Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/760e8091-2223-3b65-b116-a5851aa0d680.roa
File:                     760e8091-2223-3b65-b116-a5851aa0d680.roa (raw, json)
Hash identifier:          0JAT3rrjfuWE9759p9DpcfG20CLcreCrq8F3VD/i4jQ=
Subject key identifier:   2A:A1:58:8E:D3:5A:DE:99:08:35:E4:55:DC:FF:FE:9E:C3:DE:F4:D0
Certificate issuer:       /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
Certificate serial:       010D0C9F4328584DA6B0157EF6E4756A88879F10
Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/760e8091-2223-3b65-b116-a5851aa0d680.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14478
IP address blocks:        23.136.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:15:7e:f6:e4:75:6a:88:87:9f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=ffd02d12-9a87-4700-84dd-a54540f05196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:70:81:12:d3:6b:7b:f1:e2:3f:4b:b5:bb:e5:
                    1f:b4:97:ad:88:7f:6d:b9:81:c5:e7:a2:72:d0:84:
                    00:f3:63:99:cf:48:f7:47:4a:1f:32:7a:a3:6d:bf:
                    c2:c4:c2:d0:ad:da:2f:de:7a:4a:11:d0:73:25:6c:
                    97:b5:13:fb:02:b5:36:84:35:cc:84:4f:98:71:71:
                    bf:fe:45:08:21:9b:f7:f2:3a:0c:59:cf:09:11:ed:
                    26:62:59:4e:38:af:46:bc:e4:6c:df:2b:22:58:99:
                    22:26:51:39:ae:4e:e2:12:31:8e:75:4a:9d:ae:51:
                    26:75:8f:05:a0:8b:97:36:4a:2a:70:95:40:25:58:
                    41:e2:10:8f:1c:b6:75:e4:24:25:d0:ab:91:1a:b8:
                    7e:90:7c:d7:18:81:02:63:6a:97:af:4e:7c:7e:a4:
                    3e:71:76:d6:c6:e8:0a:09:c1:bd:27:91:7a:fb:94:
                    7d:c2:4d:d7:6d:41:ef:c5:7d:07:36:7d:89:0d:bf:
                    a1:d1:f9:4a:72:a4:52:aa:2c:27:1c:47:c7:23:74:
                    d7:ba:5d:e7:88:0a:c9:ab:03:a1:32:4c:5f:be:b7:
                    f8:86:47:f0:35:03:9a:7a:1a:1a:1b:68:76:ec:22:
                    27:0e:43:0b:dd:17:1d:72:d7:fa:89:29:fd:ea:e1:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A1:58:8E:D3:5A:DE:99:08:35:E4:55:DC:FF:FE:9E:C3:DE:F4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/760e8091-2223-3b65-b116-a5851aa0d680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl

            X509v3 Authority Key Identifier:
                keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:55:51:0c:fa:d0:23:4c:9f:b1:d4:9c:b3:0f:45:12:df:75:
         2b:40:af:8b:30:ac:69:1b:7f:b3:7c:84:96:f6:c0:95:4f:3b:
         32:b2:95:94:5b:68:16:eb:34:c8:0c:56:bc:f5:45:e1:29:b9:
         f6:d0:a0:b3:1d:6d:7c:a1:76:c5:8f:17:59:d4:c7:ec:97:57:
         cc:85:fb:d6:3f:69:94:a9:76:f7:11:2b:4a:25:e5:67:7e:dd:
         32:d0:ce:7f:e5:dd:79:1e:76:5a:c1:f7:6d:6f:ce:4d:d1:aa:
         dd:34:81:a8:2e:a0:96:f5:91:2c:14:6b:95:b8:09:9a:7f:9d:
         d2:2c:e1:27:40:ef:2f:04:bd:56:d3:b0:08:55:9c:de:8d:d0:
         53:d8:52:7c:5e:4e:57:dd:cf:a9:bb:68:2c:be:94:a9:12:07:
         87:77:bc:47:44:d3:8e:43:76:0c:b4:d9:ad:a5:42:42:01:b7:
         7d:9c:35:d4:3b:23:7f:31:e1:72:3e:95:2d:6f:14:60:62:d8:
         f1:91:9a:e5:e8:2a:85:32:b5:94:d5:7c:95:34:45:b3:fa:18:
         13:d1:e7:3a:76:cd:a5:fc:8d:10:11:b3:0b:76:e0:a2:8e:db:
         2f:9e:96:fb:15:18:12:a7:f9:bc:fc:71:b1:4f:93:f9:3c:b1:
         38:28:79:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:51:13 2026 by rpki-client