Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/36906e0e-42c0-3531-8e6e-b3c00df41206.roa
File:                     36906e0e-42c0-3531-8e6e-b3c00df41206.roa (raw, json)
Hash identifier:          oBlSqh5YJkgng+9S/FXr7tvSPqOK69cou5fJ1yrrZW4=
Subject key identifier:   37:59:8F:50:D0:1A:1A:AF:5B:2A:1C:07:4D:50:B2:39:03:CA:92:50
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584D45B8DBCC5E5C5C2B4CA082C0
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/36906e0e-42c0-3531-8e6e-b3c00df41206.roa
Signing time:             Tue 24 Mar 2026 07:24:49 +0000
ROA not before:           Tue 24 Mar 2026 07:24:49 +0000
ROA not after:            Mon 22 Jun 2026 07:24:49 +0000
asID:                     18450
IP address blocks:        23.172.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:45:b8:db:cc:5e:5c:5c:2b:4c:a0:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Mar 24 07:24:49 2026 GMT
            Not After : Jun 22 07:24:49 2026 GMT
        Subject: CN=dcb44a45-1605-4f34-8ee9-b2274d9e7eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:26:fe:2a:91:10:a4:a4:42:ff:1a:c9:b0:
                    d1:64:62:d6:a3:c7:0f:17:bf:43:c7:4c:fe:ff:36:
                    4a:72:41:ab:08:a9:bf:b5:cb:93:9c:79:70:11:7d:
                    02:34:34:88:b5:23:9c:b5:5b:1a:23:3f:66:ea:77:
                    3a:15:4b:2d:7c:75:9c:f4:33:94:5a:88:ef:22:f9:
                    72:1e:7b:3d:3b:dd:a8:c3:66:3b:a2:35:04:4e:85:
                    9b:37:17:16:be:a7:c3:18:51:77:71:f5:5f:98:81:
                    ed:72:2c:b8:56:6b:8c:df:6b:f8:02:6d:8a:d3:dd:
                    0d:a7:0e:54:10:0a:51:9b:ec:ec:dd:f9:3c:ab:7d:
                    77:73:89:05:37:a0:3d:f8:41:76:3e:98:02:1f:2d:
                    78:b2:e4:5d:96:46:c6:33:d3:ce:38:77:3b:03:b3:
                    1c:69:39:59:9a:a5:42:da:19:9e:8e:0d:e5:f6:0d:
                    92:57:0b:bd:04:3e:7d:f0:a5:5d:52:29:90:54:a0:
                    63:e4:9f:1f:d8:f0:77:f6:d0:ca:7f:32:74:ca:85:
                    60:f1:6d:a8:6b:52:4b:69:42:a2:d6:bf:0a:e6:11:
                    b2:8b:7e:c9:31:29:80:24:18:a8:ab:4a:8e:f7:f4:
                    ea:97:a1:8a:f4:6f:4d:b0:d1:0e:92:55:d0:bf:d2:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:8F:50:D0:1A:1A:AF:5B:2A:1C:07:4D:50:B2:39:03:CA:92:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/36906e0e-42c0-3531-8e6e-b3c00df41206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:a3:d5:1e:bd:cb:2a:2f:6e:b2:ca:ef:6c:40:70:0c:c9:
         4e:ac:eb:31:75:b8:e5:ae:fa:c3:06:b9:a4:6c:5d:d2:79:6c:
         bd:0d:e9:0d:63:a1:2e:f6:8f:52:fe:b5:34:be:98:1d:d4:3d:
         bd:82:d0:c2:5e:a1:02:ed:ae:24:80:3d:f7:4a:4d:e0:b8:e2:
         1b:f5:20:e0:11:f0:4a:58:c9:fd:b3:37:b1:bb:bf:3c:1c:a0:
         e2:8e:e8:3a:58:fd:dc:72:29:d8:af:eb:ec:ba:60:4c:48:48:
         8c:70:35:ef:72:ef:a4:22:92:c0:3c:76:07:40:23:55:1e:dc:
         3c:6c:e2:c1:5e:ba:3d:16:11:34:0b:c8:3a:72:52:5f:18:9d:
         9a:7b:9f:21:2c:07:7c:2b:f5:02:c7:40:ed:3d:67:35:46:1b:
         ae:0d:53:79:12:c7:92:e9:a9:13:ce:ee:0b:9f:19:cd:7e:15:
         83:13:11:8c:7d:49:28:3c:33:49:37:38:36:83:a7:23:97:cd:
         1c:78:38:f4:94:9c:80:ba:d2:2e:30:2b:d1:03:3e:ef:6e:90:
         77:41:24:4a:03:19:27:be:d0:e4:1c:2e:b9:ba:05:a7:87:8e:
         5a:fc:6c:54:8c:24:b0:be:ab:82:46:05:57:76:eb:65:46:2f:
         8b:e7:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:32 2026 by rpki-client