Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
File:                     c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa (raw, json)
Hash identifier:          UemsoaXHyobRxOIZYLCvvw24PQpMqTBzM2BgtoJHLBY=
Subject key identifier:   DB:EA:45:96:04:D0:F6:4C:80:AB:2C:CC:A4:99:94:4C:A1:FB:B0:84
Certificate issuer:       /CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Certificate serial:       010D0C9F4328584DADAAE3408EFA56A7F740C360
Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     400655
IP address blocks:        23.191.184.0/24 maxlen: 24
                          2602:f7e4::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e3:40:8e:fa:56:a7:f7:40:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=a3643e95-0bfb-4992-ac7c-a20d8c4952fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e4:80:4f:10:f4:4c:4a:fb:1a:eb:6b:f9:9b:
                    75:65:22:00:45:26:56:f9:2f:73:74:c5:92:06:74:
                    5a:fc:ac:18:ae:73:dd:3f:c9:71:6d:9b:76:44:83:
                    8f:fb:14:2b:e4:13:cb:ed:95:df:cc:00:c9:39:4e:
                    46:4a:41:a8:cc:6e:59:fe:3f:30:67:28:23:eb:0d:
                    cc:ed:4a:89:0a:82:86:f9:37:f4:12:6f:81:33:ad:
                    50:e2:1a:b4:62:aa:ab:c3:e2:e5:8f:29:1f:2c:fd:
                    fb:2b:88:86:61:98:9a:5e:8a:4d:78:9d:5b:67:1a:
                    f2:bd:ff:90:f4:83:b2:08:58:19:a7:18:96:d9:45:
                    3e:ba:f2:92:cf:e7:6b:25:7d:e8:df:e3:2e:4a:40:
                    8a:28:7d:12:41:5d:bf:12:06:db:4f:3d:ae:81:0e:
                    27:88:4c:94:fb:12:73:10:e0:58:50:39:c5:33:e4:
                    18:37:40:17:2e:e2:1b:37:8b:25:13:49:ba:87:a0:
                    39:90:58:b9:42:cb:d4:d8:c0:80:3e:b5:57:3a:a1:
                    2c:86:8d:10:93:ec:c6:2d:65:b2:7d:73:85:31:be:
                    a2:37:bb:f1:eb:9e:0d:a7:a1:35:ae:80:06:8a:7e:
                    72:61:54:06:78:d5:f3:57:a1:57:26:33:97:e2:6b:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EA:45:96:04:D0:F6:4C:80:AB:2C:CC:A4:99:94:4C:A1:FB:B0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl

            X509v3 Authority Key Identifier:
                keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.184.0/24
                IPv6:
                  2602:f7e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a7:0a:9e:8b:fb:fa:b9:98:0c:5e:e8:48:d4:25:db:21:11:
         25:c7:ff:ab:86:f8:00:f7:12:69:a9:c9:d6:dc:23:cf:5c:13:
         83:31:b7:43:ff:00:ce:0c:5c:86:09:db:f3:aa:f8:db:0c:a4:
         89:36:83:7a:9f:a4:c2:13:79:e7:f2:d6:bf:c8:6c:f1:1b:63:
         86:f7:1d:1a:15:86:26:36:1a:cf:b7:aa:69:bc:e8:08:57:46:
         7d:d2:cb:4b:69:15:56:e8:cd:11:b4:b4:b5:f3:e0:41:27:c5:
         4a:3e:ff:52:f8:d7:20:84:d7:96:a6:76:da:bc:76:c6:01:37:
         17:66:57:dd:38:99:3a:97:e6:42:1c:0b:bb:76:38:d1:09:5d:
         70:67:00:39:c2:60:50:fe:7c:c3:b3:62:a7:41:65:f0:ab:00:
         37:66:f3:f2:78:a2:2b:f9:46:0b:39:b9:b8:f3:24:d7:14:53:
         38:80:3b:57:9b:6e:6f:6a:78:76:5c:07:0f:59:18:37:8e:66:
         55:02:51:ab:ac:49:71:a4:b6:da:3d:27:34:58:94:f8:10:7f:
         69:e5:f5:db:b4:c5:8e:e5:87:a9:f4:25:77:4c:55:07:f7:97:
         08:38:5e:46:63:53:00:8a:0b:ce:c5:5c:f4:5a:ee:1b:29:91:
         f2:c7:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:50 2026 by rpki-client