Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa
File:                     d8a375e5-b89e-3f90-9327-3c71a184061b.roa (raw, json)
Hash identifier:          AIlwJc7mlBxBpQXgmSfWGUu9/u1GUEU2gmzrCoWTefs=
Subject key identifier:   5B:57:7F:A1:8A:26:1B:12:B8:8A:9B:57:B1:45:97:9F:03:6E:B2:C3
Certificate issuer:       /CN=905aef82-72e9-43e1-9a66-0acee9d79d3b
Certificate serial:       010D0C9F4328584DA6B02494ED7E475491D65D00
Authority key identifier: F4:E2:F5:AA:81:19:91:77:11:BE:66:F3:75:3B:15:BF:BD:8B:83:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     394109
IP address blocks:        23.146.0.0/24 maxlen: 24
                          146.71.72.0/24 maxlen: 24
                          146.71.73.0/24 maxlen: 24
                          146.71.74.0/24 maxlen: 24
                          146.71.75.0/24 maxlen: 24
                          2606:3b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:24:94:ed:7e:47:54:91:d6:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905aef82-72e9-43e1-9a66-0acee9d79d3b
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=93e8df0d-a388-424a-b7ae-fa9b5e78939b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:af:68:f9:78:5f:0c:06:a4:a5:2a:8a:8c:
                    09:43:8c:27:f3:ff:93:9a:a0:2e:96:e4:5f:25:0e:
                    40:a8:30:7f:a8:da:5b:d2:0b:f4:64:fc:b3:79:0e:
                    f0:51:7b:df:10:c1:e7:c1:94:3b:e3:7d:0b:fc:0f:
                    a4:92:a8:ec:db:dc:01:89:b5:66:10:41:14:8a:12:
                    56:11:50:34:0c:2b:97:26:f1:e5:1a:1a:ef:6a:ea:
                    fd:a1:c0:a4:ec:10:76:13:b1:f3:80:32:ba:0b:f8:
                    38:0a:84:fc:c6:33:8b:ff:60:28:14:a4:57:bb:80:
                    5e:55:1c:39:d9:81:49:57:5b:03:30:e9:db:77:a4:
                    9b:30:93:4d:d8:3e:54:66:7d:92:e4:1e:a9:f3:c1:
                    65:11:ea:88:6d:75:43:d6:e5:c8:df:b1:a3:25:de:
                    f9:4e:57:1c:bc:8d:f9:02:1e:4a:ce:01:f6:73:43:
                    82:64:85:8e:a4:53:9a:a0:25:59:7f:14:20:03:83:
                    5d:2f:21:5c:e3:4f:67:70:07:39:a6:57:eb:56:38:
                    29:05:ec:69:d7:d6:3f:6a:69:3f:41:46:7a:15:71:
                    91:6f:be:3a:2c:19:5e:b5:e2:f2:24:a7:56:3d:38:
                    d1:14:78:4c:2d:e0:bf:10:ef:30:26:25:75:e8:52:
                    e7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:7F:A1:8A:26:1B:12:B8:8A:9B:57:B1:45:97:9F:03:6E:B2:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.crl

            X509v3 Authority Key Identifier:
                keyid:F4:E2:F5:AA:81:19:91:77:11:BE:66:F3:75:3B:15:BF:BD:8B:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.0.0/24
                  146.71.72.0/22
                IPv6:
                  2606:3b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:75:9c:88:94:42:32:ec:ff:3d:2f:47:f4:c0:a4:a4:29:
         1d:9f:c8:9f:6b:6d:08:c9:d1:8b:84:e9:36:4a:68:d1:55:cc:
         38:ab:2d:42:2e:b9:ff:79:44:ea:af:3f:06:56:0c:0f:d2:d2:
         19:5a:99:df:a3:65:2c:e2:c0:b0:32:35:39:c0:97:08:e5:65:
         f5:f9:a5:ea:7b:ba:6d:8e:7d:63:3c:f5:7f:d4:b4:11:81:a8:
         9f:27:88:ea:79:86:fa:11:60:3e:8e:ec:de:47:e7:99:4b:6c:
         f4:66:ec:d9:50:61:e3:29:76:ce:10:bd:c4:ef:ca:b6:ac:ec:
         0b:86:e9:8d:0e:b2:5f:c4:e7:f3:65:ae:46:dc:30:5a:59:7a:
         b3:45:d9:31:7b:38:46:2a:a1:7e:00:b6:a4:66:31:64:d8:4d:
         17:b2:a3:65:7e:d4:59:38:51:78:ac:12:07:f4:31:d8:e6:8b:
         bd:6c:16:f4:83:ed:a7:f4:16:d7:4f:1c:76:4c:1d:bd:ea:e3:
         c5:c4:f9:10:53:0e:5e:0d:b7:a7:93:d2:a6:55:1d:bb:da:e5:
         32:7d:08:57:48:5b:34:bf:3a:03:d8:be:4a:15:a3:d6:0d:21:
         53:07:74:da:64:1f:ba:2f:d6:d5:b7:ad:d7:bf:10:f5:6a:f0:
         1b:46:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:04:47 2026 by rpki-client