Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/a1b553f2-b966-342f-9fe1-18bbe7d4ecf3.roa
File:                     a1b553f2-b966-342f-9fe1-18bbe7d4ecf3.roa (raw, json)
Hash identifier:          w6MhoIKnDWJ2FUbGDeC0hfJawq4UuFePAUYVmAFw0os=
Subject key identifier:   32:EA:22:40:AE:2A:DB:E5:53:A3:C8:DD:54:79:BF:CC:84:33:36:9D
Certificate issuer:       /CN=d3196482-9a63-48b1-828c-a6de96f0caff
Certificate serial:       010D0C9F4328584DBFD078A15DE2A15A5BF2A280
Authority key identifier: 71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/a1b553f2-b966-342f-9fe1-18bbe7d4ecf3.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     27180
IP address blocks:        23.140.44.0/24 maxlen: 24
                          2602:f712::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:78:a1:5d:e2:a1:5a:5b:f2:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3196482-9a63-48b1-828c-a6de96f0caff
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=121ee6ec-b561-4d3a-8a45-1c6eb109d5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:19:34:2c:3a:31:8c:9f:08:ea:d4:79:77:
                    60:46:b1:8d:8b:41:f8:0b:68:75:f1:15:0b:ef:2a:
                    1a:f5:d7:97:9a:e6:ee:60:e8:39:76:d2:62:93:2d:
                    06:9c:52:8f:cc:fe:7b:fe:b2:f6:fe:55:8f:d0:e8:
                    15:af:12:9c:49:01:ee:be:e6:98:ff:13:3e:70:53:
                    82:f0:33:6d:c1:dd:44:17:a2:59:47:ad:58:d0:c5:
                    e8:14:fe:61:2b:76:4b:22:d1:2e:5a:70:d2:b0:35:
                    e6:81:9d:db:71:94:39:79:70:b1:80:81:50:8d:07:
                    2c:88:cd:c2:af:54:ed:b5:bf:88:b3:6b:46:42:28:
                    07:c0:85:4e:25:23:24:05:30:47:17:22:54:2c:f9:
                    7e:ae:49:3e:d2:c3:ad:e8:da:bd:76:26:33:1e:fa:
                    40:05:91:0e:f7:21:f0:a7:7a:0d:d1:9d:43:80:81:
                    a0:6c:d0:e9:8d:f4:e5:24:8c:be:2f:f2:03:59:2d:
                    02:37:88:a5:34:30:67:26:75:50:d8:d6:fb:8e:97:
                    19:09:41:d5:86:51:ca:74:14:c4:69:dc:04:74:58:
                    57:11:83:81:04:ec:18:cb:d7:72:28:aa:1f:ac:64:
                    80:41:f9:73:35:89:86:8d:3e:9c:fa:f8:9c:ce:2c:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EA:22:40:AE:2A:DB:E5:53:A3:C8:DD:54:79:BF:CC:84:33:36:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/a1b553f2-b966-342f-9fe1-18bbe7d4ecf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl

            X509v3 Authority Key Identifier:
                keyid:71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.44.0/24
                IPv6:
                  2602:f712::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:94:b5:f9:5c:07:8d:74:dc:09:c1:63:bd:86:35:55:cb:ed:
         ef:a3:cc:b4:d6:22:9f:0e:c3:04:ad:19:ed:3e:87:d5:76:a8:
         b8:50:01:64:59:ee:23:0e:6a:ff:72:d9:95:7a:18:f6:f0:90:
         40:24:b8:9a:d9:64:7b:d3:07:e2:25:c1:1b:95:80:09:e9:26:
         92:bd:0c:a8:ff:fa:61:b0:3e:ed:4a:97:05:e1:e1:d2:93:52:
         f7:8c:53:75:e5:57:b6:95:ec:2f:7c:b2:36:f0:e1:d9:d1:e1:
         ba:2f:28:d6:3d:97:01:eb:0c:7d:bc:c3:32:3f:f5:b2:52:ad:
         98:ee:d5:cb:b0:8a:0e:ca:15:d7:fe:53:f2:0a:9b:d6:d2:1b:
         66:d4:a4:c1:e6:5a:85:c9:2c:15:03:f7:ff:4b:1a:e2:f4:56:
         21:a6:4c:d8:ff:7f:50:74:d9:73:78:c6:03:6f:50:4b:e2:11:
         c3:5b:9e:da:40:3d:12:97:6f:d4:d3:23:8b:6b:90:db:e3:42:
         c9:c5:d6:9e:86:18:1f:a1:3e:72:76:1f:1c:b2:4f:3e:6c:6f:
         8a:18:d0:4a:00:5a:ae:dc:34:13:dd:31:86:84:80:d9:24:dd:
         82:ab:05:4d:1f:51:d9:cf:96:f3:98:33:46:12:f3:b7:a9:a5:
         99:23:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:41 2026 by rpki-client