Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa
File:                     cedfec36-7604-34c8-94e0-386e140ea60f.roa (raw, json)
Hash identifier:          JfmbJNSC8Yu89PsdOoPG3DCaG7qKoOQgL+AWRF6+17o=
Subject key identifier:   E7:CD:23:B5:FC:2E:E5:AE:15:FD:D0:6C:9E:D3:5F:8E:A0:7B:7A:8E
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584D9E501D16D4193B4CB0DFEC00
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     23528
IP address blocks:        168.203.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:1d:16:d4:19:3b:4c:b0:df:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=65e5217b-b722-4162-93dc-7827501d0be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:14:9b:b0:ef:43:8e:bd:45:d0:fe:b0:eb:
                    d8:8d:00:0c:30:9d:40:82:47:47:55:29:49:da:86:
                    98:a3:1a:f0:54:2b:c5:57:f3:28:77:57:21:1e:8a:
                    bb:f8:02:b8:22:d4:e4:db:fb:8a:aa:46:95:0b:b7:
                    af:85:5d:df:b3:c1:61:d9:c5:9d:01:a9:97:c6:0c:
                    31:48:aa:83:92:47:08:75:2d:d4:d2:1e:38:41:cd:
                    a6:ac:15:7d:ad:95:75:0d:4f:15:09:25:ce:7d:50:
                    19:ac:7b:49:cd:27:ca:17:ab:b2:a4:c3:33:e4:cd:
                    07:fd:b1:b9:2f:a8:af:d4:1c:24:a3:57:ec:0b:54:
                    cb:19:d7:70:d1:3a:e2:ec:95:22:bd:b5:0a:bd:eb:
                    6c:3b:4c:76:23:05:6b:68:55:c5:30:57:74:78:be:
                    9b:1e:03:d1:6f:e8:36:76:a8:31:be:27:90:d1:88:
                    0d:37:73:fe:cc:44:97:26:61:75:b9:dc:11:dd:b1:
                    55:5a:f4:33:0c:e9:b2:4a:95:e9:09:54:f2:cc:12:
                    65:85:16:3a:6a:d8:c1:13:a3:37:b4:89:b4:b0:44:
                    d2:cf:eb:1d:ef:a6:cc:5a:06:0e:82:9b:e5:64:b4:
                    6e:58:36:c6:f9:0e:ef:fb:c5:51:c1:99:58:22:02:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CD:23:B5:FC:2E:E5:AE:15:FD:D0:6C:9E:D3:5F:8E:A0:7B:7A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:1a:06:16:9a:c3:1b:12:6f:9b:2a:78:ae:b8:20:78:7e:
         b8:84:67:4d:e4:df:ce:00:aa:74:08:94:3f:4e:d0:12:9c:0c:
         d6:b8:0f:f9:17:36:7c:3c:ae:98:b5:20:42:51:1a:57:65:39:
         e1:a1:67:a4:0c:a4:fd:5d:72:29:ce:f1:27:ef:a4:07:90:a4:
         e1:84:cd:4b:4c:b0:58:77:75:38:c9:4e:a0:a2:69:f1:20:6d:
         5f:2a:76:2b:ef:9d:e7:d4:fc:a1:3b:26:85:2c:0d:2f:80:40:
         36:b2:47:7e:d0:47:3f:be:ca:3a:3f:aa:f3:3b:8d:c8:23:57:
         5a:7f:39:c9:0b:b0:35:b8:89:27:e6:5f:b4:9f:ee:8b:36:71:
         7f:3a:ef:d5:da:c3:e0:94:8e:b3:e6:85:6c:cc:54:4e:8e:90:
         f2:8d:f0:e6:1f:10:44:56:53:58:91:a3:77:d3:92:c5:3f:fd:
         8e:4c:9a:01:ca:53:00:7c:a4:88:18:06:67:fd:e2:44:7c:0a:
         6a:d8:e3:53:ba:da:59:3b:93:f9:fc:06:09:d7:e5:76:d7:c7:
         1f:98:3a:da:c5:7d:9c:70:16:de:59:22:ed:5b:6c:4e:3b:fb:
         e0:ed:f9:2f:0a:80:3f:dc:1e:46:1e:5b:83:23:5e:e4:91:24:
         6b:b9:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:38:34 2026 by rpki-client