Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/c54f4e25-0a68-3e35-aecb-efe4856d941c.roa
File:                     c54f4e25-0a68-3e35-aecb-efe4856d941c.roa (raw, json)
Hash identifier:          BDtDZ1XRnAXHyWuhjPSgY0XftT32n8lAQ01TUvwd3D0=
Subject key identifier:   C9:1B:4C:6C:0F:85:42:E8:7E:8D:56:EC:63:E1:3F:3B:47:74:F0:06
Certificate issuer:       /CN=9030418a-18ab-40d5-a327-337add5a0b82
Certificate serial:       010D0C9F4328584D2BDA3CD5C606127791D6BB40
Authority key identifier: 7B:31:7D:2B:17:6E:93:E2:1A:7A:01:F3:CD:79:70:0F:59:E1:6C:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/c54f4e25-0a68-3e35-aecb-efe4856d941c.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     979
IP address blocks:        23.141.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/9030418a-18ab-40d5-a327-337add5a0b82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/9030418a-18ab-40d5-a327-337add5a0b82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:3c:d5:c6:06:12:77:91:d6:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9030418a-18ab-40d5-a327-337add5a0b82
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=76332f9d-833f-4af5-8747-3c58b252a28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e7:79:52:50:2e:96:51:c9:09:32:6a:58:42:
                    f1:a0:9a:1a:42:28:ae:26:e7:87:1f:35:fe:b9:8b:
                    41:95:83:e3:68:09:79:f0:15:6d:d5:e9:9e:f6:ac:
                    d0:12:2c:00:f7:1f:bc:60:e1:50:3c:12:88:82:71:
                    de:c5:da:3d:5d:17:2f:ba:e7:51:ff:37:0b:e2:85:
                    cc:cc:b7:bd:aa:5c:a9:d2:10:37:15:4c:23:e0:ac:
                    55:8d:47:3f:d7:e3:16:0e:8f:97:09:6b:59:c7:ec:
                    13:fd:81:51:29:d4:12:ca:ea:98:de:c1:cb:86:47:
                    09:aa:ea:fe:e1:56:4d:bb:00:bb:87:8e:aa:96:2d:
                    e8:72:48:85:7e:5d:94:03:7d:ed:6f:3c:75:db:da:
                    90:87:38:6a:7c:1b:ba:36:10:12:9b:2f:1d:de:e0:
                    2e:55:82:10:b8:0e:78:73:fd:2b:3e:9c:e9:3e:6b:
                    42:ef:81:cb:34:e3:ed:31:f9:f0:1f:76:42:48:8e:
                    d7:89:57:e1:a2:7a:d2:d2:b7:83:0a:b5:db:e8:fa:
                    05:e3:b0:90:a2:8e:62:d6:0e:d2:d4:b3:98:12:96:
                    48:2c:8a:82:5d:b5:56:52:dd:12:f8:f2:72:f7:f7:
                    fd:15:15:78:84:5f:a8:c1:b3:f3:51:27:a6:eb:f5:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:4C:6C:0F:85:42:E8:7E:8D:56:EC:63:E1:3F:3B:47:74:F0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/c54f4e25-0a68-3e35-aecb-efe4856d941c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/9030418a-18ab-40d5-a327-337add5a0b82.crl

            X509v3 Authority Key Identifier:
                keyid:7B:31:7D:2B:17:6E:93:E2:1A:7A:01:F3:CD:79:70:0F:59:E1:6C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:55:31:70:20:23:3e:8a:da:43:9e:3a:db:c0:96:06:16:cc:
         2e:60:fd:42:62:d7:3c:32:18:5e:91:5b:25:b3:df:a5:0d:98:
         88:f6:18:6f:cd:ad:2c:33:3c:b9:49:01:4b:ac:0b:bb:70:a4:
         c0:51:67:f7:0a:37:6d:3d:8a:ab:74:08:73:33:c2:34:f5:d3:
         75:af:8d:bb:36:57:0a:86:70:9c:c8:37:24:60:4f:b0:d7:cb:
         0e:c6:55:18:7a:59:c2:f2:73:e8:04:be:47:10:08:23:9f:04:
         66:c6:d8:bb:25:05:b1:f6:dc:eb:a9:78:a9:09:47:c7:55:ae:
         11:1c:ae:91:49:5b:a0:26:b8:9f:60:6f:b3:ca:72:bf:9e:0f:
         8b:f7:7d:c3:45:09:48:bd:cd:d0:f7:d3:db:3c:53:69:fc:2b:
         f3:31:ac:de:66:a8:24:8b:c9:7f:ec:ef:0f:b3:20:31:c2:45:
         40:e7:69:de:c6:95:98:ca:41:91:53:42:ca:5e:86:96:06:5f:
         3c:63:be:3b:68:c8:c2:db:73:0d:13:45:18:1e:4d:b0:3a:3d:
         1b:df:35:21:91:ca:55:4e:a4:75:a2:52:f9:13:ad:d7:f7:6d:
         22:83:da:14:d4:fd:be:06:2c:33:4b:b7:57:6c:b5:35:05:b5:
         8e:2a:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 14:18:38 2026 by rpki-client