 15:18:34 +0000
ROA not after:            Mon 28 Sep 2026 15:18:34 +0000
asID:                     23112
IP address blocks:        23.148.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/1a168038-48c3-4606-9551-509bf3eb6071.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/1a168038-48c3-4606-9551-509bf3eb6071.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:3b:04:bd:81:6d:dd:b3:90:83:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a168038-48c3-4606-9551-509bf3eb6071
        Validity
            Not Before: Jun 30 15:18:34 2026 GMT
            Not After : Sep 28 15:18:34 2026 GMT
        Subject: CN=63234642-78b8-491a-948b-edab3ecc4e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:81:d8:4b:30:83:9b:6a:21:63:28:9d:5e:
                    4c:2d:c3:b6:af:ee:45:e3:f5:86:85:9b:ff:03:79:
                    2d:6b:7b:e7:c9:9f:f0:c8:5d:5e:49:63:dd:df:48:
                    05:34:c8:eb:94:6e:3a:83:4e:d5:10:48:ae:7f:c9:
                    c0:a1:9b:f9:e4:fc:04:46:6b:65:6d:50:8e:59:e0:
                    5f:61:2f:5c:d7:94:8a:db:c0:3e:f8:92:3d:4c:e0:
                    a4:1f:f8:45:8c:6d:27:bc:96:f2:54:da:f1:ad:90:
                    94:0e:8b:f9:79:89:84:01:dd:66:2f:57:b0:75:84:
                    ea:ae:a6:54:29:7a:03:ae:0b:f3:0b:be:3b:08:de:
                    ce:49:84:47:57:8d:44:ea:16:d4:55:c3:42:ee:ae:
                    f6:fc:91:21:a4:f0:d9:0b:b3:de:e4:71:8b:3d:97:
                    2f:01:2d:0a:89:e0:af:81:bf:2c:80:cf:5c:b6:5f:
                    03:e3:6f:ab:d0:a3:15:7e:c6:88:2f:f3:aa:af:b2:
                    50:ce:37:8b:76:39:74:ab:2a:3f:6c:55:ad:c3:a2:
                    1f:bb:a0:24:e0:ef:e8:f8:c7:61:46:b3:31:69:77:
                    af:5c:e0:83:34:48:62:d8:85:fb:f5:a7:5d:28:37:
                    a8:9a:f0:2c:79:52:74:1e:54:a6:e2:0f:9f:cf:f5:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:75:24:64:D0:29:A4:E1:13:4C:45:06:48:B0:25:13:D8:CC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/cbd0ddf3-f7ce-3536-9d60-9cde8e71e5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/1a168038-48c3-4606-9551-509bf3eb6071.crl

            X509v3 Authority Key Identifier:
                keyid:51:E1:F4:44:2F:CD:43:64:18:CD:96:8D:DD:98:40:79:74:F7:4C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:b5:9b:38:64:92:e3:d7:97:09:ae:1d:2a:dc:9b:94:ff:
         ed:67:3b:75:b7:d7:b9:82:3a:b4:68:7f:fb:c5:a4:88:22:96:
         02:90:c3:02:24:51:40:99:26:a0:1d:c3:db:78:61:05:79:cf:
         55:8e:50:dc:1a:df:20:70:34:ce:4f:b8:ee:b4:3a:98:9d:b8:
         d2:ad:5d:95:5b:77:11:3b:e7:a9:1e:58:62:0a:f9:a6:6d:a2:
         9b:e9:f8:51:2b:fe:c9:a8:db:05:3c:be:a9:dc:17:96:32:81:
         ff:6c:c3:46:8a:08:01:10:e8:03:76:8d:d5:18:c7:c1:b5:de:
         9c:2c:f2:fc:d0:d2:d8:98:b2:39:2c:49:3e:c9:47:eb:5f:b5:
         19:55:74:9b:51:a7:45:3f:8a:a5:aa:fe:de:27:7f:ee:7b:12:
         68:3f:14:02:0a:e5:4c:6d:e1:82:fc:23:93:f9:dc:19:71:4d:
         e9:bc:3e:78:a0:95:bd:a5:cd:f8:7e:40:d8:ca:4b:94:26:22:
         c6:a6:75:3e:0c:7f:b9:56:e8:fb:c8:31:2c:16:46:68:5c:67:
         00:88:52:c3:94:72:09:0c:ff:2b:4d:70:35:4c:2e:77:3d:36:
         60:66:fe:f9:05:45:59:ae:e0:88:fb:0c:c9:98:2b:be:0d:63:
         66:c8:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:32 2026 by rpki-client