Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa
File:                     4e395ad4-2d90-3ea0-8528-5883f02119d1.roa (raw, json)
Hash identifier:          U39Hht/Q12UhD9sm/W+J7UMGdPnbmizNbdql8GJ8gFY=
Subject key identifier:   EF:8E:F0:49:EF:04:5F:5B:11:74:20:7D:0A:E0:DE:79:16:E9:92:9F
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328584DB4A57BFF2E1684FB9B147530
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     950
IP address blocks:        23.140.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:7b:ff:2e:16:84:fb:9b:14:75:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=f169e03a-18fd-4a7f-84cd-715529a1fe1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:26:eb:51:8a:57:b4:f4:71:32:0b:30:b9:
                    0e:8b:e9:b4:d2:85:d2:f5:42:05:86:ed:11:b1:9d:
                    55:c7:40:ba:6f:9b:86:50:df:42:7e:98:a2:6e:c3:
                    c7:1e:c9:da:57:49:a3:a8:e3:a6:41:e3:b1:db:87:
                    37:cb:76:fc:43:a7:cc:22:3d:2f:61:5c:1e:cd:a0:
                    22:0d:5c:37:0e:bb:12:f1:93:e0:88:8a:11:dc:36:
                    6d:f7:da:bb:17:01:85:b0:1b:3e:04:a0:b1:cd:dc:
                    5f:37:9a:39:3f:2e:00:8a:b5:25:13:d3:db:a4:96:
                    e4:a0:5c:e1:12:c5:e9:4c:1b:0e:38:89:bb:69:42:
                    4d:f1:67:45:2f:5b:80:02:d9:63:7e:ba:98:10:07:
                    f2:bd:72:b3:4f:18:e2:e1:2a:08:29:35:15:ce:17:
                    cb:f7:6b:11:d3:22:50:27:9e:ac:89:be:ac:95:80:
                    b7:fb:c2:dd:04:3a:ce:ad:82:d0:e2:89:6b:f7:33:
                    21:48:25:84:1d:08:ba:21:95:e9:a0:38:13:d1:40:
                    30:5d:01:d9:83:01:4a:63:d2:70:a8:cb:97:10:43:
                    9a:86:99:1b:a8:49:da:2b:af:d1:15:f7:9c:97:91:
                    4f:8a:2b:76:9a:a3:cf:55:41:21:ae:a6:a5:70:50:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8E:F0:49:EF:04:5F:5B:11:74:20:7D:0A:E0:DE:79:16:E9:92:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ec:20:45:88:9d:14:fe:21:51:fb:f8:49:5c:49:e5:bd:97:
         10:4b:57:45:b4:aa:2b:d5:cb:7a:13:1a:64:dd:85:a1:5f:0e:
         f3:e5:e0:6e:f7:f3:99:c6:d6:a4:6b:29:bf:2d:c4:01:00:be:
         de:3f:71:c3:20:94:a1:51:24:af:43:69:cf:8e:88:9c:2e:d9:
         2e:c1:6f:e5:a7:d0:f4:63:c4:52:aa:ef:30:64:b1:16:61:88:
         45:a9:bf:2a:21:17:39:dc:f2:c0:58:5b:5b:80:af:ec:ef:a5:
         06:41:b5:8e:2d:77:c0:67:e5:8f:cb:8e:05:b8:ee:7a:d7:a5:
         49:63:cc:53:cb:93:e0:f2:eb:36:57:b4:ae:5d:77:61:f6:46:
         89:f1:95:8b:74:58:d5:4f:5c:36:5e:2a:06:35:96:3c:08:13:
         05:d9:34:6b:ff:9d:44:c2:5c:fb:b7:2a:50:f4:42:18:0b:f4:
         db:24:81:46:ab:4c:d4:ff:6d:26:1f:7f:7f:2c:b8:9c:f9:93:
         66:bd:ad:1a:95:ae:3b:b5:bf:83:f6:c3:18:86:56:26:0a:34:
         12:d1:12:0b:6f:b0:de:37:0a:ac:23:33:ba:7b:91:81:33:f9:
         64:1a:e7:d3:bc:eb:c2:2b:51:b7:f1:71:87:02:47:90:f8:0b:
         90:87:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:14:57 2026 by rpki-client