Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa
File:                     74cca517-9428-314a-9bf6-c27e43608e8b.roa (raw, json)
Hash identifier:          MkkmZCeM/gvNEGxVCSQDlMkWP9pQfPF4AgPLDnH8KTM=
Subject key identifier:   F2:99:50:38:73:F7:00:4A:3B:D0:95:56:1F:01:B5:98:36:FC:72:19
Certificate issuer:       /CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54
Certificate serial:       010D0C9F4328584D8D900405247ABEE18753B180
Authority key identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     394935
IP address blocks:        23.136.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:90:04:05:24:7a:be:e1:87:53:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=d31f381e-10a0-4900-bb45-dbd1947a5e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:8d:51:a8:5b:d0:5f:9d:16:1f:f9:bc:9b:
                    3d:9d:b4:ed:40:79:05:6a:1a:83:10:d2:e8:1c:8f:
                    28:f3:12:87:6e:a1:8d:0f:ff:ad:1c:1d:3e:16:a3:
                    f2:a7:ec:6f:eb:79:92:fa:9f:52:67:73:e1:02:aa:
                    50:1f:12:27:34:e6:30:e7:01:87:9d:6b:34:43:ef:
                    a0:eb:91:21:20:cc:23:2f:3b:9c:c2:38:1a:be:a1:
                    f8:2b:6f:95:49:42:b6:d0:75:b5:31:e7:42:cf:37:
                    d8:bd:fb:68:cc:77:f6:a9:df:41:6f:fc:4f:73:24:
                    88:00:10:78:5e:49:ee:3e:65:b1:3c:b9:fb:ac:e7:
                    c7:c1:b3:ab:11:19:32:89:29:57:9f:b5:32:9d:8b:
                    17:69:16:98:5d:18:86:06:b1:f1:4a:e5:a2:5e:18:
                    f2:61:1d:85:aa:ce:15:fd:8d:02:03:60:56:f8:4b:
                    b4:fe:3d:c9:55:71:21:c4:0b:4a:25:e9:5e:aa:5a:
                    d1:6d:cf:13:f2:14:74:7a:f2:29:d8:7c:0d:b9:69:
                    7c:91:50:7c:57:97:d1:1e:30:e9:da:08:2d:57:b0:
                    44:c6:4b:19:1b:8a:85:36:c6:69:1c:5c:aa:77:d0:
                    11:2c:c7:59:7b:c3:ce:bd:f8:52:b9:01:ce:0b:2d:
                    82:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:99:50:38:73:F7:00:4A:3B:D0:95:56:1F:01:B5:98:36:FC:72:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl

            X509v3 Authority Key Identifier:
                keyid:F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:79:3c:48:75:82:82:62:ea:32:4c:d7:16:ae:9f:df:00:25:
         be:52:90:1b:1e:56:de:0e:69:73:11:e9:ca:f2:91:8b:01:a8:
         d5:b8:e4:bc:20:d8:c0:08:de:07:fe:d8:f2:8d:cf:2e:dc:a0:
         8b:7f:46:71:46:f9:d3:1c:98:e9:ce:46:4b:31:5a:ef:af:da:
         c8:3e:0a:7c:10:52:04:73:09:b7:7a:8a:af:5a:26:b6:a6:81:
         a7:39:f2:42:21:aa:77:57:49:e3:d3:64:c1:ec:4a:75:7b:92:
         18:e3:55:b8:0b:0c:b1:ec:88:98:75:ec:70:28:aa:72:96:1d:
         58:45:75:87:10:66:cc:e7:75:4a:1b:5b:59:43:db:a4:49:7a:
         a3:ff:2e:7e:ce:fe:14:18:82:12:6c:d3:0e:76:0d:3d:06:b0:
         13:67:a7:01:a9:9d:a7:38:bc:38:76:b7:97:86:fe:99:1a:32:
         39:04:94:a1:69:36:6e:65:51:14:5f:79:5d:9b:2c:af:11:d2:
         0c:5a:61:7e:35:b9:36:88:46:8b:44:0e:2e:9d:37:ea:cc:3c:
         ac:31:ba:09:77:9d:08:5b:8c:4d:85:b3:b1:03:96:9e:85:b7:
         1d:22:6d:e7:2c:53:10:4e:5c:dc:7c:68:7f:b3:9f:90:a2:6d:
         9a:e3:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:40:57 2026 by rpki-client