Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed/7f54d90a-0a66-3876-a674-6efba264dac0.roa
File:                     7f54d90a-0a66-3876-a674-6efba264dac0.roa (raw, json)
Hash identifier:          mJOg/OVfY0E4hQ7VP3EmqgTHukIggaIizpJ9ru8KnCQ=
Subject key identifier:   3F:22:95:20:BB:1E:D4:F8:A2:78:9B:C5:48:90:7D:BA:7E:9D:05:C1
Certificate issuer:       /CN=a723e7ea-a3c0-4481-bbf5-68275e7550ed
Certificate serial:       010D0C9F4328584D370F3DC6A7EE9C692478DFF0
Authority key identifier: 84:84:71:08:B8:F2:2D:AE:3A:67:19:A7:06:AC:E2:0E:40:C6:B7:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed/7f54d90a-0a66-3876-a674-6efba264dac0.roa
Signing time:             Thu 19 Mar 2026 01:21:45 +0000
ROA not before:           Thu 19 Mar 2026 01:21:45 +0000
ROA not after:            Wed 17 Jun 2026 01:21:45 +0000
asID:                     32205
IP address blocks:        23.154.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed/a723e7ea-a3c0-4481-bbf5-68275e7550ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed/a723e7ea-a3c0-4481-bbf5-68275e7550ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:37:0f:3d:c6:a7:ee:9c:69:24:78:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a723e7ea-a3c0-4481-bbf5-68275e7550ed
        Validity
            Not Before: Mar 19 01:21:45 2026 GMT
            Not After : Jun 17 01:21:45 2026 GMT
        Subject: CN=ff77e1d1-d7c3-4f89-a555-55851f92f803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:b8:7d:2c:1c:17:a1:1c:1d:54:51:ca:ea:
                    45:b1:fc:70:66:f4:ed:27:8f:35:b5:8b:40:4f:32:
                    c8:1e:81:4e:4d:8b:de:a1:4c:77:4d:12:18:99:7d:
                    5b:14:44:e1:25:53:41:9a:8e:e7:36:d6:6f:df:ff:
                    c0:c7:1e:2e:75:f0:4d:c2:f7:bf:47:68:a9:95:6b:
                    fc:1a:a4:a4:c9:72:cb:21:23:f4:e5:44:ba:b3:93:
                    c3:31:18:90:f9:6a:2d:06:61:c7:ee:5f:b7:35:53:
                    a0:64:97:8e:49:f4:cc:ae:f5:bd:98:e8:bb:e4:cd:
                    b3:40:33:8f:58:a7:97:d2:ae:bf:b9:9f:21:58:5d:
                    50:09:1f:bc:bc:fa:cf:2a:66:30:67:ab:f5:2c:12:
                    fd:b3:9d:8f:ec:8e:48:33:88:d2:fb:2b:05:5c:7c:
                    74:7b:d6:f0:7d:7c:85:64:c7:26:d4:a9:5c:1b:f2:
                    14:95:2b:57:ae:0d:c9:27:5c:23:4e:b9:15:fe:1f:
                    c4:4b:35:5e:0f:ce:58:bb:55:84:dd:5b:25:af:6b:
                    fe:c1:11:49:07:8b:39:fe:91:7f:cc:84:88:13:6d:
                    ab:76:4f:c5:75:77:a4:aa:a1:03:b9:0b:35:b8:7a:
                    e6:61:10:0c:d7:f6:36:6b:0c:4e:1c:58:5c:ec:8b:
                    2f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:95:20:BB:1E:D4:F8:A2:78:9B:C5:48:90:7D:BA:7E:9D:05:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed/7f54d90a-0a66-3876-a674-6efba264dac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed/a723e7ea-a3c0-4481-bbf5-68275e7550ed.crl

            X509v3 Authority Key Identifier:
                keyid:84:84:71:08:B8:F2:2D:AE:3A:67:19:A7:06:AC:E2:0E:40:C6:B7:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a723e7ea-a3c0-4481-bbf5-68275e7550ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:25:d0:6f:3a:f6:f9:47:8f:d2:8a:04:2d:c3:19:19:d2:06:
         0f:2f:c6:94:17:f5:b7:e7:42:12:b0:56:48:af:2d:56:33:e3:
         94:d8:b2:8d:a8:1a:75:59:ce:a3:49:1a:16:05:d8:55:0d:9e:
         ab:c8:35:e7:72:87:ad:8f:de:5f:54:ec:92:28:82:2a:c8:99:
         56:94:98:13:06:62:e0:d5:71:22:2f:b2:42:e6:0b:55:65:7f:
         5d:5c:60:2b:d6:28:a4:b4:f6:6c:18:8a:75:16:eb:b8:68:08:
         f0:32:1d:33:e0:40:29:a0:24:33:76:cf:3e:83:36:8c:0f:0e:
         59:42:ba:a6:c5:e2:e1:32:b6:9b:25:26:80:e8:95:19:6e:96:
         3c:a1:b5:b9:4d:29:0b:04:a2:7b:e1:b7:f1:c4:81:a2:ec:8e:
         3b:99:06:de:85:00:3a:dd:b9:2d:86:08:69:06:5c:c7:37:39:
         58:0b:df:14:1c:3c:9d:b6:eb:48:66:3e:76:26:d4:2f:81:a4:
         9b:2e:00:f3:e2:61:15:e2:0f:fe:66:96:ee:5e:6a:be:d3:80:
         29:d2:75:78:09:ec:82:8c:b9:6a:ae:99:a6:97:23:ef:bb:a9:
         f0:c0:42:20:5b:c5:42:c0:7b:2a:36:95:b5:c6:47:47:d5:48:
         1d:1d:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:03 2026 by rpki-client