Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa
File:                     f1428052-35e1-39f6-a7a4-5464e85eb554.roa (raw, json)
Hash identifier:          sI3dp1BmiBf/QSAuZBSQYYa8V58+NnCfRSqtjpiFMIc=
Subject key identifier:   07:7B:25:BB:21:DA:22:E4:14:A1:25:1E:63:EF:0B:38:E6:42:89:F6
Certificate issuer:       /CN=1d52c1d1-8920-4ee9-a78f-3ec07db187a7
Certificate serial:       010D0C9F4328584E147ED9348B278101DE859E80
Authority key identifier: 4E:BC:CC:38:96:22:CA:6D:F4:C6:79:E3:F8:A9:09:59:A9:52:72:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     402069
IP address blocks:        23.147.12.0/24 maxlen: 24
                          2602:f525::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:d9:34:8b:27:81:01:de:85:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d52c1d1-8920-4ee9-a78f-3ec07db187a7
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=2954184a-0ca1-4616-ab8c-4b402ffbdfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:e3:e9:ed:17:0d:a1:c2:7a:02:1e:35:88:
                    bd:fc:b4:7a:0c:be:2e:a6:71:14:51:3b:f9:0d:cf:
                    27:e2:77:dd:76:bb:6b:3d:62:10:bf:fa:fb:ae:62:
                    06:ae:38:19:cc:c3:19:ca:37:18:9a:30:4e:73:f6:
                    e3:2b:b0:04:f5:67:88:cb:8b:6c:c2:08:39:b2:70:
                    74:2e:61:52:74:59:58:37:27:d8:dd:b7:96:aa:0f:
                    11:76:17:51:e7:58:a8:75:2b:ab:8a:8d:3a:30:25:
                    43:0d:3f:ee:dc:30:9e:e6:88:19:f5:a1:6f:50:d0:
                    7c:7c:9a:87:11:e3:28:b6:de:ce:86:af:ef:58:9e:
                    e3:71:b8:67:94:2c:6b:21:c2:57:e9:c3:b2:03:77:
                    48:3b:47:1a:30:a8:1b:aa:1e:d0:df:c5:25:a9:85:
                    13:96:f4:6f:f6:78:3e:78:a5:0d:a5:c4:ea:5d:86:
                    22:2f:3d:f6:19:bb:77:4b:fc:6c:a1:c2:60:85:a6:
                    b7:44:5f:b2:38:46:38:18:e7:3b:40:05:22:c6:92:
                    d3:66:53:9a:aa:23:34:83:cd:8f:22:cc:36:76:84:
                    a0:a4:73:dc:65:43:fe:8b:b2:d6:ee:eb:d6:b4:cc:
                    0b:21:33:77:b3:ee:2c:f3:8d:6f:36:d9:da:71:f3:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7B:25:BB:21:DA:22:E4:14:A1:25:1E:63:EF:0B:38:E6:42:89:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.crl

            X509v3 Authority Key Identifier:
                keyid:4E:BC:CC:38:96:22:CA:6D:F4:C6:79:E3:F8:A9:09:59:A9:52:72:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.12.0/24
                IPv6:
                  2602:f525::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:52:5e:a6:36:74:dd:54:db:73:51:34:11:e5:25:65:f3:47:
         07:bf:bb:43:51:e4:c6:29:06:ce:d8:4c:e1:cc:1b:94:99:64:
         4b:9b:e6:02:f6:4a:a4:f3:60:ca:af:71:5d:78:9d:68:12:59:
         fa:00:f1:32:a9:38:1b:39:10:3c:7c:61:52:af:e0:56:e6:c2:
         f8:65:fd:cd:6b:c4:20:7e:dd:2f:21:1e:77:58:34:80:5d:42:
         2f:33:50:3c:34:6f:51:f3:1c:5c:f1:60:ae:b3:99:4f:73:0c:
         59:ab:ae:20:6f:4d:92:c5:40:cc:62:65:2c:96:27:54:42:fb:
         f7:f8:fd:08:9a:e1:fb:9d:15:15:e6:51:5f:a9:bd:41:d7:01:
         51:10:c1:01:b9:85:1b:26:e6:43:27:fc:f4:87:86:0a:30:a8:
         e6:87:4d:b5:74:40:b0:0b:34:6d:ae:c5:62:89:7c:dd:29:c7:
         e5:8f:94:88:9e:2c:d6:af:18:95:b5:26:a3:c0:de:5a:c8:4f:
         7b:00:bb:99:59:a0:ca:32:8b:98:9a:3a:4e:57:ce:c3:50:65:
         b5:5b:41:89:a6:d6:b4:58:4a:d2:97:41:66:28:1a:78:ee:d3:
         1a:b0:3b:c9:37:5a:80:0b:f5:7d:77:24:31:da:29:8d:f4:ab:
         ea:57:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:38:56 2026 by rpki-client