Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/aa126630-1ebb-3d7e-bc58-231039087ae8.roa
File:                     aa126630-1ebb-3d7e-bc58-231039087ae8.roa (raw, json)
Hash identifier:          h+4rMJHQ4yIdr9TqSWME7REdsiqziEdNeeeYD3HIBhk=
Subject key identifier:   EA:26:94:E8:14:3E:FB:8A:7F:B8:75:3E:C0:37:77:88:B0:A5:53:6A
Certificate issuer:       /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
Certificate serial:       010D0C9F4328584DBA3AE09BB2F77CB39AAF5640
Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/aa126630-1ebb-3d7e-bc58-231039087ae8.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     216309
IP address blocks:        23.141.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e0:9b:b2:f7:7c:b3:9a:af:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=044835c0-9818-4d30-8f7d-6c7e3488ae22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:d8:c2:1c:b3:34:77:e8:b2:3e:34:75:a9:
                    32:02:45:39:45:73:21:91:e7:0c:d9:8a:68:ce:31:
                    b8:92:bd:0b:db:02:41:5c:0f:11:f9:35:3e:c0:22:
                    a7:a6:cd:71:00:ad:4c:12:f8:1a:0c:c9:6f:b0:e7:
                    19:92:8e:9e:4d:e5:30:6f:60:07:a2:d9:9f:45:a9:
                    b0:b2:b0:6a:40:4d:5c:c6:2c:aa:cc:4c:dd:c7:2c:
                    8a:ae:79:b2:06:1c:cb:c2:9e:4d:57:4b:d9:30:b4:
                    34:d9:f0:63:99:8f:38:7a:e2:0c:4c:1f:dd:d2:d8:
                    e3:ad:3d:7d:43:4e:1a:d9:d0:8d:79:5c:76:9a:41:
                    95:70:50:17:1c:a8:9b:16:66:d3:3a:ae:08:07:d5:
                    5b:23:f9:73:96:10:cf:eb:ae:7f:6b:29:23:1c:b0:
                    33:5d:d7:99:ae:7b:b8:d9:28:5c:01:85:a9:0d:ba:
                    ca:7b:84:31:0e:fa:2b:34:3a:51:88:6b:89:ea:82:
                    9a:08:6d:e7:11:db:df:c3:3d:33:93:02:94:5b:2f:
                    e8:31:03:3d:86:6a:c9:36:2f:66:08:c2:89:b4:75:
                    19:ee:f3:db:50:d8:d9:a3:9d:b4:a1:4e:6b:38:b4:
                    10:28:1f:ca:15:20:63:8f:28:99:20:45:94:11:0e:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:26:94:E8:14:3E:FB:8A:7F:B8:75:3E:C0:37:77:88:B0:A5:53:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/aa126630-1ebb-3d7e-bc58-231039087ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:4c:f1:61:a8:c3:59:7c:9c:eb:fa:bf:95:f2:d3:ef:6b:
         3f:08:b8:be:06:61:d8:c8:2c:cd:c8:38:ce:37:ba:68:f0:e3:
         31:10:f3:da:d3:9a:40:22:b9:4c:2b:2a:c8:0e:01:31:f7:57:
         4a:33:c4:de:88:cf:f1:3e:18:00:8d:ec:85:6b:b5:01:fb:7e:
         20:29:a2:f8:0d:82:16:58:81:e2:46:58:74:d6:50:55:38:a6:
         d4:60:a7:6f:4b:7c:ef:45:95:a9:49:21:b5:cc:74:9b:4a:21:
         61:fb:c8:ec:e2:df:67:49:e5:89:8f:33:0c:ef:59:31:66:05:
         51:2b:24:7d:22:70:e7:74:78:19:13:d8:d8:d2:9f:84:73:7a:
         7b:de:65:99:da:b6:de:a9:38:c7:fa:86:5b:29:cc:03:2e:bb:
         de:0c:9d:00:8e:13:0b:45:05:ac:19:d4:d0:86:1e:8a:6b:1c:
         55:49:5b:63:c0:bb:31:ff:f3:60:87:c3:48:6f:09:54:7a:2c:
         28:7b:cf:73:ee:40:be:76:f4:c9:9a:95:57:9d:e0:40:ed:cf:
         3b:d3:50:cf:8f:95:74:89:f6:cb:ce:a7:12:43:9d:13:e6:c1:
         ec:ce:6c:b6:0c:b3:ba:82:75:16:93:b8:fa:37:4b:47:c7:ee:
         93:34:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:46 2026 by rpki-client