Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/6a722f8b-d694-3096-9674-6ccb8b37296d.roa
File:                     6a722f8b-d694-3096-9674-6ccb8b37296d.roa (raw, json)
Hash identifier:          qKyzMAujcrvadXwRoWbY9FpHU51fkCcbwMO/rJNCgPY=
Subject key identifier:   11:18:A9:1E:2E:1B:87:D7:A2:08:04:D3:78:61:DA:83:3A:5B:6C:39
Certificate issuer:       /CN=82bc9526-5cc1-40d3-bedb-64d93ffce85a
Certificate serial:       010D0C9F4328584DB4A57737AC15C97C5D016640
Authority key identifier: 97:1A:82:23:1E:2F:58:4D:86:30:7B:98:F6:9D:66:EF:86:97:81:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/6a722f8b-d694-3096-9674-6ccb8b37296d.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     397326
IP address blocks:        23.142.48.0/24 maxlen: 24
                          147.160.170.0/24 maxlen: 24
                          2620:13e:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/82bc9526-5cc1-40d3-bedb-64d93ffce85a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/82bc9526-5cc1-40d3-bedb-64d93ffce85a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:77:37:ac:15:c9:7c:5d:01:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82bc9526-5cc1-40d3-bedb-64d93ffce85a
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=9dfa0bea-f447-405a-823c-7290f9105c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e5:75:59:b3:cf:ab:87:11:85:80:59:c8:e2:
                    71:1b:f1:f9:39:75:14:13:02:89:a2:22:af:e3:d1:
                    62:2e:0b:27:05:7b:b5:52:b4:65:de:13:be:08:60:
                    77:4e:cc:55:5f:41:ff:95:5f:4e:82:22:e3:54:d5:
                    40:c4:1e:82:29:30:66:f9:13:50:cf:53:4b:df:1f:
                    b0:93:28:e0:ea:5e:de:6c:66:dd:a8:90:cf:de:93:
                    32:30:8e:6a:89:9d:26:ae:1c:89:a4:ec:05:af:45:
                    da:c7:2c:e0:03:c7:fb:50:6a:e9:53:e9:1f:c4:27:
                    6d:4c:8c:38:cb:d6:5d:20:b6:5d:58:2f:d0:6b:94:
                    ee:ea:f5:7e:35:d3:55:9d:55:76:a7:32:f8:05:3a:
                    8f:4a:73:6f:76:3e:33:ca:84:40:a0:d5:80:f4:f8:
                    f9:ca:3f:38:d9:1d:3c:b6:8d:c2:04:63:a8:72:09:
                    b0:10:70:6a:47:5f:5d:9d:3e:80:25:8a:db:61:65:
                    1a:c2:5e:60:d6:23:25:ff:32:b4:b6:a8:1a:6b:5a:
                    bb:ac:96:2a:37:d5:8d:fc:10:ca:bb:9e:7b:00:f3:
                    6e:e9:4d:1b:da:5e:33:bf:14:0f:a5:d1:e3:9d:d3:
                    cc:e4:34:c1:b7:6d:a4:02:94:43:e5:ae:f6:73:45:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:18:A9:1E:2E:1B:87:D7:A2:08:04:D3:78:61:DA:83:3A:5B:6C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/6a722f8b-d694-3096-9674-6ccb8b37296d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a/82bc9526-5cc1-40d3-bedb-64d93ffce85a.crl

            X509v3 Authority Key Identifier:
                keyid:97:1A:82:23:1E:2F:58:4D:86:30:7B:98:F6:9D:66:EF:86:97:81:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/82bc9526-5cc1-40d3-bedb-64d93ffce85a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.48.0/24
                  147.160.170.0/24
                IPv6:
                  2620:13e:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:0b:e5:00:4e:73:92:4b:d1:59:58:b7:4f:d7:e8:ec:97:
         5e:25:5e:ca:1e:a5:8e:11:cd:89:e6:fa:6c:0d:e6:52:34:e5:
         ae:24:18:bf:d5:8a:18:f3:80:0e:41:be:1e:97:c5:28:bc:9d:
         7d:d2:49:35:1a:20:3c:ab:0f:1d:04:34:39:ba:12:d3:6b:fb:
         27:30:2e:42:a0:29:d7:56:3c:11:39:b1:0d:19:d0:0c:4b:4f:
         09:d7:7a:5c:54:41:74:01:5f:a9:7a:30:61:8d:db:ca:63:9d:
         ae:57:6f:d2:8f:07:f8:f3:ac:cf:2d:fd:af:e1:d1:77:3d:4f:
         6e:ee:58:7b:a0:2d:40:18:12:5a:ee:0e:76:70:9f:c3:bd:39:
         95:7c:c9:10:fd:1f:95:c8:83:00:b8:3d:8e:2f:4c:39:bf:1c:
         d2:5c:12:5a:11:75:20:e3:fd:63:3e:34:8f:73:32:ca:88:e2:
         42:f9:b2:cd:ff:e3:ac:d0:86:57:0b:b4:db:5e:a9:4b:e3:a1:
         0b:5c:44:08:94:16:ba:09:26:90:bc:91:f8:f6:1a:2a:bb:9a:
         1b:00:0e:2e:e6:50:ce:76:15:37:72:b8:20:cf:51:a8:a0:24:
         28:9a:40:76:85:5d:38:1c:b3:26:de:6d:57:90:bb:3d:7b:1d:
         23:5c:6a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:47 2026 by rpki-client