Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa
File:                     fc1d422d-b307-38b9-a471-8551b35adec8.roa (raw, json)
Hash identifier:          syR1O3PkQmUxYfECEXQIAtWDbKatY6z5zISk0krM7+g=
Subject key identifier:   DD:EA:F3:E0:AA:37:07:6D:70:FD:2A:96:44:67:66:67:42:B2:2C:2A
Certificate issuer:       /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Certificate serial:       010D0C9F4328584DB4A570F7EC9A59E0DD027BA0
Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     394106
IP address blocks:        23.136.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:70:f7:ec:9a:59:e0:dd:02:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=908dd76a-3a42-4e89-b51c-4c96e120a15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:af:16:34:81:63:45:cc:1d:eb:22:3d:ec:
                    8c:52:67:f0:e1:8f:11:8f:93:81:ea:d5:cc:10:95:
                    f0:2a:11:6b:71:6a:9a:7a:89:ab:08:24:fd:ba:b1:
                    d5:d3:cb:78:9e:66:3c:c8:64:6b:fe:28:c5:be:8c:
                    40:f6:72:e9:77:48:56:82:21:c7:a2:a1:61:4f:95:
                    ec:94:06:23:09:6f:39:ca:7a:50:c9:30:45:2d:1b:
                    83:24:f8:02:ed:14:3b:0b:f6:0d:61:47:d9:92:d4:
                    f3:d0:41:a2:2e:cf:fd:00:5a:49:4f:e5:d4:d6:88:
                    ed:f0:c0:14:21:17:a1:b0:2c:0a:d2:8e:36:c7:72:
                    61:fe:d6:51:c0:94:c1:f8:cf:54:fb:24:a0:40:00:
                    f2:ea:a8:b3:33:67:ee:6d:46:5d:b9:2b:68:7e:8f:
                    15:42:a9:10:0e:79:18:e6:0d:e4:7f:fa:da:ab:39:
                    e8:1c:2b:d0:57:b3:a7:03:d2:a1:0e:a1:89:22:d5:
                    16:c0:5d:b3:89:29:02:ff:e0:08:f9:3a:f7:51:8d:
                    e3:5e:83:01:18:3c:0e:1c:45:8a:ae:df:e4:04:a1:
                    f4:94:bd:3e:5f:f5:40:ce:46:99:3f:5a:0b:9b:0d:
                    fe:8a:18:bd:42:23:4b:54:02:92:b0:e0:db:eb:1a:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EA:F3:E0:AA:37:07:6D:70:FD:2A:96:44:67:66:67:42:B2:2C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl

            X509v3 Authority Key Identifier:
                keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:f8:d4:6a:3f:9c:39:ce:5d:48:c2:80:25:0b:b4:82:af:5b:
         e7:57:52:42:a7:92:d4:b6:cb:40:96:79:7b:48:db:99:0e:06:
         c9:30:b4:fb:b0:d6:70:41:ad:65:ed:50:b1:f9:c2:08:c9:d9:
         e4:7d:f8:b3:61:4d:e3:f0:69:82:79:66:15:65:7d:69:35:2c:
         60:d0:38:31:69:d8:02:d4:ce:d6:4b:5d:49:c7:a7:bb:a1:08:
         7b:99:e9:a3:07:3b:fd:13:8b:db:14:6f:5f:a7:7d:16:dd:29:
         c0:a1:b9:7e:42:91:07:50:2b:af:78:30:0c:3b:4d:99:6b:95:
         ea:60:53:b8:4f:53:5a:98:c6:70:1f:8f:d5:df:c3:ca:5b:49:
         5c:63:94:4f:33:63:bf:f6:45:ae:70:6a:03:7a:f7:09:0d:7a:
         16:c8:e2:81:d4:31:05:22:ee:c8:32:ac:8e:81:2b:e8:92:a8:
         4f:47:97:b7:34:84:a9:9b:0b:ef:5b:7a:9f:ab:e0:84:6d:23:
         fe:e1:29:d0:62:1d:95:a7:f9:ac:2f:73:27:9f:47:e0:ec:02:
         20:cf:5c:aa:eb:50:b5:7e:ca:1e:50:ad:5f:bf:ff:d8:41:88:
         b2:2d:4c:96:cc:6f:b0:e7:83:e4:19:d5:c1:0d:e7:c9:11:51:
         11:c2:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:41 2026 by rpki-client