Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa
File:                     51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (raw, json)
Hash identifier:          b/UdDr1BLMkKZUu4HZ7I7zqlZ5Lon27LbGqbAksIZIk=
Subject key identifier:   65:D5:7F:A3:AD:55:9D:D2:B3:A6:93:94:64:30:88:D8:92:60:84:A2
Certificate issuer:       /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
Certificate serial:       010D0C9F4328584D1F4A461F3B71CB4B9F760F00
Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     395185
IP address blocks:        23.137.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:46:1f:3b:71:cb:4b:9f:76:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=92cde833-adc8-4cae-b8d8-c6bc4414d459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:22:44:3a:f0:ee:67:79:b3:ce:3f:ba:4e:
                    a1:0a:ed:91:83:cd:36:9c:9f:40:bc:13:39:86:07:
                    39:f1:56:54:26:3c:11:69:4d:df:ff:82:87:2f:ac:
                    b9:73:b9:ea:76:5b:17:53:dc:ee:3a:00:ba:56:4d:
                    8f:c8:39:46:1f:f8:ac:a3:99:14:2b:84:16:6f:e2:
                    2d:e6:5d:6e:b3:6b:13:cd:78:94:31:58:5c:a6:c9:
                    d5:09:a7:91:3f:e8:97:1d:7d:ce:4e:ad:ab:60:25:
                    50:bf:e0:48:13:91:ae:76:26:d7:94:4f:42:76:13:
                    1b:b9:40:1a:47:ab:79:9d:3b:8c:9e:c0:5e:ca:0a:
                    cc:56:aa:10:a6:e8:62:dc:91:be:d6:3d:5b:18:88:
                    86:53:7c:85:c2:87:5f:a9:af:ee:2a:fc:03:cc:b9:
                    2f:48:c9:69:4f:82:62:37:8a:b2:95:8b:0b:90:05:
                    b7:04:3a:a5:21:ed:dc:0c:e1:d9:78:1d:36:60:f3:
                    48:bb:5c:25:a0:62:ce:64:c8:71:4b:14:69:a1:4f:
                    64:56:f6:33:08:26:3d:52:e5:77:8d:2f:a6:8c:b0:
                    02:5d:0f:70:0e:1c:8f:8e:1e:7a:b6:6b:35:eb:81:
                    5e:37:0b:86:b3:5f:43:b2:3b:d6:a3:a5:1a:64:1e:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D5:7F:A3:AD:55:9D:D2:B3:A6:93:94:64:30:88:D8:92:60:84:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl

            X509v3 Authority Key Identifier:
                keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:c8:0e:4b:2a:dd:14:76:45:01:83:9d:9f:2c:e7:b8:ae:
         d2:09:ff:a2:e6:c6:88:bc:df:13:60:a3:c4:71:79:3d:ee:90:
         e9:99:f1:56:de:3a:e8:ae:d8:58:5a:fa:e0:b8:af:d2:88:d8:
         7a:62:ea:4f:98:ed:0f:b8:e8:2a:69:f7:5e:3c:df:5f:f2:3a:
         41:23:05:51:7b:af:a4:2c:2d:a9:59:44:f5:a7:62:cd:42:33:
         42:7a:61:2b:88:ad:67:15:22:27:a6:17:08:a7:dd:18:9d:d8:
         94:91:f2:d3:43:7d:28:fd:50:59:4a:fb:8e:32:ea:79:6d:51:
         60:0c:2f:9f:36:e3:13:0c:fd:2d:51:bc:3e:75:a0:bd:75:ea:
         f6:f8:59:6e:86:43:b6:ca:14:df:df:77:ad:0f:a7:14:d2:f4:
         aa:de:ed:85:e7:b9:4d:ec:d2:94:5d:a6:9a:a2:35:67:79:85:
         2d:b3:73:b9:6f:2a:bf:90:d4:d6:10:ca:8b:fa:a1:89:fe:ba:
         a2:36:18:d4:e5:8a:66:16:d1:81:6a:e3:68:34:31:c5:f4:c7:
         b8:7f:b5:a9:0a:11:36:4e:09:ee:7c:ae:bf:6f:b0:37:8b:92:
         d3:73:74:bb:eb:03:d7:20:a1:dc:d4:ea:54:54:cb:88:b3:03:
         a8:0e:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:12 2026 by rpki-client