Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/ee3be007-81e7-3675-b7b2-2bd5367aa64e.roa
File:                     ee3be007-81e7-3675-b7b2-2bd5367aa64e.roa (raw, json)
Hash identifier:          cwvLM/mAC+5IZNAYTdv+WMHpG1WcaJZ5UM/NQLEaXUs=
Subject key identifier:   1F:A8:6F:EB:D7:D3:43:57:A6:63:38:8D:D7:68:65:E1:5C:05:1F:F5
Certificate issuer:       /CN=9032b19f-5ab1-4765-944e-83a757678275
Certificate serial:       010D0C9F4328584D6EDA57B6C6DBAA8DE43963C0
Authority key identifier: F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/ee3be007-81e7-3675-b7b2-2bd5367aa64e.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     152179
IP address blocks:        23.142.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:57:b6:c6:db:aa:8d:e4:39:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9032b19f-5ab1-4765-944e-83a757678275
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=13da8e58-f9d4-4bb4-ba1e-4326164679df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:b1:55:7e:8b:79:27:e5:a5:96:55:cd:9a:
                    30:fa:b6:78:b2:69:44:9d:5e:93:e4:23:a7:f7:ea:
                    6b:a6:94:db:8a:9f:09:bd:da:60:70:e3:b6:6d:8f:
                    dd:62:5b:71:c2:09:76:97:45:97:d2:70:3b:0d:60:
                    0a:89:27:fb:40:50:89:22:de:1b:bb:f7:28:2e:ca:
                    8a:3a:0a:72:9b:e0:f5:0e:6f:2b:be:90:b2:d2:47:
                    04:8f:b9:68:47:47:ea:69:5d:f3:34:1b:61:38:4b:
                    eb:4b:22:93:1d:d4:c7:3c:c1:a9:12:78:e7:69:69:
                    53:9d:31:d4:46:cb:9b:1a:bb:11:20:a3:73:2c:4c:
                    30:4a:7e:69:94:2e:a2:74:dd:3d:b3:98:95:4a:b1:
                    3d:22:57:37:c8:ef:9a:1a:a2:91:53:9e:4f:df:c5:
                    3d:d1:d0:ae:a9:7a:f0:d0:ae:31:a8:fa:97:9f:16:
                    43:48:90:3e:8d:91:62:17:da:ff:c2:e5:f8:22:95:
                    2f:ad:bc:15:b7:72:e0:00:11:2b:0d:49:d5:90:57:
                    e6:a7:21:fd:d9:6a:8a:65:33:58:8a:45:36:9e:55:
                    bf:93:01:da:43:4b:b1:60:f9:32:bc:e0:5a:0b:29:
                    c3:ad:97:d0:b7:43:f8:ee:d5:7c:01:6d:a6:b4:bb:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:6F:EB:D7:D3:43:57:A6:63:38:8D:D7:68:65:E1:5C:05:1F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/ee3be007-81e7-3675-b7b2-2bd5367aa64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:be:bc:15:a0:4c:fe:de:c2:fe:06:96:90:f1:58:a3:31:70:
         81:d2:10:ab:68:f0:a3:87:e5:af:78:29:1d:72:19:5e:62:72:
         60:c1:0e:42:a2:97:73:be:e2:d4:60:6d:39:51:77:ac:71:1b:
         5a:6b:39:b1:06:ec:3a:87:c0:03:f6:36:08:44:ac:5a:08:34:
         7e:55:23:bc:bd:4f:e2:81:f9:74:cc:50:43:2e:14:89:17:b7:
         79:34:7b:a8:a7:11:d3:12:41:ea:2e:4c:eb:84:3e:3f:84:93:
         56:af:6e:10:4f:0d:c4:9f:ad:3e:ac:33:85:65:bf:46:07:74:
         8c:bd:6b:59:24:8b:88:ba:c8:f2:5e:3e:84:1c:03:ae:f2:e5:
         31:3c:79:45:7b:a9:76:49:f3:28:87:b1:5e:82:19:c4:92:f1:
         9a:f3:85:bd:ed:c3:e2:11:87:7d:c4:b3:ec:de:97:1e:fb:49:
         32:c6:ce:44:ff:5b:de:db:aa:ff:2d:2b:d8:91:a5:76:b1:d4:
         fb:b9:79:f0:16:23:58:8d:f9:5e:ad:8e:4b:97:6d:5b:29:6e:
         78:ec:90:56:83:5c:8c:47:07:f1:9d:65:86:02:98:99:3d:87:
         0c:f0:2a:78:5d:26:d6:0a:74:93:5b:f6:c0:9a:ae:c9:0e:90:
         b5:6b:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:32:41 2026 by rpki-client