Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa
File:                     3d670424-fd95-3967-bba2-b42dd43d4732.roa (raw, json)
Hash identifier:          ND+TJbxyvq1qjS+VlR1Z2VWyrsI+JZ7spc5e5bJ3tk0=
Subject key identifier:   26:E8:5D:86:DE:F7:6C:32:AE:16:AA:37:8F:66:5F:48:54:C6:DE:29
Certificate issuer:       /CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6
Certificate serial:       010D0C9F4328584D492A7AFB5413CC0D13CB6554
Authority key identifier: 12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     212512
IP address blocks:        23.185.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:7a:fb:54:13:cc:0d:13:cb:65:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=5b458a80-a952-49ac-8a51-cb49d73fe8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:6c:37:94:48:d6:e7:0d:88:14:64:0d:c3:
                    2e:65:6a:f1:5e:31:f3:ad:fb:42:07:1e:1c:1f:63:
                    5c:46:be:ce:9e:08:3f:a9:07:40:2e:0d:28:9f:43:
                    61:76:d4:94:54:1e:f4:52:b9:a8:df:bf:36:47:44:
                    53:b9:89:25:3c:23:fb:47:f7:f6:12:ea:53:2f:d1:
                    fa:60:c3:ca:ef:e6:50:14:f2:9e:b5:81:95:cf:ea:
                    3f:c2:8c:f2:6c:9b:e7:8e:63:75:28:fb:27:bf:66:
                    6f:1a:ff:87:73:7c:c2:d2:fb:14:d3:c8:2a:12:62:
                    1f:f9:23:d0:51:3d:c8:52:53:e7:cd:51:7f:0b:92:
                    14:fe:c8:67:de:87:30:7b:ee:41:46:f4:5f:6c:ec:
                    6a:dd:b6:bd:be:9e:f4:34:28:9e:08:48:21:cd:d3:
                    4a:ba:ac:97:ae:be:e9:70:f6:c7:82:51:b4:bb:7f:
                    aa:38:21:ab:51:dd:d5:23:e9:8d:82:98:4f:b6:1c:
                    22:0f:59:48:c6:1c:dd:3c:cf:16:80:9f:90:83:87:
                    9a:54:fa:75:68:e4:f4:04:5d:7f:e8:60:cf:4d:f1:
                    21:2c:80:90:44:dc:9f:9d:6b:a6:a6:63:41:c2:c8:
                    75:67:a8:6d:53:d6:d0:4e:50:29:d4:be:c3:63:b8:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E8:5D:86:DE:F7:6C:32:AE:16:AA:37:8F:66:5F:48:54:C6:DE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.crl

            X509v3 Authority Key Identifier:
                keyid:12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:07:df:69:ed:ca:30:e1:75:fb:49:d1:c1:a4:d2:9c:b9:
         78:23:29:ee:e9:d3:4e:07:5c:f2:e0:2c:c9:71:0b:02:2d:ed:
         3e:5b:58:69:a0:1b:2a:89:10:86:43:c9:6e:4d:6a:f1:0e:55:
         ba:9b:c0:82:d8:89:6d:97:5d:9d:2e:74:48:ba:5f:3b:b3:a1:
         0f:8d:ee:83:7a:da:50:3f:de:16:ca:f2:2f:9d:e4:a0:f5:72:
         a6:b4:e2:4c:31:de:a9:e0:78:b0:11:8f:38:f3:a3:38:72:52:
         85:11:72:4e:19:af:aa:bd:0f:23:f7:14:4c:6f:38:76:3f:70:
         c6:81:d9:08:d9:4d:cf:b9:a9:b4:7e:4b:2c:25:a6:fc:ac:cb:
         d5:5c:2f:53:f3:d8:0e:58:05:17:8d:8b:ba:d6:50:cf:e6:36:
         b7:56:ae:58:1e:8c:c6:d8:d8:ce:31:80:08:99:4a:b5:25:f7:
         26:32:43:80:5d:a4:ab:9d:e5:3a:97:9a:d2:45:9d:5b:72:97:
         e7:b0:9e:6e:3d:7d:f6:cf:9e:8f:be:c8:79:c8:89:ec:20:af:
         b2:5f:93:3d:ea:24:45:a8:a2:ef:8d:3d:9d:97:7f:4c:84:15:
         10:3a:84:45:4c:21:91:6f:77:d8:e8:39:9c:d3:ae:6c:e1:83:
         b1:62:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:02 2026 by rpki-client