Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa
File:                     01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa (raw, json)
Hash identifier:          /95KTVkfqHJEOr1EMYC//GhFfYKuAlTk7lPdqS/nSc4=
Subject key identifier:   24:20:0A:47:F0:38:5A:12:19:61:2A:C1:93:2D:92:CF:5F:31:9D:BF
Certificate issuer:       /CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42
Certificate serial:       010D0C9F4328584D91C002574970FF75432D2EF0
Authority key identifier: 44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     20119
IP address blocks:        23.136.80.0/24 maxlen: 24
                          158.51.50.0/24 maxlen: 24
                          158.51.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:02:57:49:70:ff:75:43:2d:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=9472490e-49f7-4f9d-9792-a06f91bdd31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:94:d8:c7:27:92:7d:b8:60:11:15:7b:49:a2:
                    c5:0b:fe:21:96:cf:29:0d:c3:cc:cc:9c:e7:9c:14:
                    81:97:83:99:86:8a:9a:2e:80:dd:12:42:b8:6e:38:
                    47:b0:97:d5:e6:c8:ce:01:20:16:6d:9f:3e:8c:59:
                    2e:c6:46:e4:b9:38:bb:bd:b7:31:a7:60:fd:5c:d5:
                    7d:46:93:5a:88:65:2b:62:ad:41:b5:8d:a6:91:86:
                    55:36:64:8c:f8:1b:cb:66:05:46:e6:b3:2c:11:05:
                    27:ff:f0:1b:58:ae:6b:24:f1:f1:4c:4e:2a:a1:79:
                    13:1e:f8:d0:21:3b:52:96:0c:c4:9a:34:ac:d3:b4:
                    97:9b:5f:11:e6:67:02:e5:4c:7c:d1:df:cd:9d:c4:
                    ae:14:85:99:9e:a9:d9:e7:10:8e:84:87:67:ab:25:
                    c9:76:c2:13:56:76:cc:86:c7:42:e0:b1:70:91:05:
                    47:c5:86:c0:b3:cc:40:5e:94:24:5f:e1:ae:2b:5f:
                    5e:18:be:0a:72:64:ca:f1:e3:a1:5f:6d:88:9a:d3:
                    ce:03:c0:eb:a5:41:ae:da:15:cd:87:b2:6e:70:86:
                    84:1a:e4:10:e0:35:72:d5:a8:21:db:d1:a3:56:d2:
                    f7:70:77:4f:1e:70:a4:88:3c:61:6f:b1:a7:ac:26:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:20:0A:47:F0:38:5A:12:19:61:2A:C1:93:2D:92:CF:5F:31:9D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/01dcd26d-0c3b-3abe-b5bc-ac9c8acd7cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl

            X509v3 Authority Key Identifier:
                keyid:44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.80.0/24
                  158.51.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:7b:26:0c:e0:9e:98:8b:71:4d:dc:0b:d5:ee:92:28:a2:
         12:02:51:e8:6b:00:5b:9d:8a:dd:16:f3:ab:3f:41:0d:21:25:
         4e:b9:61:ad:f6:07:1e:2e:cc:a3:dd:ce:e7:07:12:4d:d6:44:
         57:48:b1:dd:c4:c3:b0:d7:44:0a:68:09:df:46:eb:03:6b:5d:
         5d:98:a8:bf:84:00:53:a0:a0:15:f0:74:0f:12:b1:d6:0d:7c:
         f8:a5:67:2e:fe:07:b0:7a:82:67:06:ec:cd:b7:bd:b6:a0:49:
         10:2c:1d:9d:c7:16:02:5e:cc:e5:68:bf:f4:b1:93:a0:23:4c:
         bd:72:b6:20:c0:12:15:dc:c2:ad:d2:e1:d5:a6:87:8c:ab:ed:
         d7:3d:cb:14:60:d8:e5:ee:8e:b5:47:56:d3:32:e2:b3:04:14:
         ab:ae:52:a2:c8:e8:0c:78:74:cc:a5:dc:28:9b:ad:e9:35:32:
         47:2b:41:e4:66:d5:58:7e:9e:e1:ee:02:f1:fc:45:4d:be:d4:
         f4:db:09:cd:37:a7:0a:cd:76:7d:5c:58:e3:89:64:83:a3:79:
         c0:d0:91:02:c6:d4:16:07:c9:76:77:79:bc:3a:c9:a0:f9:4d:
         3d:9f:fe:73:cf:00:ad:a4:21:a9:19:8c:44:f6:e6:d7:5c:9b:
         42:d5:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:14 2026 by rpki-client