Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa
File:                     fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa (raw, json)
Hash identifier:          oPGQKb0yNE3xcxgZph00gTOpe2Mn7ijAZlId9/hDdJ0=
Subject key identifier:   29:38:77:1F:8C:FB:F8:33:74:72:87:6C:09:3B:F9:4F:E6:A3:77:2A
Certificate issuer:       /CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0
Certificate serial:       010D0C9F4328584DBBA05641DDF5E8BDCC851CBC
Authority key identifier: 10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     397945
IP address blocks:        23.141.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:56:41:dd:f5:e8:bd:cc:85:1c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=64b7a9f3-c5e9-49ad-b14a-ed464a30a0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:d1:4a:87:eb:36:4c:c2:b5:85:7f:e4:0d:
                    f9:60:36:95:2d:b0:c9:2e:71:39:b3:a1:10:f8:1d:
                    5c:93:f2:8a:ea:8e:11:e5:73:3f:fa:76:3e:0d:83:
                    26:1d:f4:23:a3:6b:ba:6c:04:72:8d:f1:ae:49:8e:
                    10:c2:01:07:4e:dc:3b:1e:f9:a0:c9:7b:32:67:20:
                    d1:92:31:51:20:5b:33:e5:81:10:a1:44:f6:7c:07:
                    60:1e:e9:86:7a:68:9d:09:d6:5e:d3:63:10:17:ac:
                    4e:2c:65:5f:c8:e8:1a:99:1e:88:3b:7b:67:db:78:
                    1d:6d:d6:1e:a9:d3:e1:40:ad:41:10:f2:91:64:ba:
                    7f:3e:4c:be:66:a7:e1:15:12:82:5d:8b:0d:71:c7:
                    fd:6d:d8:c7:ac:94:0d:67:d2:db:bf:6a:4b:51:f4:
                    a3:95:f7:06:b2:ec:ec:c4:f2:29:f6:47:2f:c9:32:
                    e0:f6:79:ba:17:99:23:06:93:77:dd:41:d3:d6:64:
                    ea:6a:46:cb:a7:ed:77:42:8f:77:eb:8e:97:3f:30:
                    09:e0:38:5b:67:9a:23:06:74:13:43:4f:c5:55:02:
                    21:95:af:c9:97:c7:d4:a0:53:3c:a6:59:6c:32:5d:
                    5a:bd:78:2f:4d:06:d2:89:9a:a8:02:cf:2f:a9:7a:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:38:77:1F:8C:FB:F8:33:74:72:87:6C:09:3B:F9:4F:E6:A3:77:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl

            X509v3 Authority Key Identifier:
                keyid:10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a6:72:74:6b:79:fc:37:d2:df:00:f5:b9:ae:a2:7d:9e:22:
         1e:db:3c:31:99:68:69:e6:75:29:e0:65:a3:b0:9b:14:da:34:
         9b:d7:58:98:b0:b0:e6:88:49:47:2a:fe:e0:3b:36:2e:8f:42:
         64:e7:50:65:f0:ab:2e:6b:0f:92:76:92:35:49:f4:9f:85:ec:
         ea:03:2b:05:df:ca:bc:35:0d:15:d8:f3:45:eb:0d:c6:2f:75:
         20:73:b8:a7:be:8b:c7:94:01:e3:b1:fe:42:8c:0f:c6:0a:7c:
         94:9a:b2:8d:28:8c:04:77:3f:e6:ff:78:8d:27:c8:f2:9b:9a:
         f5:02:3d:c6:01:c4:63:fe:78:b7:ab:5d:0c:cf:4d:47:ab:60:
         66:fb:71:d7:3d:69:cf:c4:87:9c:1d:31:44:76:87:34:72:b2:
         4f:b1:ff:81:32:be:0d:a4:f1:ef:ab:fc:68:f8:94:04:99:a0:
         72:71:09:cc:80:7d:be:90:9e:62:6d:45:f5:b7:45:95:62:90:
         7b:4a:bb:59:32:1f:23:78:99:3e:35:e2:bd:a2:9a:79:0f:4b:
         2f:2d:be:38:a6:7d:b6:90:9c:45:03:69:7c:68:8e:ed:20:4b:
         c9:52:3e:35:f3:ae:2a:8d:88:e2:e1:46:5a:84:b6:7b:aa:73:
         34:6b:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:36 2026 by rpki-client