Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18/8f0fc621-257b-31d3-a11b-54854efa7628.roa
File:                     8f0fc621-257b-31d3-a11b-54854efa7628.roa (raw, json)
Hash identifier:          w0u5srGAO+Om+jyOz0jO9q222oSt9JyOFk4aVou+VX8=
Subject key identifier:   C2:52:BD:1F:10:95:73:C2:78:91:3C:A8:3F:72:50:66:34:6D:7A:59
Certificate issuer:       /CN=cbdec6c9-a9fb-457d-9aac-0c45f9465b18
Certificate serial:       010D0C9F4328584DA3E568FBEF338F86F34B0380
Authority key identifier: 3E:09:62:24:62:42:8F:61:AA:62:9B:DC:0C:76:31:F1:CE:A5:11:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18/8f0fc621-257b-31d3-a11b-54854efa7628.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     152179
IP address blocks:        23.140.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18/cbdec6c9-a9fb-457d-9aac-0c45f9465b18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18/cbdec6c9-a9fb-457d-9aac-0c45f9465b18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:68:fb:ef:33:8f:86:f3:4b:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdec6c9-a9fb-457d-9aac-0c45f9465b18
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=9b44528e-b1d2-4485-bd39-8a65e1f08796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:6c:1b:ec:7f:fb:a0:fb:3c:10:07:f0:0d:
                    62:a4:10:26:70:9d:5a:d3:e9:63:aa:e5:f1:ea:0a:
                    6d:19:a2:88:a4:a4:d7:9d:f4:ff:df:4e:99:e2:26:
                    ea:ea:3c:2d:c3:40:72:89:0a:4b:4f:67:ed:2e:68:
                    67:11:fb:be:69:e5:f4:35:c0:47:17:65:4b:b2:30:
                    86:db:0b:bb:f3:91:67:7c:37:11:76:53:80:59:a9:
                    cb:b4:cd:83:70:75:69:d6:78:a5:95:ea:05:9b:f2:
                    58:5f:64:6a:82:1d:b9:df:1c:fc:05:11:5d:bb:35:
                    76:24:eb:38:87:8c:6b:b9:2a:73:3b:be:ee:ba:5c:
                    7a:99:ec:5d:b5:dd:b2:e0:dd:b8:75:e7:68:5e:5d:
                    3c:be:b9:8b:4b:d3:26:8a:5f:0c:36:34:96:55:28:
                    c6:95:d7:83:b4:04:b3:56:bd:58:74:28:c4:13:56:
                    55:1b:37:e0:fc:a3:80:12:61:96:32:43:4a:56:55:
                    2c:65:56:91:7d:b1:33:17:22:02:43:c5:04:d4:5a:
                    93:ae:23:95:e0:0c:9b:e6:e1:95:a7:0f:10:f4:33:
                    53:50:4b:bf:a3:b5:81:80:50:6e:b8:cb:87:d8:15:
                    13:d4:0a:4e:9e:e1:30:04:6a:da:ad:c8:79:e5:fc:
                    d2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:52:BD:1F:10:95:73:C2:78:91:3C:A8:3F:72:50:66:34:6D:7A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18/8f0fc621-257b-31d3-a11b-54854efa7628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18/cbdec6c9-a9fb-457d-9aac-0c45f9465b18.crl

            X509v3 Authority Key Identifier:
                keyid:3E:09:62:24:62:42:8F:61:AA:62:9B:DC:0C:76:31:F1:CE:A5:11:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbdec6c9-a9fb-457d-9aac-0c45f9465b18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e7:7f:39:7a:de:e3:ae:cf:52:57:fd:f6:4e:d4:52:65:e8:
         5b:77:c0:fc:3f:71:59:0f:2b:fb:a8:57:85:b7:0b:2e:cb:88:
         2c:f9:45:9d:59:6f:a5:34:d1:48:47:c3:1b:ba:6b:b4:58:6c:
         35:cb:9e:e5:e1:16:ae:37:f7:f3:70:10:60:27:e0:24:90:46:
         12:d9:f9:a4:5f:c3:41:57:70:b3:f1:af:db:70:f6:77:5b:da:
         9f:25:e9:a2:a3:0e:64:37:60:bc:42:76:53:07:0e:4d:e7:94:
         ca:98:e1:c1:96:58:8f:4b:12:b6:5d:ac:9a:92:be:2c:3f:a4:
         49:ac:14:77:5e:20:33:bf:30:a2:aa:d3:a9:fa:39:ab:7e:cd:
         c5:fb:5b:8e:53:4e:c1:46:3b:71:1f:0a:53:ab:b6:2e:65:f6:
         65:46:e4:8c:79:25:09:dd:b9:08:d2:36:89:0c:73:28:91:2f:
         05:47:71:49:9e:41:8e:b8:38:df:bf:76:f3:9d:c2:36:54:b7:
         2e:1f:5e:52:19:d8:93:58:1e:9b:f4:51:c7:7e:99:ac:35:27:
         07:08:bd:36:35:ef:b6:a7:21:b6:70:b3:cc:ce:b0:ee:64:31:
         b8:a7:20:0d:6e:57:c8:df:5a:8d:e2:84:a1:c1:4c:4e:86:67:
         d6:ad:9c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:47:32 2026 by rpki-client