Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa
File:                     28931be6-4e16-34bb-90eb-77f681bd268b.roa (raw, json)
Hash identifier:          FVRgrLleM+QweC9F45U9gMVs8aE/pYrIBmPg3oBcqqM=
Subject key identifier:   13:BD:F4:3B:1D:69:A3:AC:0A:A4:18:EB:1F:10:A7:0D:A0:9D:6A:3E
Certificate issuer:       /CN=8c1e504b-f881-4524-a98f-2a623e4a476d
Certificate serial:       010D0C9F4328584DC29AFD65B3DF2D560BD6FC40
Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     396952
IP address blocks:        23.140.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:fd:65:b3:df:2d:56:0b:d6:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=3e8a53d9-066f-4fde-bda5-a4eb98e70c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:10:5d:c2:49:85:b3:77:22:db:26:b2:19:
                    e2:56:d4:8a:d2:d3:81:c4:9c:d4:bd:fd:fe:e7:66:
                    bd:f0:1e:b7:22:b4:98:9e:86:98:dc:0a:0f:87:23:
                    0f:69:33:14:ab:30:82:02:a4:7b:e0:ab:a1:27:6e:
                    16:3b:81:d8:de:10:01:25:75:61:e0:77:5a:46:2c:
                    fa:27:c0:f7:56:e7:7b:f0:1d:00:da:07:da:c1:a0:
                    03:19:a8:81:77:cb:6c:ca:93:8a:36:d8:c6:b0:ac:
                    d3:4d:85:06:ff:66:85:64:4c:0e:13:a7:78:fd:e2:
                    28:ba:85:94:75:bc:ac:77:22:55:92:b4:25:3d:fe:
                    98:31:f4:3d:50:d7:2a:88:82:0b:e3:32:ca:10:49:
                    3b:25:37:ea:01:d8:0f:8f:9b:63:57:7d:e7:a9:db:
                    d9:41:69:e6:f7:af:6e:a3:f4:d8:d4:37:b4:e7:ec:
                    56:9a:d9:dc:f1:e3:49:08:01:da:39:45:bc:34:e1:
                    ec:97:12:05:3d:63:d6:70:49:1c:93:72:39:f0:19:
                    fd:2a:fa:88:ee:65:4c:18:82:e7:79:5a:c9:80:73:
                    5a:5a:19:28:8c:29:bf:85:d6:11:b1:1c:70:b1:44:
                    2c:4c:ae:a7:80:87:98:a6:ed:4b:d4:e1:4a:32:0f:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BD:F4:3B:1D:69:A3:AC:0A:A4:18:EB:1F:10:A7:0D:A0:9D:6A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ec:45:b8:79:3b:62:58:ee:5b:c7:63:54:71:cf:eb:10:24:
         0d:bc:18:0c:8f:44:37:fe:ad:73:12:29:8d:a4:15:7c:6e:6b:
         e5:3c:ca:21:a9:be:4b:00:c6:c7:dc:9f:a0:df:e6:f0:87:36:
         89:a4:5f:e3:e1:89:1c:2e:51:4c:70:96:7a:77:7e:dd:1f:26:
         51:ca:12:5e:cc:cd:14:01:45:e1:fd:a2:d5:3e:5b:db:3c:51:
         5e:32:b9:31:aa:c7:f5:2e:d8:fd:16:95:7c:bd:57:25:de:7d:
         19:26:19:98:02:13:f5:76:63:b9:3b:78:87:fd:bf:f5:6f:31:
         c9:69:ee:84:94:39:a7:74:56:ae:d1:5e:a8:ee:ae:cb:1d:cf:
         21:48:f7:bc:de:d4:fe:7d:88:7a:4a:e6:97:d3:2f:cf:ed:31:
         1a:a3:3a:cf:da:19:6c:36:43:6b:86:a7:1b:8d:6d:81:e4:33:
         8d:c6:ba:ee:a5:4d:ca:39:20:39:df:70:24:be:3f:b2:b0:64:
         19:66:3f:e4:cf:71:ff:f9:4b:9f:dd:1a:fd:8c:0b:5c:c9:86:
         cc:26:01:d1:a7:2e:be:5a:c6:76:31:c4:a8:66:f5:19:f7:f2:
         4a:97:7a:35:da:68:5c:99:db:5c:2d:3d:39:f8:6d:40:f3:64:
         38:69:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:55 2026 by rpki-client