Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa
File:                     053e21d2-df36-3335-adc2-8524bf1355a2.roa (raw, json)
Hash identifier:          N58NVav8uup9wDZmHhF+eqSUcILl7qY5opEW3g3Lgcc=
Subject key identifier:   E6:EC:9B:1C:3C:1E:AF:83:76:40:37:34:60:DF:2E:2F:45:69:C7:D9
Certificate issuer:       /CN=13c2bd37-5092-4959-a489-318c7da33b9d
Certificate serial:       010D0C9F4328584D44FA3D410552CA3769132DA0
Authority key identifier: 4F:3C:1C:3D:A6:CA:80:4F:31:8F:EE:4D:80:6D:31:87:3E:86:E6:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     151338
IP address blocks:        23.145.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:3d:41:05:52:ca:37:69:13:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c2bd37-5092-4959-a489-318c7da33b9d
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=fe64ae99-8702-4ffd-b854-b4fac7c3c2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:62:17:fb:62:16:f6:61:20:e2:26:be:76:
                    d9:c3:7b:f9:c0:17:89:35:8e:df:c1:0f:44:fd:b8:
                    1a:e2:b5:af:8d:69:a0:cc:e9:14:22:6f:95:43:3e:
                    98:d8:b5:e1:65:02:90:9e:eb:f7:8a:9d:6b:82:e7:
                    d0:97:02:bb:2d:47:c7:6e:d9:f0:b5:35:a2:a2:fb:
                    a6:43:8a:11:49:e8:85:e3:0f:80:a5:d3:75:9e:f8:
                    0e:51:a3:b6:dc:94:f0:4d:d8:86:d6:2a:e5:48:bd:
                    c7:18:b0:a4:a0:76:4c:36:a8:3b:27:e8:cf:00:15:
                    cb:a8:e4:b6:99:9c:f5:51:61:f2:3d:c4:fb:93:5b:
                    98:2d:07:ee:f2:dd:06:1f:1e:63:6c:cc:55:6b:73:
                    00:59:af:62:ff:34:2d:b1:3c:f6:65:60:55:2c:f4:
                    18:7b:29:4d:c0:57:d8:bb:6a:e5:61:5a:fc:34:31:
                    8e:12:c3:89:00:2f:70:cf:e2:4a:d6:5f:fc:d8:09:
                    b5:a2:bd:ca:b7:ba:f8:dd:a4:f3:20:77:37:7f:d7:
                    3a:a8:85:d0:bc:c6:ae:1f:ad:ed:70:fe:1f:c3:a4:
                    8a:15:14:b4:ba:f3:e7:ec:cf:a7:dc:10:79:6a:04:
                    a7:62:8b:35:ad:1a:fc:5f:d3:fb:59:46:b8:e9:18:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EC:9B:1C:3C:1E:AF:83:76:40:37:34:60:DF:2E:2F:45:69:C7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:3C:1C:3D:A6:CA:80:4F:31:8F:EE:4D:80:6D:31:87:3E:86:E6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:97:1c:99:b1:96:78:32:05:94:a7:c0:63:05:99:41:c3:
         48:c0:67:c6:d6:60:5f:c6:8f:1f:5f:0b:e6:00:9f:91:7c:4e:
         07:5c:3d:f8:16:37:93:95:57:98:54:b6:e0:cd:b2:cc:aa:35:
         55:c9:0f:b6:57:5f:2f:cf:6a:c6:a6:f1:91:bf:e8:10:8e:b3:
         78:16:e0:3f:8e:f9:48:00:52:68:b0:3c:25:0d:4a:be:bc:2f:
         d1:34:76:6a:5e:ff:0c:32:f1:02:92:76:1f:9f:15:70:31:01:
         b8:29:d1:ff:26:90:58:0f:1d:c9:03:11:e6:31:20:2a:70:e3:
         02:bd:09:a8:1a:7e:ba:6f:d2:a8:85:b5:7e:a2:6a:77:ca:32:
         61:5c:f5:4e:53:8f:71:36:78:a2:d6:f3:fc:41:7f:d3:fa:f1:
         5b:08:49:af:17:80:34:6d:e7:c0:2a:29:a6:7b:20:65:d7:12:
         f3:d6:ca:31:4d:fa:a7:27:a6:27:6b:3e:db:63:89:60:7b:15:
         72:de:50:28:12:f6:f2:a5:c0:fc:ad:f0:26:d0:1f:b7:ab:f0:
         e6:e3:78:77:2c:4c:58:3c:d9:43:2d:18:79:87:fa:d8:d1:20:
         ad:37:e7:72:59:78:07:cc:f1:fb:2f:f3:9b:c5:6d:e0:7e:23:
         b9:71:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:25 2026 by rpki-client