Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/45e141a8-6474-3bee-a118-fe212c38deec.roa
File:                     45e141a8-6474-3bee-a118-fe212c38deec.roa (raw, json)
Hash identifier:          AzrXaObZv7p8bKGu05ibHWa2/MzwpWDVCXYkJSvhyyc=
Subject key identifier:   A4:0E:A9:38:88:73:3B:23:D2:63:3F:6F:3A:B9:80:92:FB:E8:B7:75
Certificate issuer:       /CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0
Certificate serial:       010D0C9F4328584DBBA873D6B49280B64A7C5200
Authority key identifier: 4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/45e141a8-6474-3bee-a118-fe212c38deec.roa
Signing time:             Tue 05 May 2026 13:17:09 +0000
ROA not before:           Tue 05 May 2026 13:17:09 +0000
ROA not after:            Mon 03 Aug 2026 13:17:09 +0000
asID:                     174
IP address blocks:        23.149.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a8:73:d6:b4:92:80:b6:4a:7c:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0
        Validity
            Not Before: May  5 13:17:09 2026 GMT
            Not After : Aug  3 13:17:09 2026 GMT
        Subject: CN=1cb17962-1b5d-44f5-8f6c-66fa9f7f23c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:62:61:24:2d:8d:e4:fd:53:27:d1:84:70:
                    26:80:bf:a2:26:de:36:fc:e2:cd:66:54:75:23:a9:
                    73:b3:63:d3:39:46:71:5f:2e:e4:c3:04:fa:f9:e4:
                    72:ad:b0:c7:71:75:96:7a:8b:ec:12:fb:95:10:2d:
                    1b:de:de:93:7b:ce:be:46:30:94:8e:27:c9:6f:f9:
                    89:6e:31:45:3e:a8:f5:3d:16:72:a0:cc:17:e4:43:
                    8e:b3:65:8d:b7:30:c7:81:93:f3:9f:33:cc:53:a2:
                    d1:bb:0d:06:93:15:af:b1:80:06:a8:37:6c:44:67:
                    58:ce:9a:3e:ed:92:05:43:25:36:28:89:36:d2:78:
                    dd:00:ad:31:4c:30:5e:f1:89:32:17:c6:cb:fd:bb:
                    04:ab:58:ba:1e:84:f8:c9:01:5e:c3:17:80:ad:b9:
                    4e:86:09:d3:b2:1d:c4:23:8a:e8:e5:bb:22:78:f9:
                    53:57:3e:6a:15:53:9e:9b:53:bf:63:0e:70:80:6f:
                    f5:cd:b6:7f:5d:46:1c:c0:ca:57:a3:70:ba:21:8f:
                    a0:b7:4d:66:84:ba:d0:c7:19:92:42:4b:b1:b8:51:
                    9f:0a:5f:5a:6a:fb:6d:48:d0:60:86:3e:64:96:53:
                    09:4f:66:34:f9:61:82:52:9f:4c:5c:b6:72:ca:0e:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0E:A9:38:88:73:3B:23:D2:63:3F:6F:3A:B9:80:92:FB:E8:B7:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/45e141a8-6474-3bee-a118-fe212c38deec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl

            X509v3 Authority Key Identifier:
                keyid:4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:71:e6:0d:e5:a0:ed:8a:dc:3c:9f:ac:48:00:33:5d:9c:71:
         bf:d0:28:b1:42:33:05:16:6e:6c:7e:3f:2f:7c:43:57:aa:3f:
         79:b5:1d:71:b2:e1:d8:e9:15:51:4b:8f:da:9c:9b:41:9f:53:
         96:46:03:77:d6:50:6d:d7:88:10:22:4b:c5:d3:cd:a8:66:6e:
         e5:36:10:99:90:c1:ec:1c:e7:ce:cc:15:30:96:f8:1c:dd:92:
         74:ac:73:d6:7e:6a:7f:10:bf:a4:36:20:d9:24:ae:7d:f2:7e:
         d6:37:3a:a4:60:8b:9b:f8:97:07:2b:f4:aa:98:1a:2e:a7:8b:
         0f:60:3b:9b:24:2d:b9:ff:88:23:36:ec:0b:c5:49:57:50:c3:
         75:42:fa:6b:72:a8:47:f6:fd:2d:53:84:0d:c3:48:23:89:de:
         c0:a8:e5:cd:d1:95:e2:27:d9:d5:eb:86:51:b3:e1:2c:1e:49:
         84:9a:78:f6:fb:66:72:34:64:16:b4:92:90:b5:ca:c7:d1:c6:
         77:75:0b:60:91:5e:e8:31:d1:f5:4e:1c:1d:97:8a:24:f6:f5:
         b9:77:36:15:9f:c3:bc:4e:fb:04:58:02:da:e3:61:39:8a:d7:
         d2:ae:12:12:fa:a3:58:e3:05:bb:c5:f3:7e:1e:6b:83:6b:65:
         fd:00:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:26 2026 by rpki-client