Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
File:                     b1689224-3522-322c-b540-085659c0b310.roa (raw, json)
Hash identifier:          RZgrw5hmajh1vhI0M8w28Yz7t5VEMHUkymJ8QUqkt6U=
Subject key identifier:   34:9D:3C:F9:35:A7:3F:A7:99:7B:A4:30:82:F2:26:19:52:F1:24:4D
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F4328584DC6CB0AA05491E544E07D6600
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     19740
IP address blocks:        23.173.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:0a:a0:54:91:e5:44:e0:7d:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=b689f74f-b86d-43cc-9dd7-80d071c1daca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:66:6e:a6:f3:8a:10:1e:74:b0:f2:fe:ea:
                    3b:01:47:37:ba:8a:ec:fd:66:d8:3f:68:ac:72:0f:
                    3d:b2:8a:8d:f5:99:27:dc:58:13:a8:3f:1b:06:80:
                    f4:49:36:4c:72:62:41:57:42:e8:e5:fb:7f:cd:7a:
                    09:93:c7:97:ea:b2:aa:5f:79:f0:21:b1:91:7c:f5:
                    47:56:bc:c1:2f:a1:62:6b:d5:f2:88:5c:1f:53:9d:
                    b9:7c:b0:c8:b1:fe:c2:a6:04:62:e6:f8:ef:01:77:
                    1a:08:94:f9:03:a0:6a:67:25:01:8b:c7:47:17:48:
                    93:7c:e4:d0:81:b3:6b:6f:4c:7d:aa:43:2b:3d:81:
                    fe:23:4f:06:c1:50:01:54:f6:12:6b:8a:dd:77:71:
                    b2:64:c7:22:bd:89:2f:f9:92:f1:64:b7:70:d5:02:
                    11:6d:b5:46:2f:71:ef:87:0f:5e:68:42:95:1f:4e:
                    a1:d6:5b:8e:53:b6:00:f5:85:9b:ea:c1:c1:64:c7:
                    2a:f9:19:4d:4d:82:62:7a:4d:eb:a5:52:32:a5:a9:
                    f4:2a:62:30:a6:32:29:99:a7:99:7b:fc:5d:4f:66:
                    14:b0:6e:bd:5f:16:3d:83:da:d0:3a:15:9c:9f:af:
                    04:84:61:04:71:5c:d7:60:bb:9f:e9:8d:20:84:a2:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9D:3C:F9:35:A7:3F:A7:99:7B:A4:30:82:F2:26:19:52:F1:24:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:aa:79:88:d7:06:ef:fb:3b:f5:08:83:52:d8:06:00:e2:e3:
         a4:a2:a7:49:c2:5e:05:89:9a:c0:fd:1d:83:7d:45:3e:7b:ec:
         eb:12:b7:46:f8:ca:e2:45:e8:4e:29:87:99:d9:0c:6d:a1:5a:
         11:c6:84:8f:41:af:dd:c2:18:94:ae:8f:f5:49:55:14:9b:a0:
         12:e6:0e:ff:ea:83:ae:91:3d:f4:ce:8a:19:6c:01:35:fd:74:
         62:4c:b8:27:98:72:f0:d2:ff:8f:55:bf:73:35:91:84:b6:82:
         6f:cd:f0:53:d5:91:73:e2:a6:19:2b:30:3d:50:7b:2a:32:cd:
         45:36:b3:c8:37:31:1f:ae:e5:5b:40:41:26:c3:ec:64:4e:9f:
         a1:67:2f:91:f5:3a:a8:61:e0:c2:46:b6:a4:1b:e6:24:c1:b4:
         c3:f4:9d:10:e7:a0:20:84:8f:78:a1:65:a8:b2:a6:f6:5a:8b:
         80:e5:ea:86:04:9f:29:20:01:57:ff:bc:30:33:6e:b3:d0:9f:
         49:0a:80:10:93:aa:60:67:7b:1b:67:56:5e:4f:9e:8b:c1:6f:
         18:49:84:aa:6b:c7:3a:1b:02:b6:4d:0d:a7:09:de:21:d9:4a:
         75:8d:32:f6:05:08:9a:37:88:a3:38:0e:77:72:d3:66:95:d2:
         3d:c6:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:13 2026 by rpki-client