Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/8630a7ec-50e1-32c5-a1b9-c5ac5717066f.roa
File:                     8630a7ec-50e1-32c5-a1b9-c5ac5717066f.roa (raw, json)
Hash identifier:          83zelubIS9NtsFmc2Upj7/M6q3WxpLsKEieSmbS+7Mw=
Subject key identifier:   EE:4B:9E:31:DE:74:17:BA:E5:E8:A5:08:0C:59:B4:9F:2A:42:80:E4
Certificate issuer:       /CN=9032b19f-5ab1-4765-944e-83a757678275
Certificate serial:       010D0C9F4328584D6D75124D1C409042D5369C60
Authority key identifier: F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/8630a7ec-50e1-32c5-a1b9-c5ac5717066f.roa
Signing time:             Tue 07 Apr 2026 13:00:30 +0000
ROA not before:           Tue 07 Apr 2026 13:00:30 +0000
ROA not after:            Mon 06 Jul 2026 13:00:30 +0000
asID:                     174
IP address blocks:        23.142.36.0/24 maxlen: 24
                          2602:f5ce::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:75:12:4d:1c:40:90:42:d5:36:9c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9032b19f-5ab1-4765-944e-83a757678275
        Validity
            Not Before: Apr  7 13:00:30 2026 GMT
            Not After : Jul  6 13:00:30 2026 GMT
        Subject: CN=612597f2-2a74-4cbd-952f-8830378e3c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:b1:ce:d2:9b:7e:74:4c:e4:db:61:e7:3b:
                    3c:7c:f1:88:cf:9b:16:5f:7c:5c:2f:fb:72:82:eb:
                    b3:c4:92:f5:47:92:7b:ab:05:57:ce:ee:87:3e:b4:
                    cb:ae:5e:c6:ee:78:0c:4f:a4:55:54:d4:d4:33:7a:
                    89:73:22:c5:24:98:3b:7e:9c:eb:68:5f:05:7e:9d:
                    61:42:9d:98:2c:24:24:74:a3:52:cc:c0:ea:83:a1:
                    30:9f:fd:48:7a:87:94:32:c1:f8:87:ce:24:c6:6a:
                    0a:0f:4a:93:fa:0e:85:4c:b3:1b:b1:3a:3b:72:7c:
                    e0:e4:79:c4:e3:32:a3:e8:1c:b8:94:72:7a:2d:2f:
                    97:85:da:fe:20:94:6f:62:0d:b6:89:11:57:18:6c:
                    2f:af:78:a0:b2:0c:fa:c9:c3:c3:8c:85:6a:fe:36:
                    0e:d5:cd:64:2f:78:bf:f1:94:69:6d:bf:1d:49:33:
                    b3:14:86:eb:98:23:30:fd:c2:8b:6c:67:19:01:c8:
                    5d:fc:07:22:f5:17:f8:37:20:c6:da:a5:21:e4:0b:
                    7a:a9:fc:fd:c9:92:39:bd:f3:e6:97:02:5a:03:87:
                    13:cb:46:1f:b5:53:fe:0a:cc:5a:49:91:4f:94:89:
                    c8:85:1e:0d:90:ad:b6:ff:ff:b8:f9:60:70:8e:c2:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4B:9E:31:DE:74:17:BA:E5:E8:A5:08:0C:59:B4:9F:2A:42:80:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/8630a7ec-50e1-32c5-a1b9-c5ac5717066f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.36.0/24
                IPv6:
                  2602:f5ce::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:9b:cd:dc:26:97:d2:63:6a:e2:bf:ab:71:e1:81:83:64:
         dd:d7:42:b9:1d:af:bf:fa:fb:86:01:72:41:60:93:38:fc:fe:
         fa:89:9b:e6:9e:30:ae:07:de:72:3b:d8:e3:ba:5b:e7:4c:51:
         af:c7:77:15:44:cd:d2:65:a9:bd:6d:f1:e9:68:4b:89:c9:3c:
         00:dc:06:d4:1a:13:77:7e:08:56:e9:92:d3:d1:34:01:eb:2b:
         11:bc:ed:d9:c2:4a:0b:1e:97:be:39:90:d2:79:67:bc:56:df:
         8c:c5:5d:e7:dc:27:5e:30:2a:84:83:95:c7:2e:99:53:10:b7:
         d4:e2:7c:f7:28:a7:58:cc:ff:d5:1f:be:df:bc:ab:4a:0b:2e:
         e9:68:33:5e:89:9a:71:a3:38:dd:42:eb:ba:a5:ab:9b:c7:d2:
         4a:36:7a:94:ed:5d:d9:29:65:3a:3f:05:6f:b7:f0:3b:c5:a2:
         b9:0d:a7:77:41:f3:85:92:d5:50:81:68:e0:f1:be:ac:5a:c0:
         bc:86:e3:07:fc:b1:8d:24:a5:c8:07:10:d8:cd:f9:7d:2a:f1:
         80:d2:7c:c2:61:8a:5c:37:3d:db:85:45:86:cb:e3:83:98:8f:
         80:68:c2:74:29:42:2d:8e:78:b3:f1:0c:8b:76:2d:0d:cf:04:
         75:0c:c5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 06:51:44 2026 by rpki-client