Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa
File:                     bef29b0a-887f-3563-acf6-0a6587af29f2.roa (raw, json)
Hash identifier:          RVZOdSt/KeqWtZ+pQYvDoFBVD/M9NT1amV8g3owi4wU=
Subject key identifier:   EB:18:49:6E:AF:3B:1E:EB:F9:65:33:CC:E7:DE:0F:35:D3:0C:4B:CB
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584E5084A2D5E0929964075B3C80
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     18914
IP address blocks:        23.147.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a2:d5:e0:92:99:64:07:5b:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=ae6be03b-b976-4ee2-95db-f181c5b35d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:e1:62:93:0d:83:90:0e:6b:94:7a:bd:6e:
                    8c:18:24:3b:31:ce:ba:1b:df:2f:bb:d9:73:53:f6:
                    e7:f6:55:d7:16:21:ae:0b:d4:3c:23:66:41:d8:89:
                    d4:65:e9:64:b3:6d:6f:ca:b4:33:c4:00:61:56:2c:
                    c0:a3:41:36:d2:a2:b0:6e:14:aa:7a:7a:40:51:e9:
                    d5:6c:6f:c9:16:b5:0e:5a:f2:4d:b1:bc:57:e4:ad:
                    24:fe:57:dc:65:9f:f9:be:0d:d8:f9:e4:bd:d2:50:
                    08:d3:e0:a1:7c:91:d7:dc:d1:0a:9d:92:cb:9a:c6:
                    3b:df:74:94:e7:e8:74:8d:d6:98:bd:92:44:e1:8d:
                    b6:ee:e7:36:36:3c:16:23:b5:ca:97:7b:f0:76:d9:
                    ec:32:df:d1:df:8a:06:ca:69:31:2e:33:b7:96:5f:
                    fc:83:d5:3f:e7:6a:1b:4e:d5:5c:61:dd:0c:8c:e6:
                    b3:de:b5:11:2d:a8:09:c8:bf:6c:67:23:50:db:71:
                    b5:32:26:91:7a:3f:28:54:fb:fe:63:e9:16:74:ff:
                    6b:63:b0:05:00:93:90:23:a0:30:da:46:21:51:0e:
                    69:28:4c:88:d6:2b:0c:13:d6:8d:52:fb:c5:64:d4:
                    20:74:ab:f3:24:45:f8:5f:21:fd:98:4d:e3:77:52:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:18:49:6E:AF:3B:1E:EB:F9:65:33:CC:E7:DE:0F:35:D3:0C:4B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:56:92:54:52:f2:6d:a7:b3:5f:e5:c1:7b:75:90:ad:cc:
         cd:96:be:cf:7e:0a:64:59:de:80:fd:65:f9:87:39:e0:9c:c8:
         60:ff:f9:6c:79:60:66:3f:38:9d:61:1c:50:1e:09:69:91:94:
         53:7c:c3:78:09:e1:21:3d:71:c9:db:88:c0:e6:ac:87:25:9a:
         98:c5:de:89:72:a7:57:ae:3c:1f:8d:7c:96:a4:a6:98:35:66:
         51:d7:27:ee:d4:d0:d3:66:d4:0c:4c:9c:12:1d:ed:7c:18:62:
         2d:ef:f7:d9:40:04:bd:b5:80:e2:c2:33:6b:c7:7d:ea:73:c1:
         38:77:6c:34:c4:9b:b4:c9:f2:9a:5e:1b:36:63:92:e1:84:f1:
         12:4e:ee:49:5f:aa:71:2d:4f:6a:12:39:a5:e9:72:88:50:28:
         6a:87:2a:a3:87:62:81:86:09:53:27:54:55:a8:2c:57:4a:db:
         9a:da:94:76:3f:b4:7e:48:37:8d:7a:94:54:48:ea:f2:45:01:
         39:17:5e:5c:f9:d6:05:76:7d:1b:e3:01:ae:67:69:d4:cf:b9:
         19:0c:0b:6f:2c:e4:f8:89:51:7a:6e:74:3a:6a:68:53:cb:fe:
         5b:06:aa:fe:50:74:c8:06:76:46:96:b5:43:45:4b:6b:85:fb:
         05:19:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:23 2026 by rpki-client