Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/f82d27d7-2db7-3397-a9ad-9d81a07e456b.roa
File:                     f82d27d7-2db7-3397-a9ad-9d81a07e456b.roa (raw, json)
Hash identifier:          wXSagte/hszXak/TEH7G9ttNOb5n1kTGttKzB5rkwsc=
Subject key identifier:   B0:E8:8D:A0:A7:63:AC:BE:68:34:0F:CE:D2:1C:40:AA:20:89:CB:D8
Certificate issuer:       /CN=04efd7cc-0d91-448d-bd9a-256355cac421
Certificate serial:       010D0C9F4328584DC61E47EDEF95832C888DD7F0
Authority key identifier: 2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/f82d27d7-2db7-3397-a9ad-9d81a07e456b.roa
Signing time:             Sat 09 May 2026 07:12:38 +0000
ROA not before:           Sat 09 May 2026 07:12:38 +0000
ROA not after:            Fri 07 Aug 2026 07:12:38 +0000
asID:                     402363
IP address blocks:        23.157.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:1e:47:ed:ef:95:83:2c:88:8d:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04efd7cc-0d91-448d-bd9a-256355cac421
        Validity
            Not Before: May  9 07:12:38 2026 GMT
            Not After : Aug  7 07:12:38 2026 GMT
        Subject: CN=c0d7439e-b63d-4a33-9236-d665969ea7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:07:d8:12:e4:a0:91:15:51:dd:df:24:15:
                    df:75:07:1a:68:66:92:48:c1:e7:4a:7c:95:2a:aa:
                    fc:01:ee:2c:ce:43:3e:72:0f:82:57:90:ce:3f:58:
                    2c:05:c0:eb:6c:e2:39:9d:e0:84:26:5d:d0:ea:77:
                    4e:a8:0f:be:80:e1:f3:ee:57:5e:ba:f0:eb:10:f4:
                    14:8a:a6:9b:d8:98:60:c6:8d:2d:95:36:33:31:fa:
                    c6:c6:ec:10:f7:0a:ce:d9:ad:28:3c:20:77:6e:58:
                    b8:b8:33:c5:51:77:4f:7d:a4:6b:d6:d9:6c:2e:ac:
                    7e:46:6a:28:c3:46:cd:ff:e7:bd:69:71:09:e9:5f:
                    96:79:c6:ea:21:e0:95:67:e9:55:7d:cd:66:12:7b:
                    7b:f4:fd:18:44:71:bc:39:e5:ad:b4:d1:d7:c1:1c:
                    03:9e:90:8b:93:fe:4f:96:73:be:df:94:88:2d:d8:
                    6d:82:ea:c3:0b:bc:c2:56:42:2c:e9:4c:4b:2e:9e:
                    29:24:99:68:99:f5:f1:ac:1b:a7:a8:e6:f2:23:8f:
                    0c:59:fa:f0:cb:6e:b5:02:f8:de:15:86:2a:6f:dd:
                    36:e6:77:d5:22:37:7e:c0:b6:28:b7:fa:a2:f5:8a:
                    77:f2:c2:10:b8:c6:9e:a1:9a:51:85:e5:ac:46:a6:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E8:8D:A0:A7:63:AC:BE:68:34:0F:CE:D2:1C:40:AA:20:89:CB:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/f82d27d7-2db7-3397-a9ad-9d81a07e456b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl

            X509v3 Authority Key Identifier:
                keyid:2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:7d:d4:4b:ce:de:a6:ef:37:16:bd:ce:e2:2c:24:bb:43:
         8b:1a:d5:0f:83:6b:e8:d5:65:75:bf:c6:94:84:01:7f:c6:42:
         7a:16:a3:82:3c:a6:4a:eb:52:f8:78:c9:fe:37:86:a2:e2:a4:
         41:c4:2c:3f:c8:06:3d:c1:94:70:69:67:99:42:08:5b:d3:7d:
         57:00:af:58:af:75:b2:a2:e4:57:ce:31:64:4d:5a:2c:d3:55:
         a1:d9:89:ff:79:38:d6:44:8e:93:76:17:3d:38:14:9c:b2:59:
         b8:b5:07:c0:1b:87:c6:2b:29:7c:03:8c:25:68:5b:ad:28:a9:
         43:e4:cd:a1:36:3c:40:0e:9c:b3:b4:df:69:44:f0:06:cb:14:
         cc:1a:5f:f5:41:0c:d6:e5:4d:66:19:48:b5:0b:d8:f6:30:a5:
         dc:d1:90:b0:bf:3c:58:e3:b9:45:ab:1b:f8:4d:29:b4:39:ec:
         fb:48:17:e4:5e:ae:f8:11:6c:b0:a4:fd:f8:80:44:1b:63:04:
         39:3c:56:0e:4e:1d:4a:4f:10:ca:7e:d2:3a:47:27:68:5b:f3:
         7a:e3:07:2f:f3:85:b2:bb:7c:63:33:c2:5a:0a:d2:df:17:1f:
         8e:21:22:1f:8d:e4:7d:b5:23:83:10:9e:65:e1:05:85:f5:30:
         91:f6:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:07 2026 by rpki-client