Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8d331984-c13e-307a-867d-87975780f4df.roa
File:                     8d331984-c13e-307a-867d-87975780f4df.roa (raw, json)
Hash identifier:          wbfl+YbCUv3uHE8naewFLwxSwodZqEj2KtjlZQDd+fY=
Subject key identifier:   87:D9:D1:AB:0A:EB:2B:CB:3E:F9:91:3B:BB:76:2B:5D:92:6E:7D:B0
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F4328584D9A201C3DE067D6E1E850C7A0
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8d331984-c13e-307a-867d-87975780f4df.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     399765
IP address blocks:        23.131.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:1c:3d:e0:67:d6:e1:e8:50:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=a27ee2fc-1eee-4ef3-b265-a0b74778ae4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:6c:de:67:f6:ed:09:f5:ef:4e:a9:5e:57:
                    3f:3c:90:cd:0e:51:a3:dc:e3:df:f3:6e:35:9b:5c:
                    79:30:02:d4:4a:35:21:dd:49:95:06:43:e6:5d:fc:
                    22:e5:d7:0f:a5:84:e9:f0:e1:af:0d:85:91:79:ef:
                    29:53:89:9f:2a:33:0f:e7:c0:96:c1:f9:c3:42:e6:
                    1d:f9:1e:60:94:de:92:fc:75:ab:a3:9b:e9:f9:fd:
                    80:e8:c4:d1:3d:1a:cb:4d:f0:2e:a8:13:9f:9a:ae:
                    23:7e:6e:54:7f:b8:d5:83:ad:15:08:59:d5:b4:0b:
                    f2:11:32:c0:11:07:52:04:58:02:6a:b1:86:e2:0c:
                    6c:3a:4f:3b:0e:97:80:28:77:e7:3e:db:60:14:2c:
                    46:24:f9:70:ee:1e:94:cf:5c:af:64:c3:8d:c9:f1:
                    b7:64:96:a7:57:09:b7:10:df:a3:37:e2:cb:f9:b7:
                    fc:32:d8:e7:2a:ec:97:1b:00:30:7e:14:a4:2a:76:
                    10:b3:85:f1:3d:a2:09:45:bd:cc:61:08:42:3e:4d:
                    13:0e:e5:2a:96:47:82:02:74:1e:15:26:c5:71:97:
                    d1:0b:2b:ac:ff:2c:bd:52:79:32:47:b6:88:12:93:
                    f1:4e:5b:31:5d:93:1d:c4:ec:6b:43:06:d8:a1:aa:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D9:D1:AB:0A:EB:2B:CB:3E:F9:91:3B:BB:76:2B:5D:92:6E:7D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/8d331984-c13e-307a-867d-87975780f4df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:14:87:28:28:20:3f:6c:87:a2:81:0d:22:a9:e7:21:d4:d1:
         62:be:1f:89:71:e2:7e:c6:22:1d:3a:3a:85:0e:f4:db:48:60:
         78:49:64:ef:e6:08:76:ce:9a:46:86:68:52:8b:49:6f:55:1d:
         e0:d3:ff:eb:63:76:75:f0:fc:02:58:af:6e:f4:e7:21:b7:2a:
         24:a5:ec:2b:98:72:a5:ef:cb:0e:f8:fa:09:75:46:79:a1:84:
         5f:b7:1b:a2:33:eb:88:c2:37:52:a7:19:d9:d6:59:b0:e0:2b:
         ad:62:3e:57:2b:fb:af:f7:93:42:04:4c:9d:19:bc:ec:10:fe:
         cc:e2:38:4c:20:cf:17:f7:86:14:fc:b9:f3:1b:99:37:3a:d5:
         1a:78:c2:4f:3d:04:85:fc:02:8d:cc:0a:53:51:a1:cf:61:e9:
         99:38:8d:1a:5e:e2:54:0c:3c:33:a6:6d:79:9c:01:c3:43:76:
         4e:cc:90:e6:75:08:51:d1:02:cf:92:43:c3:2e:31:74:d5:1a:
         6d:40:eb:8c:31:ab:aa:cb:d9:c6:de:29:e5:88:4e:d2:b4:32:
         0f:6a:43:7d:da:70:ad:9c:27:ce:7d:02:48:77:2d:4f:a4:59:
         9b:f4:a4:ff:6e:bb:14:4a:27:a7:70:8b:06:51:9b:37:0a:94:
         2c:ff:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:25 2026 by rpki-client