Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/5da9e3b3-3362-3bf6-a7cb-60f6e00b5190.roa
File:                     5da9e3b3-3362-3bf6-a7cb-60f6e00b5190.roa (raw, json)
Hash identifier:          P1Vtgg+yPiWsRChfeQgyztr5M3fe39+gs038afL5xP8=
Subject key identifier:   EA:12:62:52:CD:E7:DF:1F:C3:FF:AD:4C:42:5E:C0:31:78:A7:B0:8E
Certificate issuer:       /CN=2123fd68-596c-4806-bd9e-91167a6dc6d4
Certificate serial:       010D0C9F4328584DC29AFD21F3840C2CF7297700
Authority key identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/5da9e3b3-3362-3bf6-a7cb-60f6e00b5190.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     401442
IP address blocks:        23.137.196.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:fd:21:f3:84:0c:2c:f7:29:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2123fd68-596c-4806-bd9e-91167a6dc6d4
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=0801005f-8cac-4308-9b52-8bcab51dd134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:de:04:7a:7d:27:d6:27:06:c9:59:43:6c:
                    5d:eb:9a:df:21:7c:52:ec:28:65:13:53:5c:f5:96:
                    e9:e7:19:ed:d1:45:60:8a:83:17:09:86:9a:43:52:
                    93:93:11:26:9c:c4:70:df:87:6c:7e:c6:c0:9d:ca:
                    71:f2:4f:46:f2:b5:4c:13:c1:3f:f4:a9:55:fe:95:
                    02:9d:bb:6b:af:05:d7:55:4b:ec:23:d2:a1:5e:ed:
                    b7:02:d8:c9:64:3c:a2:23:7d:0f:57:34:99:ae:03:
                    7f:26:04:a9:3f:2a:ba:c0:77:cd:c9:cf:63:5a:be:
                    5e:ee:b4:84:a5:35:68:b7:f8:cc:39:3f:d1:dc:8d:
                    2b:27:90:d2:2d:1e:db:2d:c0:1a:3f:8f:9b:4f:24:
                    24:94:17:d1:8b:7e:1a:2f:37:cf:e5:36:74:1a:68:
                    46:53:68:a6:f7:f5:44:50:9a:67:f1:4f:7f:0f:78:
                    e4:6a:38:a3:54:97:d0:6d:84:14:2f:62:66:03:da:
                    3a:ff:3f:de:d5:5c:34:87:dc:ba:d0:81:ef:bf:02:
                    c4:0a:cd:45:a2:e6:c6:27:ff:bd:30:a1:47:6d:a3:
                    7b:17:54:31:b1:30:a3:53:a3:c9:0e:a2:6f:32:fc:
                    1e:9e:a9:cc:b9:ba:88:ad:f0:84:78:1e:c5:36:b0:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:12:62:52:CD:E7:DF:1F:C3:FF:AD:4C:42:5E:C0:31:78:A7:B0:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/5da9e3b3-3362-3bf6-a7cb-60f6e00b5190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:23:78:8e:e4:f6:57:60:85:aa:68:16:ff:5e:1d:67:dd:92:
         8b:65:5b:20:ee:b8:28:d0:1c:75:32:31:b8:92:72:9c:f8:62:
         3c:91:0f:ce:1a:64:da:ca:c5:f0:d7:e3:53:9d:51:8a:da:90:
         8d:2d:7b:90:53:ea:1b:e0:75:af:6b:73:e4:e3:4d:7f:ba:f6:
         0e:09:58:0a:97:62:31:0f:d7:2d:8d:0a:8b:67:cc:61:b5:03:
         fd:42:9c:7f:d3:17:a0:20:ee:ff:b7:87:e4:35:ce:9f:ba:fa:
         3c:6b:ba:19:78:49:ee:f3:93:30:c8:0b:a8:29:63:0c:45:35:
         1d:f5:7d:82:f9:28:5e:01:9e:f1:31:42:c5:88:b5:58:8f:50:
         7b:e6:a6:a3:70:c8:56:5f:d4:11:41:d8:6f:40:23:83:9f:6a:
         c5:19:98:5e:6c:98:05:70:b7:67:83:f9:b2:d2:a1:12:3c:99:
         5e:a8:33:7c:e5:43:73:a5:19:4e:62:33:3d:8a:09:8e:51:e8:
         35:64:9f:3d:26:a3:50:ca:70:0d:89:a5:4d:9c:0a:81:ff:ca:
         c8:db:ed:93:94:95:1c:2c:59:49:5d:97:99:3d:53:62:fe:84:
         df:00:9d:ed:c5:ff:1e:a5:78:5a:4b:f1:67:69:c3:70:65:3e:
         e1:5c:89:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:29 2026 by rpki-client