Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa
File:                     1e1be535-508c-330e-a6e2-85aa2a913569.roa (raw, json)
Hash identifier:          P2bgI/W/sE0PL33d5CwpeJjcs1ZBgn96fkbxw50JcyI=
Subject key identifier:   91:E2:76:C2:F1:41:FD:BE:93:F6:0E:F7:B6:0A:B0:9A:B9:2D:62:3D
Certificate issuer:       /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7
Certificate serial:       010D0C9F4328584DD090719472F82D77A922D2C0
Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     8095
IP address blocks:        23.181.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:71:94:72:f8:2d:77:a9:22:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=2898bec8-f067-4530-8bd7-5dbdb374076f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:7a:c8:91:3f:c8:e6:bc:9b:98:20:9b:62:
                    68:c8:79:7f:64:62:4b:39:18:bf:fe:3f:af:54:d1:
                    d9:b9:6c:23:ec:90:a6:4a:58:d1:49:da:42:05:c3:
                    41:a2:41:fa:97:c2:3e:8e:aa:e2:8b:01:2f:62:57:
                    eb:50:93:c2:69:ca:75:a7:52:59:eb:55:c3:3a:1f:
                    1e:68:3b:c9:8e:8f:c9:b1:9a:cd:ca:8f:5d:7b:ed:
                    3f:39:d3:d7:1a:84:f9:35:13:78:e3:f9:72:57:51:
                    1d:2c:d7:b2:2c:e7:e3:a3:61:91:de:e9:74:9a:02:
                    39:aa:12:6d:75:0b:a9:e2:fc:ff:75:86:89:b7:f6:
                    8b:c1:bd:18:71:5c:ff:75:4a:ac:35:2a:fd:bc:f5:
                    62:97:3f:a3:21:33:c0:ba:2b:8c:c2:7f:ba:66:ba:
                    6d:59:ad:eb:89:2b:0e:5e:56:0b:53:6e:9f:31:b5:
                    d1:ac:dc:ef:da:2f:bd:f7:d9:fd:49:5f:f8:22:46:
                    13:12:77:09:39:85:cc:f9:d2:e7:f0:fa:45:d9:e4:
                    44:b4:52:9f:64:2c:19:24:95:b7:da:83:5d:0d:be:
                    a4:1a:2f:64:de:53:75:2a:85:6e:4c:c5:ec:d2:fe:
                    69:9d:b4:18:ad:06:86:53:b6:7d:7a:a6:0a:a5:b5:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E2:76:C2:F1:41:FD:BE:93:F6:0E:F7:B6:0A:B0:9A:B9:2D:62:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl

            X509v3 Authority Key Identifier:
                keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:43:c6:7a:05:4b:10:14:21:fc:42:31:56:6d:24:bf:f9:b3:
         40:ae:ca:0e:59:a4:7c:52:fe:3c:25:9f:f3:46:bf:72:4b:93:
         87:04:3f:bd:de:72:15:ab:24:47:b8:5d:44:40:bf:de:5b:f7:
         83:fe:b7:c0:49:df:98:40:93:83:4c:af:7c:fb:bd:89:c7:3e:
         09:7f:73:5c:0c:62:b4:f4:a5:a6:c7:e9:ec:e6:10:2e:21:8e:
         c4:01:43:d8:5a:5f:3e:3d:2f:00:7d:d0:a4:73:21:6e:16:fb:
         96:08:fa:50:f8:9d:c3:dc:6c:aa:06:bb:2b:d6:e5:ce:44:59:
         20:cf:fb:55:26:ae:24:15:55:3e:fe:99:e7:71:e6:74:47:02:
         10:14:4d:4e:92:3f:97:2d:2e:28:05:ce:70:c4:55:32:11:d4:
         56:f2:fa:09:45:c1:3a:1f:82:b6:90:8e:18:e4:9e:f0:95:35:
         24:a5:5c:c5:f2:c8:f6:1e:a2:82:65:8f:27:6a:c4:70:de:6d:
         88:c2:0e:84:7a:f1:dc:e9:b5:a5:a5:91:64:b4:29:08:e2:dd:
         dc:5e:b9:81:4d:d8:39:4a:38:87:cd:64:0f:65:9d:6c:c7:e9:
         51:75:81:46:b7:0f:8d:85:17:b7:6c:d9:79:04:40:ad:08:cd:
         30:3b:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:41:48 2026 by rpki-client