Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa
File:                     4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa (raw, json)
Hash identifier:          s3BEYQ1WbiRtxb1/gxCWOTl2ECkNK9e5r41COnHSzHE=
Subject key identifier:   52:52:FD:57:3E:BC:8D:BB:78:42:F2:88:8F:4A:C6:A2:E2:3A:8F:CD
Certificate issuer:       /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial:       010D0C9F4328584DD09052E5F36086A81D64D540
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        23.180.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:52:e5:f3:60:86:a8:1d:64:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=67d39fdf-df43-4ef8-8624-a40f86ae3f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:38:cf:aa:9b:f4:2f:04:5f:8a:79:aa:7e:
                    f2:09:b6:39:4f:1b:5b:e2:d6:89:9f:6c:d1:bc:36:
                    31:ce:65:cc:73:ec:88:d7:9a:10:0d:42:63:20:f3:
                    64:8a:23:92:4e:8f:ee:ea:6b:af:ea:38:bd:f6:da:
                    10:c9:e1:ae:54:6c:34:98:f8:72:6f:37:bb:29:97:
                    22:43:a4:58:21:08:f6:23:cb:03:61:93:bb:33:fa:
                    77:8a:92:3e:0f:d1:fe:13:de:48:3c:c1:28:db:b5:
                    bd:fc:31:a5:85:58:21:f2:a2:3a:2e:95:4d:34:c1:
                    48:6b:9e:8a:9e:2a:5c:80:ad:14:74:32:1e:67:2c:
                    b9:78:83:a2:42:01:b7:21:5a:fa:15:d4:df:95:72:
                    1b:67:a1:21:8f:e8:59:72:f7:c2:84:52:42:16:4d:
                    71:d5:7e:e3:33:85:3e:75:88:85:ca:c7:36:58:d3:
                    fb:e1:26:0d:69:5a:fe:c9:9f:5f:01:39:c4:a5:31:
                    6e:a6:16:70:d2:c5:44:77:0e:3f:5b:09:d5:9d:df:
                    10:2a:49:ba:05:fd:4c:25:61:0f:b0:53:04:55:f8:
                    79:87:e7:4d:e8:b5:5c:79:ad:81:82:09:f2:39:05:
                    97:58:93:4c:cc:b9:7e:e3:ce:c3:4e:6d:ba:91:89:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:FD:57:3E:BC:8D:BB:78:42:F2:88:8F:4A:C6:A2:E2:3A:8F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:3b:d7:99:35:f3:e8:9d:2e:a8:39:37:02:39:da:27:fa:
         67:d3:5b:61:07:0b:17:c5:0e:1e:53:db:3e:f7:10:95:b8:00:
         12:4d:c9:4d:4f:60:6e:93:ac:da:c5:4e:8b:b7:35:07:b0:e3:
         24:ba:11:58:35:16:99:9d:a7:26:58:9e:7d:cc:a7:9e:59:f4:
         ab:91:95:a3:ca:93:c6:ef:fc:4a:29:30:9e:25:0f:ad:2f:98:
         22:2f:ce:f9:bd:0e:40:91:12:a8:ba:f1:c1:31:87:af:94:71:
         c0:84:c7:93:b5:ae:03:16:f5:5c:27:29:4b:fc:64:83:41:1a:
         75:3d:44:11:df:9d:6c:65:88:e1:f9:ad:f4:6d:66:13:e6:93:
         49:4e:83:48:80:bf:79:6f:d8:47:b6:ca:1b:7e:8f:0a:be:3d:
         9f:83:3d:96:f9:6e:9f:18:aa:98:80:eb:1c:88:d7:bb:09:d7:
         a5:be:35:c7:76:d0:33:1c:c5:52:fa:ba:62:98:7a:12:01:10:
         03:dc:fd:2a:b6:ac:ea:fe:a1:86:2e:6e:54:08:a1:4f:ef:c9:
         de:49:92:3d:4b:a6:c7:25:90:1a:81:19:10:37:ac:f0:03:5f:
         9b:2b:b6:c8:de:79:2c:07:0e:90:a3:38:91:d9:ba:72:3d:cd:
         68:d2:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:32 2026 by rpki-client