Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/38429b40-f245-3e9d-84c0-f352cab4b10d.roa
File:                     38429b40-f245-3e9d-84c0-f352cab4b10d.roa (raw, json)
Hash identifier:          Pd7FYaqmtjyfPbEtRoqy4Hed8KTJlJfOxrkdXoUf9WI=
Subject key identifier:   2C:01:4A:2C:3D:FA:AF:C3:38:DB:A7:AB:37:2B:05:4E:64:73:7F:2C
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F4328584DCDC59E8838EA6D3FF35D2FC0
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/38429b40-f245-3e9d-84c0-f352cab4b10d.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     1003
IP address blocks:        23.143.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:9e:88:38:ea:6d:3f:f3:5d:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=2651108d-79ef-4176-80d4-d95ac4e7d66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:53:d2:7a:c7:2a:49:70:72:21:fa:94:e5:
                    13:c5:80:f7:b4:74:c8:91:c0:c1:8b:96:4b:ae:ad:
                    23:19:65:cb:ea:08:60:94:23:38:67:0c:c2:03:d0:
                    e1:d3:ae:bf:83:28:fb:22:6a:f4:d4:5a:09:7e:2d:
                    dd:f5:c9:78:6f:1f:76:f5:c1:e4:28:f7:e1:b6:85:
                    1b:1b:a7:4b:62:21:10:2e:f6:4f:50:41:65:43:0b:
                    7f:14:be:66:7c:8e:3c:8c:3e:ef:41:cb:cc:27:99:
                    b3:5b:7e:e9:9c:25:91:11:73:e4:fe:6a:3f:30:6a:
                    ac:8d:3f:c6:a3:3b:22:ff:69:07:b1:33:a1:d8:e7:
                    32:ff:a9:c8:9b:12:d8:4e:ce:72:34:1f:27:db:9b:
                    18:3e:c1:60:15:e4:58:0b:77:c2:cd:73:87:d8:cc:
                    8c:94:22:64:2d:78:36:98:6d:02:cd:b2:b2:5a:63:
                    8a:bd:23:21:ba:52:aa:c5:71:37:53:25:29:4a:ee:
                    9a:47:b6:d5:1a:44:d3:d2:f0:70:e9:e2:8d:bd:5f:
                    84:c5:d3:a7:0d:02:2d:86:e1:14:d7:14:d4:d2:4d:
                    92:df:d5:28:a9:ae:53:bb:7e:2f:e5:fc:b1:d9:19:
                    ed:08:a6:50:82:6a:31:cd:35:58:6f:6c:c3:ef:e4:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:01:4A:2C:3D:FA:AF:C3:38:DB:A7:AB:37:2B:05:4E:64:73:7F:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/38429b40-f245-3e9d-84c0-f352cab4b10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2a:88:ac:f0:89:50:38:d5:e2:d3:d7:02:35:3d:fc:54:be:
         d8:b7:5b:f0:25:35:f0:8a:ae:8b:4b:a4:10:c8:9a:78:29:01:
         4e:be:1a:33:cf:f3:dc:67:dc:a6:4c:74:f3:f4:d0:86:b4:ae:
         3f:e9:1c:ff:7d:66:4d:a4:c5:0c:89:15:c9:54:19:58:08:91:
         79:8b:03:5b:d4:27:67:3c:af:5e:f5:d0:f2:c9:c9:6f:96:1c:
         4c:f5:af:b7:6e:c0:86:3e:5e:2a:0e:01:d8:4e:a4:ea:c8:4e:
         9d:8a:bc:48:bf:ad:3b:c1:e4:30:70:19:b5:ba:c7:bf:74:a8:
         2d:18:f5:cc:2d:50:4a:5e:94:6f:41:14:31:f6:39:12:5f:e4:
         83:df:32:42:88:50:47:e8:78:cc:ae:fa:fc:fa:11:2f:29:7b:
         4a:81:1b:9d:8c:4f:15:85:4f:d7:aa:3e:c3:cb:c0:e7:45:8c:
         cf:06:f8:8d:b2:d1:45:00:cb:68:2b:cd:fa:84:4a:42:5f:9a:
         96:fc:67:fd:6c:68:e4:74:dd:b2:44:be:2b:ce:34:27:63:02:
         2d:8b:e9:a6:4a:1e:94:12:a5:ce:2c:a6:ca:94:e8:63:8c:5d:
         5f:e0:69:47:d7:b7:76:3c:82:9d:60:b9:69:3f:7c:13:27:be:
         9e:74:ee:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:55:46 2026 by rpki-client