Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6/be6e8974-f10f-33b2-977a-6bd5928aa24b.roa
File:                     be6e8974-f10f-33b2-977a-6bd5928aa24b.roa (raw, json)
Hash identifier:          s1IzaNBhuzWgzuwx0/WnKxa1jCFZUgi6MifiWu44KA4=
Subject key identifier:   AD:AE:53:1C:51:FE:6A:C1:80:6A:22:56:47:44:D3:CC:10:60:A3:AC
Certificate issuer:       /CN=455383c9-2944-44b5-ba44-ef433f29a3d6
Certificate serial:       010D0C9F4328584D39CF9133FB3E6155AD2EF160
Authority key identifier: D3:08:C4:74:73:B4:47:93:9C:CA:47:00:FE:72:02:EF:AF:4D:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6/be6e8974-f10f-33b2-977a-6bd5928aa24b.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     395898
IP address blocks:        23.155.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6/455383c9-2944-44b5-ba44-ef433f29a3d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6/455383c9-2944-44b5-ba44-ef433f29a3d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:91:33:fb:3e:61:55:ad:2e:f1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455383c9-2944-44b5-ba44-ef433f29a3d6
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=337a492a-7cee-48f4-a7d2-1c1c9ca80c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:bc:8a:98:03:6e:55:20:34:2e:f4:6d:4b:
                    5c:57:ec:0d:e5:9d:7d:33:6d:4a:57:f5:05:3f:bc:
                    bc:2e:0e:90:ee:36:c1:e2:1c:a3:f0:d5:fe:fc:0a:
                    84:57:0f:bc:38:79:18:f4:f2:f0:5a:ed:83:2d:28:
                    bb:28:a2:c4:7c:fd:42:1e:3d:a2:6e:47:f2:6c:4f:
                    ef:f1:bf:43:c8:b0:2a:2e:31:a1:ea:b5:f6:61:6f:
                    7f:9a:71:c7:0c:07:0a:7b:c3:ad:91:72:52:a5:0d:
                    e7:59:ff:cd:c1:a9:35:92:78:2e:73:ea:6f:a4:7f:
                    64:7a:9f:15:43:05:0b:da:f1:4d:6a:68:57:77:32:
                    c3:73:df:c5:df:24:32:6f:6a:58:f2:87:72:75:58:
                    f6:03:0c:8c:3a:d5:4d:49:9f:fc:26:b7:d0:1a:29:
                    59:ae:b6:d3:5e:47:75:f6:de:d7:6b:c0:ac:d1:a8:
                    75:7d:63:a7:9b:9e:33:4e:6e:78:b5:22:f5:55:be:
                    4b:d6:cf:6a:62:84:8e:e8:54:83:2f:95:ef:15:5b:
                    4d:c5:03:d1:76:10:b3:21:b7:9c:ff:b9:0f:cb:72:
                    ef:4e:4f:09:98:85:2a:36:d7:eb:52:d0:1c:9d:87:
                    01:de:b5:12:ea:0e:a6:07:98:30:58:73:45:7c:f6:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AE:53:1C:51:FE:6A:C1:80:6A:22:56:47:44:D3:CC:10:60:A3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6/be6e8974-f10f-33b2-977a-6bd5928aa24b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6/455383c9-2944-44b5-ba44-ef433f29a3d6.crl

            X509v3 Authority Key Identifier:
                keyid:D3:08:C4:74:73:B4:47:93:9C:CA:47:00:FE:72:02:EF:AF:4D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/455383c9-2944-44b5-ba44-ef433f29a3d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4f:21:09:ac:a6:e1:51:0e:53:2d:41:a4:2f:6a:e7:d2:9a:
         45:71:ab:ff:4e:65:b9:bf:82:be:1e:bf:12:c7:e8:bb:7e:3a:
         78:14:e9:dc:ef:43:14:8c:12:80:52:7c:fe:7b:57:3f:4f:dd:
         a8:c6:c9:b8:82:43:2a:de:75:fe:db:ec:fa:e9:da:fd:80:a3:
         d6:59:81:df:fd:10:e9:20:e4:5b:b5:48:b1:aa:40:6d:43:0d:
         b9:a9:69:53:d4:12:da:d6:cc:16:ab:34:5a:1a:02:77:fb:d2:
         d4:76:2a:7b:10:c5:3d:5c:79:69:d1:a6:c1:29:55:aa:ad:88:
         e1:da:74:15:68:d7:12:b8:cb:e8:34:8d:64:f0:0d:e9:5e:fc:
         e4:75:f3:c7:70:b8:ab:78:e3:1c:ed:be:81:b3:ef:1d:34:30:
         44:b7:84:c1:18:7b:81:76:f5:63:ff:e3:45:c2:2a:94:83:ff:
         46:00:2a:6c:05:8a:b7:f1:47:08:cd:96:51:7a:b2:ad:86:2b:
         d8:e9:d9:47:1b:16:81:9f:37:cc:55:cc:03:3d:e0:36:ac:07:
         f7:97:24:21:a1:1f:1b:ac:60:14:1b:fb:9b:ea:5c:9e:62:8f:
         c5:19:7b:18:03:d9:05:a3:b1:6b:04:24:b7:43:f1:5a:9b:15:
         9f:34:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:13 2026 by rpki-client