Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/079690ae-628c-3cd0-86bc-5427c84e212b.roa
File:                     079690ae-628c-3cd0-86bc-5427c84e212b.roa (raw, json)
Hash identifier:          tcMYYlkxss0CetHlbrlqEmI8cjZOaJACU10DsbOCKjI=
Subject key identifier:   02:78:DE:3E:28:06:EC:8F:E6:C2:04:28:41:26:7E:F0:51:5E:7C:EC
Certificate issuer:       /CN=bbeedb59-5c05-47b5-b92b-2a530df4446a
Certificate serial:       010D0C9F4328584D2A74FA299DAD008550582A00
Authority key identifier: F4:D7:CC:B0:43:8E:09:F0:E1:6E:08:74:3E:40:DB:CB:75:F9:6A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/079690ae-628c-3cd0-86bc-5427c84e212b.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     152918
IP address blocks:        23.140.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/bbeedb59-5c05-47b5-b92b-2a530df4446a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/bbeedb59-5c05-47b5-b92b-2a530df4446a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fa:29:9d:ad:00:85:50:58:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbeedb59-5c05-47b5-b92b-2a530df4446a
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=9e3b557d-7769-4ef3-ab1d-64e62611add8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:12:dc:b3:16:3f:e0:a9:76:19:18:47:be:
                    f3:78:31:3c:60:60:47:89:d0:4e:e0:f1:9b:59:7a:
                    62:96:44:61:53:08:3d:05:9b:22:30:12:7c:97:5f:
                    d8:1b:80:9c:6f:4f:e1:48:9f:58:cf:57:58:f4:01:
                    d6:a1:7c:a0:5e:2a:a8:2f:d4:b5:8e:cb:e4:70:cf:
                    ae:e9:91:4b:0f:a3:6e:13:13:6d:fa:70:c0:86:54:
                    56:ba:8a:a6:e7:7a:af:ad:55:fe:30:1d:94:d8:71:
                    9c:0a:13:a3:7d:50:35:09:11:b7:e5:e1:6d:d1:82:
                    58:89:d5:7e:bb:e8:07:00:8b:ba:57:0c:0f:04:53:
                    79:be:e5:7a:3b:94:e5:69:c8:f1:45:19:87:3b:a7:
                    df:6d:43:54:f9:76:d3:de:e2:4b:ce:81:8c:17:68:
                    26:21:11:dd:53:f6:45:25:24:b4:42:6f:36:96:25:
                    9d:10:3d:5f:83:c6:74:98:82:f9:a4:4c:75:1d:75:
                    44:38:ca:66:08:54:90:a5:e1:30:3c:ae:a9:c8:9e:
                    97:52:18:41:1e:20:8d:ad:7a:3d:94:3d:f7:3f:ba:
                    2f:1f:54:5b:48:83:71:a9:dd:6e:d6:fc:be:0f:57:
                    36:41:e6:91:c1:d1:03:a0:7e:b1:4e:03:59:e0:66:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:78:DE:3E:28:06:EC:8F:E6:C2:04:28:41:26:7E:F0:51:5E:7C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/079690ae-628c-3cd0-86bc-5427c84e212b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a/bbeedb59-5c05-47b5-b92b-2a530df4446a.crl

            X509v3 Authority Key Identifier:
                keyid:F4:D7:CC:B0:43:8E:09:F0:E1:6E:08:74:3E:40:DB:CB:75:F9:6A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbeedb59-5c05-47b5-b92b-2a530df4446a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:fa:9b:40:1d:ad:ab:ae:6f:7a:1b:1c:43:43:02:f1:c1:
         c1:65:28:ca:8a:b1:74:01:00:1d:41:24:81:14:df:ee:af:7f:
         9c:78:f3:a3:d1:ec:7e:48:1d:16:94:0a:91:e4:97:6c:53:02:
         aa:92:b9:18:37:3e:42:e1:70:30:bc:fa:48:38:67:80:0f:c7:
         8b:04:f2:19:ee:88:f6:6a:c4:be:17:fb:4e:9f:82:f0:74:c2:
         da:eb:f8:ff:68:86:13:cc:48:a1:d7:04:3b:a1:15:62:7f:e7:
         5e:66:b1:4e:f3:e8:b2:c3:0c:89:31:63:04:b7:65:70:0d:66:
         bf:d8:df:76:3c:ad:2b:65:91:13:27:9e:17:15:46:08:16:da:
         ea:67:0b:59:ca:5b:b0:25:70:42:b3:c3:1b:ba:aa:a5:7f:f8:
         db:22:3c:2f:7b:52:c5:8c:6d:38:a4:8e:ba:74:72:87:82:31:
         95:12:9c:03:10:68:73:a9:cd:c2:ae:11:9b:f4:5c:d3:5b:79:
         06:e5:1c:94:e5:c5:c2:dc:9c:89:c9:69:86:f3:c1:ba:a2:c6:
         c7:ce:f5:91:a5:2c:44:4b:3b:c7:1c:24:d9:f9:b8:06:19:c7:
         3c:33:51:0c:d3:e7:02:f3:d9:7a:e9:4d:7e:9b:4a:5b:01:b2:
         78:6a:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:09 2026 by rpki-client