Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/9c04745e-22a4-3b9d-b55c-ab071bc22ecf.roa
File:                     9c04745e-22a4-3b9d-b55c-ab071bc22ecf.roa (raw, json)
Hash identifier:          gPYE1396yJNGDAtQUk+FrSfMLX3jxiE+LuyCh2gAipU=
Subject key identifier:   E4:93:1D:AA:2D:84:42:FE:B6:AE:C9:37:D8:3E:C7:4B:66:A1:82:6B
Certificate issuer:       /CN=bd4370d8-dcbf-4a76-8882-6d8829ae3e2b
Certificate serial:       010D0C9F4328584DAE21A4605B3905382258A3A0
Authority key identifier: 7A:9A:89:85:4C:03:25:2E:80:E6:C2:32:49:B4:15:86:E1:34:A0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/9c04745e-22a4-3b9d-b55c-ab071bc22ecf.roa
Signing time:             Thu 30 Apr 2026 17:00:01 +0000
ROA not before:           Thu 30 Apr 2026 17:00:01 +0000
ROA not after:            Wed 29 Jul 2026 17:00:01 +0000
asID:                     402452
IP address blocks:        23.157.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:21:a4:60:5b:39:05:38:22:58:a3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4370d8-dcbf-4a76-8882-6d8829ae3e2b
        Validity
            Not Before: Apr 30 17:00:01 2026 GMT
            Not After : Jul 29 17:00:01 2026 GMT
        Subject: CN=03fc76ed-38db-4881-a5a8-b9a2bdfc3685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:e3:9a:a7:ad:f0:78:e9:11:6e:a9:74:5c:
                    48:70:2f:9d:2b:7f:ac:fa:ae:d7:2b:2d:b3:a8:2b:
                    fe:da:66:65:ee:6e:b1:a6:8c:0d:96:b4:8e:06:36:
                    04:ef:f9:28:66:5c:6e:40:46:aa:a6:fb:7c:03:1e:
                    bd:a3:f1:e4:15:e5:a1:de:81:68:f5:26:f7:41:cc:
                    46:ef:f1:d0:e4:a1:70:fd:47:5e:66:9e:6c:9c:9c:
                    ff:2e:05:fe:0d:65:fb:60:8e:9c:25:bd:d8:b8:10:
                    9b:ad:d8:3d:ad:bb:ab:f4:04:83:60:44:d9:6f:0c:
                    87:e1:8c:aa:4d:bc:2c:69:22:13:a7:fd:8f:4e:b1:
                    da:c3:92:4a:66:33:4f:85:61:2d:af:8e:a7:ac:c2:
                    da:2a:18:53:27:0f:ae:04:bd:b3:52:2e:79:5c:b2:
                    af:18:47:d3:b0:5b:b7:b5:e9:93:01:c2:f1:0f:ee:
                    91:b5:ea:fd:cc:ae:9b:85:df:c6:5c:db:3b:90:a7:
                    c2:c0:37:c5:65:e6:c0:8c:c5:2d:02:80:4d:4a:65:
                    53:2c:8d:ff:41:44:b5:06:58:bb:16:e0:35:4a:28:
                    b1:ca:f1:73:c7:93:b1:ae:d0:bd:0d:33:0b:08:1b:
                    48:5f:44:4f:0d:2e:7b:26:52:5a:17:f3:45:25:d7:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:93:1D:AA:2D:84:42:FE:B6:AE:C9:37:D8:3E:C7:4B:66:A1:82:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/9c04745e-22a4-3b9d-b55c-ab071bc22ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.crl

            X509v3 Authority Key Identifier:
                keyid:7A:9A:89:85:4C:03:25:2E:80:E6:C2:32:49:B4:15:86:E1:34:A0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd4370d8-dcbf-4a76-8882-6d8829ae3e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:af:13:0b:5e:ef:c6:d9:6e:11:e4:f5:2c:94:d7:69:7e:f7:
         8f:b0:33:d7:6f:fd:f2:c8:ea:ba:c0:a2:28:86:62:17:61:fd:
         2a:7f:d7:d4:2d:9a:65:c5:b9:37:7c:50:b9:68:1b:4f:fd:c5:
         2b:a7:a5:02:01:97:8e:e5:6a:08:0d:e6:50:60:42:0b:4c:27:
         fe:91:71:4e:44:81:67:3a:94:c5:eb:d2:f2:1d:fe:01:e6:57:
         cb:ee:0d:87:94:e8:7b:bc:10:70:ba:0b:9b:e6:3a:a1:0d:7e:
         f8:ee:64:e2:e9:42:cc:c4:ce:df:ae:5b:e5:dc:ad:b2:78:63:
         ee:fa:13:9e:a0:c6:ee:9e:1b:c2:b4:cc:79:6f:b7:73:c1:f0:
         4b:44:d9:44:bb:42:69:0d:b7:af:35:73:c1:ef:f8:dc:df:ed:
         3c:c3:a8:f6:db:ff:b6:24:95:a1:bd:2b:d6:18:89:d7:6f:0c:
         7b:26:6b:ed:84:06:d4:7a:ae:7f:3f:e9:d6:20:cf:0a:1a:73:
         b5:6e:ab:1f:f7:31:77:69:b0:e7:bc:1e:c2:c6:1b:f3:6c:87:
         fd:c1:d1:8a:32:e4:a0:d2:1d:62:69:c9:60:d3:41:26:40:f5:
         82:07:1e:cd:83:bf:2b:a2:11:af:b0:b9:40:0b:af:88:e4:66:
         f7:8f:57:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:38 2026 by rpki-client