Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa
File:                     e604780b-4bf4-362f-9661-294a2090b35c.roa (raw, json)
Hash identifier:          sg6NHpUdYezvS4mZliCaYK0k/jRyugSKt4rakcrmgQo=
Subject key identifier:   01:FC:01:A0:6F:13:AC:1D:7A:B4:14:F0:AB:2F:F5:01:4B:96:93:71
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584DBD05A23E39509B0310E02480
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     33039
IP address blocks:        23.173.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a2:3e:39:50:9b:03:10:e0:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=eea211e1-b769-4bec-8b29-1ea4aab9b26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:66:0e:89:b7:1f:04:90:a7:d5:27:90:31:
                    c4:74:36:7a:f9:08:5c:57:63:c2:fa:91:cd:ce:04:
                    fa:2e:be:68:b8:05:57:ef:dd:0f:17:8e:b7:bb:c0:
                    b1:aa:8d:e0:bd:88:c6:80:13:8e:16:87:17:af:30:
                    e9:51:d8:8d:bf:c0:e1:c9:2b:88:85:3c:78:07:7e:
                    30:d0:86:db:6e:34:1f:6f:cf:a8:80:b3:10:ad:be:
                    64:3b:59:66:0f:c2:79:d2:77:7b:1f:7c:a5:48:16:
                    17:0e:70:4c:5f:56:7f:71:24:a7:28:0f:14:24:5f:
                    31:b1:c0:85:e8:18:85:95:b9:e6:47:4f:e7:3d:22:
                    02:8d:06:b1:84:43:4c:a7:f7:a3:d4:f7:ad:a9:69:
                    93:65:ca:46:67:5f:15:ad:05:47:4a:42:13:e5:66:
                    e6:eb:c9:0f:ba:31:a0:79:4c:85:c0:cc:f5:ab:6d:
                    02:4d:da:6a:80:90:e9:d1:14:f8:c2:47:8c:69:6d:
                    f5:b1:d7:99:62:68:c6:73:35:f3:fd:14:18:5a:5d:
                    f8:b9:30:6a:7b:45:15:d2:a0:3a:1d:6a:be:17:b5:
                    44:92:40:30:53:e9:d7:28:58:2a:66:b6:57:7e:60:
                    1d:ff:3c:64:75:06:ca:d6:69:d1:33:e1:00:34:39:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FC:01:A0:6F:13:AC:1D:7A:B4:14:F0:AB:2F:F5:01:4B:96:93:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:d2:f9:3d:bc:ac:a7:68:52:0a:73:42:5b:d5:5b:22:92:
         eb:6b:03:27:41:73:68:b7:44:78:26:67:65:7f:0b:93:32:ed:
         e6:5f:24:2b:d8:bd:d7:33:e2:e5:7d:01:76:de:7d:1c:8e:f6:
         a0:d7:bb:83:3a:d9:50:25:55:d0:e2:92:a1:41:8e:da:2d:64:
         56:df:40:a1:49:8d:2b:2d:ac:f4:f5:eb:9d:69:f6:4f:24:55:
         10:1d:f8:ac:34:2b:74:28:2b:14:15:dd:4f:0e:81:f8:88:e0:
         9b:a9:91:a6:32:b3:ef:a4:40:10:49:d0:99:a8:c1:79:3f:f5:
         cd:94:44:f6:59:29:1b:8c:64:a0:bd:79:99:5d:00:11:18:fb:
         1d:73:ff:f5:54:7f:28:57:f2:4b:1d:ab:47:eb:82:3a:44:e4:
         7c:7c:90:6b:53:5d:21:b5:fb:59:11:81:73:29:b9:ed:ef:bb:
         80:c4:95:ea:bb:33:64:59:1d:21:bf:53:bc:3c:12:46:48:4f:
         a8:f5:94:84:24:e6:be:71:32:b9:a4:c5:63:85:f1:93:f4:eb:
         0f:46:cf:6a:b2:6e:d9:d2:b3:00:b7:a4:f9:ab:64:7c:0b:a2:
         a8:24:4f:67:da:2a:23:5a:9d:3d:76:68:1e:28:37:9b:1a:fd:
         74:14:2a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:59 2026 by rpki-client