Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/ef05ff07-e2ed-3064-8be8-95b7987d23dc.roa
File:                     ef05ff07-e2ed-3064-8be8-95b7987d23dc.roa (raw, json)
Hash identifier:          +kDu7pQduzYeZga4zaXf2DZWGva3n6KujFFYXa2Li64=
Subject key identifier:   38:43:62:DC:47:DE:0F:FF:E5:34:75:0B:10:3E:89:AE:E5:6D:B0:90
Certificate issuer:       /CN=e121c7c4-c415-4c4c-bf5a-394a602b65bf
Certificate serial:       010D0C9F4328584DA6B00C5DF7267F799D23DE40
Authority key identifier: 68:7A:B4:04:74:7A:45:75:CC:DC:F1:80:E2:E1:93:34:1C:3F:9C:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/ef05ff07-e2ed-3064-8be8-95b7987d23dc.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14847
IP address blocks:        23.136.84.0/24 maxlen: 24
                          2602:f6af::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/e121c7c4-c415-4c4c-bf5a-394a602b65bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/e121c7c4-c415-4c4c-bf5a-394a602b65bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0c:5d:f7:26:7f:79:9d:23:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e121c7c4-c415-4c4c-bf5a-394a602b65bf
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=ec7e5d65-5719-4833-a8b9-d4ae4b2f5084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:70:a5:f4:c7:41:81:e0:8b:c3:54:85:f7:22:
                    b3:53:45:01:e6:ec:a6:2d:2d:a7:35:da:e4:e8:bf:
                    f0:a0:65:ef:90:34:db:a8:93:f8:a9:b8:31:0a:14:
                    50:87:a7:1c:38:95:a0:38:7b:c0:9c:fc:71:db:52:
                    34:c7:22:40:ba:9f:58:be:79:a5:33:58:ef:dc:ca:
                    1c:51:c9:3f:75:ae:16:b5:8f:8d:6b:ad:15:2a:b6:
                    50:03:b1:04:9a:39:d1:ed:73:30:ce:a1:96:21:91:
                    ec:ae:80:26:6c:12:02:c2:65:2f:4a:16:d1:5e:16:
                    fb:59:5d:24:7d:03:7e:20:f2:fd:21:28:a4:56:98:
                    d5:5c:ba:f1:d2:11:88:2e:cb:78:c5:02:7c:d2:02:
                    9c:34:41:2e:c4:86:d2:5c:17:40:a0:1b:e8:04:70:
                    04:9e:3b:f4:83:41:b2:7b:4a:ff:8c:1b:f2:b4:22:
                    68:6f:c5:6a:72:c6:49:f4:43:ec:d0:41:c3:c7:87:
                    e3:8e:2d:eb:6a:66:3f:16:7d:97:d9:f7:5b:20:a2:
                    1a:a3:50:3d:32:d9:c4:27:28:b2:cd:b7:a3:39:15:
                    b6:c1:f3:76:4c:4a:0f:9a:ab:ef:71:40:f0:c5:99:
                    52:0f:15:26:5c:a4:80:41:6f:d7:fb:58:c1:63:42:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:62:DC:47:DE:0F:FF:E5:34:75:0B:10:3E:89:AE:E5:6D:B0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/ef05ff07-e2ed-3064-8be8-95b7987d23dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/e121c7c4-c415-4c4c-bf5a-394a602b65bf.crl

            X509v3 Authority Key Identifier:
                keyid:68:7A:B4:04:74:7A:45:75:CC:DC:F1:80:E2:E1:93:34:1C:3F:9C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.84.0/24
                IPv6:
                  2602:f6af::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:a4:01:86:89:eb:df:9f:46:79:7c:07:b3:0e:9a:0b:2c:94:
         41:aa:1b:a7:0e:2d:b3:1d:51:88:b2:35:78:46:58:19:b3:17:
         51:ec:31:f0:19:a8:e0:d0:f4:29:b7:cc:44:c8:22:ca:89:5b:
         6a:c7:9a:b7:99:74:58:77:b1:30:a4:9a:2c:61:b3:24:c7:eb:
         6e:b4:c8:83:1b:de:0d:2b:99:87:81:00:d3:89:21:ab:26:02:
         d9:b4:1c:44:18:7c:0e:00:d8:c0:69:2c:2c:7a:56:0f:d8:ca:
         51:ac:64:b5:de:1b:2a:b4:86:91:e7:8f:45:58:ea:1a:f1:29:
         61:03:94:ad:f4:e4:91:c4:af:e8:ff:31:65:97:46:fe:89:33:
         94:48:a6:fc:8a:f1:30:82:de:7d:4b:a2:2c:0c:59:f2:fb:11:
         91:7c:b0:b7:41:68:60:6e:df:35:d0:d1:86:11:59:10:30:d8:
         7d:9e:63:e5:04:91:1d:18:3a:43:f4:34:b9:1d:8e:88:5d:8a:
         e7:a7:81:cb:1e:58:b4:2b:af:1d:e4:a7:16:80:39:c7:c4:04:
         cc:4f:4e:b1:4b:73:1f:0a:bf:8b:1c:2e:36:45:1a:c1:97:bd:
         f7:99:10:a7:62:6d:5a:cf:11:c2:f0:13:19:a7:f2:a6:cd:1e:
         ff:2a:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:44 2026 by rpki-client