Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa
File:                     1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa (raw, json)
Hash identifier:          KhRSJnAtMhg/3aihXc+Li2DnrPmqneELTsbTCp3qonI=
Subject key identifier:   26:21:F3:BA:A8:46:A2:69:C9:41:12:10:BB:45:65:2E:1D:0E:AA:CF
Certificate issuer:       /CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0
Certificate serial:       010D0C9F4328584DC6CB0BD3A6B853E39DD05FF8
Authority key identifier: D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        23.235.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:0b:d3:a6:b8:53:e3:9d:d0:5f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=557c34fb-2b89-45d0-8c1a-4850cf7ae721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:e0:51:ac:22:3d:55:10:bd:93:a5:8c:dc:
                    f7:5b:aa:06:3a:82:73:3b:09:ce:93:e3:92:1e:a3:
                    8e:4e:66:9d:ae:81:4c:c1:fb:67:04:c8:7a:fb:07:
                    96:8e:ea:ad:77:1a:b8:05:6b:8a:00:15:a0:9b:34:
                    5f:68:57:9b:85:ef:6d:2b:96:45:9f:3b:cd:8b:3e:
                    c7:78:5d:e4:02:e3:6d:40:a8:01:0e:df:05:96:e2:
                    40:29:42:d5:78:a1:94:38:a0:f1:54:b0:dc:d9:2b:
                    b3:81:a7:eb:27:25:c7:7d:a6:31:0b:83:9f:ae:7d:
                    f7:e3:92:4c:be:3d:d4:a8:6c:4f:11:7e:ba:55:8f:
                    7a:3e:6a:f2:a1:f5:49:36:d4:cb:51:dc:4d:6c:3d:
                    f9:c4:28:4f:56:59:88:1b:2a:bd:85:2d:69:2a:4a:
                    ac:f4:a6:fa:a1:4a:ae:41:92:f6:3d:3c:a4:f9:40:
                    63:c7:a0:6f:92:a8:0c:48:68:0c:5c:98:21:06:6d:
                    69:fe:7d:32:91:3f:f2:47:47:a5:4e:bd:f9:77:a0:
                    f3:00:32:fc:0f:2a:74:64:2d:65:e4:f6:93:26:87:
                    20:c5:92:23:21:b3:db:a8:c8:d5:0a:f4:82:88:db:
                    86:4e:fb:a9:db:92:9a:7e:d0:c6:04:92:48:d9:4f:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:F3:BA:A8:46:A2:69:C9:41:12:10:BB:45:65:2E:1D:0E:AA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl

            X509v3 Authority Key Identifier:
                keyid:D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:c9:b6:09:42:74:6e:44:37:1c:31:81:94:c5:e8:c8:69:
         4a:6c:a4:b8:f4:a8:46:87:74:e8:d1:0c:cd:37:47:4e:02:a8:
         fa:04:33:f4:d7:f3:6a:ab:7a:46:2d:3c:be:e3:d6:1e:d9:73:
         c2:52:7f:43:80:36:99:81:9e:01:e2:74:57:bd:ed:77:db:65:
         1f:7c:a5:16:cf:94:d3:2d:0b:19:60:a2:0c:39:75:de:c3:ac:
         c7:56:1b:52:f7:a2:90:3c:ac:0e:52:2d:81:f5:e8:d1:19:9a:
         a1:a3:fe:54:ee:33:9d:79:09:be:f2:89:c2:63:8a:21:86:90:
         3f:89:c2:9d:9d:3c:4f:90:76:78:fb:7a:2a:6b:01:45:b9:20:
         24:79:af:c6:03:12:16:3c:bc:b9:2b:aa:4b:66:57:c4:b0:c2:
         b3:63:af:10:52:36:d1:d2:45:a4:0c:6d:d4:80:bd:35:66:59:
         4b:d5:ac:f4:38:0b:57:15:4e:17:b2:fc:d2:46:c7:d7:09:ea:
         b5:26:4b:1e:4a:f4:ca:a3:3e:2d:96:30:24:64:c2:7b:59:27:
         5b:ec:6a:f1:40:6a:36:84:98:7c:16:c3:01:f3:74:62:e2:90:
         50:e5:10:0c:4e:2a:c6:f2:03:75:74:46:46:92:11:84:51:b8:
         e8:8c:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:19 2026 by rpki-client