Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa
File:                     726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa (raw, json)
Hash identifier:          wEVDVJbD5Wf/+uX87xtkdF/n18ufKhw+mB4Fbp+ZbMo=
Subject key identifier:   22:68:CC:EE:EA:78:04:F5:2C:FD:B5:F2:7D:2B:5F:DE:51:2C:D3:65
Certificate issuer:       /CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d
Certificate serial:       010D0C9F4328584D95F01F8C9B3F4AE7F35E9B80
Authority key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     32205
IP address blocks:        23.148.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:1f:8c:9b:3f:4a:e7:f3:5e:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=59fc7b68-edbd-40b1-a86e-424acea50776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:5d:d5:f6:c8:29:4e:b0:ea:21:33:1b:04:
                    aa:c1:1c:36:86:c5:3d:ee:00:62:06:20:d3:30:92:
                    bf:39:d5:27:81:0e:66:5b:e3:8e:73:70:99:9d:72:
                    f3:d4:8a:7e:42:cf:89:d5:01:ee:c2:5f:c1:36:e6:
                    05:42:81:bc:61:5c:b5:1d:87:26:d1:cc:2b:49:69:
                    ed:22:14:16:f8:12:41:29:7a:6e:78:73:ee:13:ff:
                    6a:05:21:d2:ba:b9:7e:3b:d1:24:f3:4c:80:15:ee:
                    b5:61:e6:dd:49:6f:76:68:a7:55:a3:29:90:0d:4a:
                    b6:54:12:ac:c7:cc:ff:05:f8:47:e4:6f:76:17:13:
                    60:de:e7:b0:74:8e:7b:c3:f6:09:91:ac:65:95:5d:
                    67:21:62:0f:ca:78:23:7c:1d:9a:75:1e:08:0a:91:
                    41:1b:e2:70:fe:33:ad:e1:b9:a9:6e:51:2d:3e:11:
                    48:11:99:31:3f:d5:83:f8:f0:cd:0e:05:42:66:61:
                    8d:df:1d:c6:7d:c3:b7:4b:f0:74:08:fe:c9:13:77:
                    3d:b6:a1:ef:35:23:9b:18:70:be:5e:77:4a:03:63:
                    26:2f:1c:fb:d8:cd:66:dd:18:12:b2:db:48:c2:f0:
                    25:2b:59:31:6d:8c:7f:6c:ce:56:76:63:d6:af:6b:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:68:CC:EE:EA:78:04:F5:2C:FD:B5:F2:7D:2B:5F:DE:51:2C:D3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl

            X509v3 Authority Key Identifier:
                keyid:09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0a:4b:c6:49:ba:cf:a5:2b:5c:a2:b6:fa:23:15:d6:d2:00:
         7a:4f:6d:a3:dd:0c:b6:46:62:f0:0f:f8:fb:08:b3:a0:6b:29:
         64:8b:9f:3b:27:7f:a4:75:09:13:e0:0a:54:0d:4c:11:14:ab:
         e8:5b:2f:3b:16:4f:3d:69:55:33:40:fc:a6:4e:b3:85:bc:64:
         4b:54:1c:55:b5:e8:f0:fb:36:2b:3f:09:9c:9e:2f:16:36:37:
         c1:79:b3:f2:e7:4d:44:b8:a9:f0:93:0e:f3:b2:0d:88:23:af:
         8f:f7:1a:f1:f8:50:ce:55:e0:9b:11:0d:29:22:57:c9:a1:ec:
         4f:25:c1:af:bf:45:03:dc:a8:39:0c:0f:5a:05:c0:90:63:58:
         5c:76:c1:cf:0e:0b:b4:5c:9a:2e:c0:3f:9d:72:cf:4f:7b:00:
         01:00:f8:92:83:18:7a:a8:77:a8:e6:df:8c:72:12:c3:fe:28:
         5e:a1:a7:4b:69:67:c7:95:0d:82:d5:12:b0:56:8b:0e:fa:d9:
         13:75:e5:b7:f9:07:30:6f:d7:03:83:82:70:69:74:f3:1f:86:
         4f:2c:c9:69:e7:dd:f6:b9:79:59:84:4f:f0:01:d7:5b:a7:42:
         52:f3:30:28:32:fd:0a:c3:78:33:38:26:18:d7:a2:d1:2d:cf:
         00:45:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:12 2026 by rpki-client