Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/7f68eef0-af35-3ade-8c11-9f18d445997d.roa
File:                     7f68eef0-af35-3ade-8c11-9f18d445997d.roa (raw, json)
Hash identifier:          sjTLL1skWz1iLvpe96DAJGGTAi63GE1LU3FuZHv/huA=
Subject key identifier:   0B:0F:48:06:9A:1B:B8:A1:94:29:A6:48:9D:7B:C1:DB:58:EE:6E:BF
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584DBBA04F1BBFAABBB2C0B7BA40
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/7f68eef0-af35-3ade-8c11-9f18d445997d.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     40788
IP address blocks:        23.182.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4f:1b:bf:aa:bb:b2:c0:b7:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=6483a47a-a4fe-45d0-8223-4ada0ef4bf19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:1c:5e:65:fc:ec:80:b8:d9:44:90:d7:1b:
                    b9:74:bd:29:c3:af:8d:b8:90:2e:fc:6a:89:d6:ac:
                    b2:2a:ba:9c:5b:81:a5:f1:17:5d:7b:d9:54:ba:34:
                    c4:bb:8f:ec:7c:dd:34:99:7b:d4:71:39:77:61:73:
                    7a:7f:4a:c2:23:a5:fd:69:2c:e9:29:6f:01:5c:94:
                    0b:57:c9:5b:36:d0:a3:61:b7:f1:72:5e:d3:37:ce:
                    46:c9:2e:8d:30:24:84:71:6c:07:33:3b:a5:6e:b6:
                    2c:03:aa:eb:38:f7:df:5c:76:57:72:3d:85:16:6e:
                    ee:cf:6f:21:f8:4f:f0:60:e4:9a:e6:24:05:91:fc:
                    28:36:a7:04:89:ef:d7:95:87:48:5a:89:41:21:3b:
                    05:43:6b:09:fb:01:14:9f:aa:07:1e:22:9d:56:79:
                    5c:60:35:76:6c:d1:8a:04:f4:0d:3e:7b:a2:20:2a:
                    b7:17:dc:79:ae:89:4a:0f:c8:1e:7f:a0:bf:d7:64:
                    ee:5c:4d:c7:78:da:cd:ef:07:52:97:5c:9c:3b:a0:
                    39:1f:5f:9a:fb:da:49:e4:db:4a:55:e5:d6:77:03:
                    9e:0d:c2:44:40:29:7a:cf:6b:8a:31:f0:e8:2c:4c:
                    3d:3a:3b:2f:b1:7e:d5:35:25:fe:52:49:52:e2:97:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0F:48:06:9A:1B:B8:A1:94:29:A6:48:9D:7B:C1:DB:58:EE:6E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/7f68eef0-af35-3ade-8c11-9f18d445997d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:46:c3:e5:4a:28:5f:90:80:71:38:1d:2f:35:5d:db:04:
         81:e6:16:68:12:bf:cd:6a:5f:dc:a2:dc:aa:f4:94:e9:11:da:
         4c:70:f4:d0:9d:35:ac:dd:7e:e0:4a:11:6a:d8:af:61:fe:b1:
         9f:40:03:66:3f:e2:45:78:95:89:82:19:2a:77:04:29:b4:b0:
         f1:5b:30:99:4c:8f:d7:66:c4:33:7d:63:43:32:91:0e:aa:5c:
         ba:74:50:65:fb:2f:96:6f:ba:21:10:42:12:6f:25:4f:76:96:
         76:a5:79:9d:90:08:de:ae:ce:86:86:01:f4:7b:76:83:f5:36:
         83:ce:3d:79:51:ce:3a:e2:f0:5a:0d:7b:d9:56:56:e0:3d:fb:
         51:6a:dd:14:e3:36:c0:60:90:93:a0:81:0f:18:a4:55:62:1a:
         7b:f2:ee:b6:74:f2:d7:65:f3:6e:69:ee:53:c1:5f:06:ce:d0:
         19:f2:71:62:4e:9b:11:fa:ac:f2:37:eb:f8:23:09:0a:dd:62:
         ca:e8:7d:1b:48:dc:fb:a4:91:6d:24:b1:97:84:84:01:3b:78:
         71:54:0a:55:48:7e:5f:73:52:9b:ec:28:88:96:b5:1f:bc:b9:
         de:b2:63:b8:33:0f:a4:bd:19:a3:88:da:14:f4:4a:80:74:3e:
         c5:75:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:57 2026 by rpki-client