Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/d4ce3a08-6799-3ebd-b746-18361e67fad4.roa
File:                     d4ce3a08-6799-3ebd-b746-18361e67fad4.roa (raw, json)
Hash identifier:          CXjEblvGpKe6Nn39WKzUF+ThgcODTzcqhZAij4BgjjI=
Subject key identifier:   BF:92:83:4F:4B:7B:D4:1E:27:1C:C8:CF:E5:8F:5E:92:B9:00:C2:65
Certificate issuer:       /CN=55e6662c-1696-40b5-91c0-eb4544d58c78
Certificate serial:       010D0C9F4328584D35A015B80A4B3ECF7FFAF038
Authority key identifier: 22:D4:DB:FE:32:02:F9:32:02:A4:4C:43:C5:93:AF:FE:D1:AA:7C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/d4ce3a08-6799-3ebd-b746-18361e67fad4.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     40779
IP address blocks:        23.138.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/55e6662c-1696-40b5-91c0-eb4544d58c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/55e6662c-1696-40b5-91c0-eb4544d58c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:a0:15:b8:0a:4b:3e:cf:7f:fa:f0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e6662c-1696-40b5-91c0-eb4544d58c78
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=757f7197-8b97-4df5-81b4-2349d5289ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d5:db:34:b1:ff:84:da:2a:1b:d9:14:a7:13:
                    f4:7b:c4:57:13:0d:71:2d:66:12:15:c8:a7:76:82:
                    64:33:bd:e4:fc:e5:d7:0a:6e:be:c0:40:0d:f0:75:
                    3c:0d:d5:06:0f:ee:c4:9d:e0:bf:1c:17:a4:a6:3d:
                    89:72:39:4d:77:37:74:a8:56:b0:49:b9:05:80:28:
                    51:1f:65:b7:77:93:8a:56:af:d8:bf:06:60:1a:6c:
                    43:d6:a5:17:a8:96:7f:cf:86:28:94:bb:a7:1b:73:
                    23:e7:32:99:25:27:a5:be:e7:4a:9f:5e:5e:85:98:
                    9c:2b:17:c8:8e:7a:30:0b:37:fc:7f:47:2a:ad:56:
                    73:5e:e9:6a:ac:49:09:3c:01:9c:01:08:57:e9:e1:
                    79:27:6d:09:f2:c1:38:c6:9e:0f:fd:9c:6e:a3:97:
                    d2:ec:53:4a:98:b9:2b:25:af:23:99:76:d8:fb:d8:
                    31:b2:9e:cc:13:af:77:d6:dd:27:c3:49:4f:1c:66:
                    39:96:ff:a4:e4:9d:7f:dd:b5:90:b1:eb:19:07:08:
                    11:57:71:03:60:84:69:c0:c1:ff:28:f4:07:0a:8f:
                    6c:55:38:d1:99:d8:c7:24:0a:b3:8a:34:be:d4:f2:
                    66:24:04:ad:b7:08:9e:1d:eb:8e:d3:2d:72:03:24:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:92:83:4F:4B:7B:D4:1E:27:1C:C8:CF:E5:8F:5E:92:B9:00:C2:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/d4ce3a08-6799-3ebd-b746-18361e67fad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78/55e6662c-1696-40b5-91c0-eb4544d58c78.crl

            X509v3 Authority Key Identifier:
                keyid:22:D4:DB:FE:32:02:F9:32:02:A4:4C:43:C5:93:AF:FE:D1:AA:7C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/55e6662c-1696-40b5-91c0-eb4544d58c78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5e:8d:c7:e5:09:3d:72:b1:e4:64:c0:72:5c:72:49:94:43:
         4f:ba:fe:a0:0a:06:5c:34:15:67:b1:13:55:b0:9d:ff:a8:74:
         e4:3e:73:a2:ed:63:77:36:f7:5c:2a:fc:8c:46:6d:e0:79:1e:
         ee:2c:1b:6d:7e:c5:39:5e:d5:7d:28:5a:78:24:c8:73:5e:c9:
         2d:3a:e1:00:b4:88:99:ae:a3:77:24:4b:fc:07:d0:33:bc:8f:
         4f:ff:d0:2d:3f:63:52:49:ce:63:b4:b0:96:eb:39:be:e7:58:
         25:92:a5:93:60:59:72:74:39:0a:28:9a:c7:62:6e:29:b4:50:
         2a:50:e3:63:4e:8a:f6:67:7d:0a:ce:02:ca:3f:94:5a:ab:67:
         ea:41:ae:45:da:f6:41:aa:86:33:bc:5f:7e:7a:63:78:68:48:
         9f:e2:5e:2c:a5:ac:1d:a3:35:24:7d:99:18:9e:0a:be:f4:20:
         66:bf:00:61:2d:5a:94:f6:04:c0:76:57:03:98:f6:e3:7a:a5:
         6b:8a:18:8b:2c:a0:4d:74:b3:21:4a:bd:80:ad:72:7f:10:ce:
         ec:d3:1f:e0:73:98:19:8c:45:68:2c:25:77:df:e7:ec:d5:34:
         60:fe:62:6a:a8:41:5a:8b:73:fe:9c:96:d6:a1:66:9a:c7:94:
         15:04:43:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:04 2026 by rpki-client