Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/2a49c8f8-ec66-36f0-9d4a-c860db3e8078.roa
File:                     2a49c8f8-ec66-36f0-9d4a-c860db3e8078.roa (raw, json)
Hash identifier:          YED9koTEEZZ1lGvgsdnmmiVArrFZ6qVkPp9ws5uyPyI=
Subject key identifier:   95:57:1A:D1:77:83:4A:83:18:DD:A6:39:A2:65:52:23:93:84:9B:91
Certificate issuer:       /CN=fabe5ec0-db19-498e-8f66-9403e18ddf6e
Certificate serial:       010D0C9F4328584DB60AD82704C13F1D72083500
Authority key identifier: 66:8B:75:72:6D:6A:DF:E1:D5:F7:84:16:FD:FE:A6:8C:8F:6F:D3:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/2a49c8f8-ec66-36f0-9d4a-c860db3e8078.roa
Signing time:             Sun 03 May 2026 13:00:31 +0000
ROA not before:           Sun 03 May 2026 13:00:31 +0000
ROA not after:            Sat 01 Aug 2026 13:00:31 +0000
asID:                     152179
IP address blocks:        23.150.132.0/24 maxlen: 24
                          2602:f4b7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/fabe5ec0-db19-498e-8f66-9403e18ddf6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/fabe5ec0-db19-498e-8f66-9403e18ddf6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b6:0a:d8:27:04:c1:3f:1d:72:08:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabe5ec0-db19-498e-8f66-9403e18ddf6e
        Validity
            Not Before: May  3 13:00:31 2026 GMT
            Not After : Aug  1 13:00:31 2026 GMT
        Subject: CN=988e4c5d-a404-41e5-be3c-103e8c19e0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:c3:1e:aa:cc:c1:e2:2b:21:f1:06:93:1c:
                    ee:27:e4:84:de:e8:b3:7a:84:91:50:fc:ac:ee:ee:
                    f1:2c:47:ac:cf:47:c9:7b:5c:d6:19:10:ce:b8:36:
                    0b:d6:d0:93:da:3d:02:0a:22:23:7d:61:43:d4:76:
                    53:33:05:9a:43:fb:0d:01:c7:85:0b:ba:9d:69:02:
                    b6:e4:6b:12:2c:6e:f1:b5:16:8b:68:84:f0:b0:bb:
                    45:65:45:6c:60:64:6b:93:44:a4:8e:f0:03:36:38:
                    be:17:e4:b2:b6:b5:ce:a8:0c:3c:79:1b:99:50:45:
                    d6:62:e9:9b:95:b6:7c:d0:9f:00:22:ad:db:1a:13:
                    e3:c4:21:2d:43:68:0e:6b:51:77:53:b9:7b:bf:b5:
                    41:59:c5:42:85:75:2b:1d:fa:b3:c3:18:1e:c6:8a:
                    16:1f:fa:d7:2f:6a:0c:36:1a:0d:9f:b5:08:c7:53:
                    20:a1:76:c3:23:1f:cc:ac:0e:c9:91:c2:d0:18:5e:
                    b2:5a:24:cf:5f:b8:66:b7:ba:1e:1f:00:a9:5a:e5:
                    bd:d3:5b:f8:cc:2a:f8:7d:48:16:02:04:92:8e:c1:
                    b3:74:7c:23:a6:05:15:d4:92:73:34:a1:f6:3a:5e:
                    a2:97:e2:e6:41:87:03:cf:d3:0e:c7:55:34:3d:a7:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:57:1A:D1:77:83:4A:83:18:DD:A6:39:A2:65:52:23:93:84:9B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/2a49c8f8-ec66-36f0-9d4a-c860db3e8078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e/fabe5ec0-db19-498e-8f66-9403e18ddf6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:8B:75:72:6D:6A:DF:E1:D5:F7:84:16:FD:FE:A6:8C:8F:6F:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fabe5ec0-db19-498e-8f66-9403e18ddf6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.132.0/24
                IPv6:
                  2602:f4b7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:94:ff:95:71:db:2d:18:f3:6d:0a:e7:0e:51:26:80:e0:32:
         04:d3:4e:70:7b:6f:e7:22:db:6c:e8:62:1d:1c:75:42:34:f9:
         a3:57:30:55:9f:ca:35:b1:c1:b4:e2:88:d5:fd:26:d5:5a:4c:
         5b:0f:2a:16:33:63:fe:0b:25:09:fa:b6:e1:a9:e3:fd:8b:c9:
         49:24:89:b6:43:6c:bc:7d:41:78:e0:dc:5e:8f:3d:98:d5:61:
         c9:3c:5f:dd:9b:a5:1f:0b:83:51:b1:98:3c:78:6c:15:ce:83:
         aa:89:cc:57:13:61:f4:48:9e:76:88:4c:7d:46:3b:a4:65:69:
         1e:b6:8b:4d:15:85:85:0e:a9:9a:38:6f:a1:82:41:a5:b9:6c:
         d8:a2:1d:ab:e9:b7:57:e6:61:20:97:91:d5:d6:93:8e:dd:5f:
         2e:51:6d:a0:0d:dc:21:45:e4:d4:0e:88:a2:37:a1:43:43:98:
         e8:6f:9b:bf:76:1e:a0:a7:d5:f2:75:69:8c:a1:29:30:27:fc:
         bb:d4:59:68:ba:34:a2:8a:ee:bd:93:15:ea:90:9d:11:70:65:
         ca:36:19:e8:61:0e:58:de:83:a6:98:13:4e:1d:e2:47:8c:97:
         50:b6:1e:be:89:63:e9:be:4f:00:8a:16:8f:55:0c:f2:75:4e:
         59:85:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:26 2026 by rpki-client