Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa
File:                     7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa (raw, json)
Hash identifier:          RBh9Qqw6CmBLzvCc62NmGk8KNrVhGWnd/oJ6T9sWX8E=
Subject key identifier:   8E:A6:97:39:B2:9A:17:FE:34:D1:17:76:50:E4:40:5C:60:90:3D:D8
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584DCDC59D40D3D524752A59B100
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     33442
IP address blocks:        149.23.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:9d:40:d3:d5:24:75:2a:59:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=25839e9c-7c25-403d-91fc-96bdaddd6ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:51:c8:9d:b1:ee:61:ed:28:0d:ad:9a:1e:
                    95:62:75:f5:4e:33:e1:d7:da:01:1d:06:d8:03:c5:
                    68:2d:77:82:13:33:fd:7c:aa:e4:68:a5:d8:a8:35:
                    f2:bb:02:f3:e4:e4:ea:59:72:4c:9a:b8:5a:b7:3d:
                    cc:3b:be:c7:85:bd:3d:e0:d5:a8:06:f2:b8:82:55:
                    b8:6f:9a:93:66:9b:0f:30:5f:ea:81:52:3f:4b:bb:
                    55:09:d1:09:b8:00:d7:ef:da:46:f6:de:b5:e8:8f:
                    1e:bc:6a:4e:82:0c:02:55:9d:16:04:5e:fa:7e:56:
                    42:f7:56:da:27:62:28:f7:ef:90:d4:06:42:d8:cf:
                    3d:19:f2:68:fc:7c:ce:d6:c4:d1:e7:de:c2:67:1f:
                    19:25:d2:f6:0b:84:33:5b:6e:2a:45:6b:0a:30:ec:
                    44:11:cd:c7:57:4b:53:96:30:f4:f8:40:0e:6d:dc:
                    2e:b2:c7:4d:06:54:65:1c:be:a3:7c:f0:00:d2:43:
                    e6:94:a9:2b:a1:68:02:ec:64:48:c5:3e:52:74:6f:
                    2f:7e:85:0f:a4:93:f8:79:8c:f5:5a:77:39:e7:e5:
                    11:19:e3:d5:6f:fd:e3:c5:f6:05:dc:c7:ee:53:51:
                    05:75:85:e7:9e:80:61:e8:05:e3:8f:1f:ae:87:ee:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:97:39:B2:9A:17:FE:34:D1:17:76:50:E4:40:5C:60:90:3D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/7cbbc255-be00-309f-b7d3-fbedbc6695a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:f6:38:e5:09:62:91:e4:7a:00:7e:ed:fb:04:d2:42:a9:
         d6:bd:c3:f6:57:3e:c6:5f:a0:a0:be:cf:8c:ff:d0:e1:b5:79:
         a6:38:97:77:0c:7f:67:a8:1b:5f:ae:53:8b:80:8f:4f:68:8a:
         7b:ad:b2:2f:21:e4:15:9f:5e:8c:fd:be:47:45:7f:d5:85:34:
         00:0e:e2:84:e3:75:a4:0d:10:23:31:b3:ba:52:04:1b:87:59:
         fe:f8:1e:82:03:9c:85:71:e0:8c:bb:f8:88:bf:37:3a:6f:cc:
         2e:a6:c1:10:11:dc:b8:59:6f:8e:19:b5:f1:1e:9e:7c:b2:ea:
         f0:a8:be:99:a1:40:f0:38:c6:bb:fe:59:cc:81:db:30:71:88:
         a8:27:a6:a5:32:29:09:40:da:72:8e:73:b2:84:0c:c0:55:4c:
         a8:6d:a8:1b:85:c7:26:b5:ca:4e:0d:e7:dc:f6:14:5d:9a:50:
         a1:78:aa:42:02:c6:70:25:48:16:ad:84:e4:17:f5:3e:b4:12:
         ac:1f:50:63:2d:33:47:e8:12:f8:07:aa:43:4d:f1:75:2f:11:
         f9:b0:e6:90:28:4c:e5:87:d9:3e:76:5a:e4:24:26:94:4b:9a:
         d2:70:07:de:27:3c:5e:67:b1:84:fc:48:e6:1d:8f:1e:8a:99:
         09:f0:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:12 2026 by rpki-client