Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa
File:                     4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa (raw, json)
Hash identifier:          xFhBUByU2sJchgyABMBQvVMaaFo74BudU6y88GPSIsU=
Subject key identifier:   24:60:76:82:D0:58:3B:97:95:28:25:0B:96:3C:B6:20:76:96:8D:27
Certificate issuer:       /CN=1d7e3237-b117-456b-b736-2b3c2300bcfe
Certificate serial:       010D0C9F4328584DFA7076E3B42DB52958D6D880
Authority key identifier: 15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     395033
IP address blocks:        23.129.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:76:e3:b4:2d:b5:29:58:d6:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7e3237-b117-456b-b736-2b3c2300bcfe
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=63df967b-e51d-4924-b042-dd13f7699552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:87:57:8a:79:c5:c8:cd:02:76:a3:38:7d:
                    40:ef:f1:cd:21:d6:9f:4c:1e:bb:fe:6c:23:36:d6:
                    d4:c8:8f:0c:2d:f4:96:5e:71:bf:71:01:a3:d5:93:
                    fe:6e:81:94:56:b5:ad:c0:7c:25:72:dc:f0:7e:88:
                    e9:e9:11:e0:ff:30:62:b4:20:c9:2e:61:cd:30:44:
                    b2:a0:e7:0d:5c:01:56:1f:94:32:c4:0e:17:26:fa:
                    da:71:7d:62:e8:01:94:e2:db:8b:0b:e1:0f:7d:9a:
                    ad:b2:ab:de:f6:15:56:6e:57:a3:63:69:b6:a9:47:
                    01:13:1a:ec:42:dc:84:89:70:b0:05:ef:fb:25:b5:
                    74:ee:de:47:ec:ba:fe:3c:85:55:8b:16:b0:cd:33:
                    cf:21:9a:60:97:fa:e1:6b:17:e5:17:20:06:79:4e:
                    2f:cb:eb:5c:fd:43:86:69:80:ea:67:aa:f8:9e:d6:
                    e7:7c:ba:f0:18:57:51:52:ba:6c:c7:4c:14:9c:21:
                    8c:d7:5f:a0:88:66:c2:0c:0c:65:1b:64:9a:62:a5:
                    d1:ea:36:ac:66:86:01:eb:38:f0:26:21:a6:c1:00:
                    09:1a:f1:c8:9f:fe:08:ce:e6:18:52:3f:cd:1d:27:
                    3d:c5:19:00:d7:dc:41:e5:58:46:1f:62:35:21:03:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:60:76:82:D0:58:3B:97:95:28:25:0B:96:3C:B6:20:76:96:8D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl

            X509v3 Authority Key Identifier:
                keyid:15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:a7:ec:7a:72:01:2b:26:1a:7f:b3:d0:aa:67:b2:f8:00:
         24:7b:90:3f:28:2a:92:ab:1a:3e:b2:6c:81:b8:60:ef:9b:34:
         65:e1:13:6d:a0:f3:00:75:fe:7f:a7:a8:50:3c:3f:be:eb:40:
         d4:cd:fc:9f:39:df:63:2f:4a:db:9a:80:96:b4:0d:09:f0:1c:
         8b:3f:e2:03:f3:5b:63:75:c9:bd:6a:94:40:bb:b1:d6:37:78:
         c0:eb:22:87:f5:5c:56:bc:d9:e2:1d:33:eb:c3:f1:96:cd:c9:
         fc:60:80:1e:ac:29:7a:5a:65:8e:9c:7e:57:6e:b3:59:c3:9f:
         82:82:da:dc:c3:73:11:5d:a8:5a:f0:b1:f2:0c:a7:2b:65:f6:
         9a:2d:a6:11:a1:6f:17:f2:01:f6:55:c6:70:16:6a:f7:74:83:
         c8:05:b4:d4:82:84:70:59:71:ca:e5:0a:58:25:53:e5:16:d9:
         05:cb:d7:de:1f:8d:04:c2:56:e7:5b:78:69:aa:c8:db:7d:ad:
         73:9f:80:43:d2:59:c3:c3:a9:f9:c7:a3:de:a5:3a:59:a8:da:
         e6:4c:09:1c:0e:8a:e3:c0:07:c1:ff:0a:af:77:12:07:59:96:
         87:d4:47:50:3b:73:cb:bb:5c:f2:46:fd:be:54:1c:d1:da:af:
         e6:25:1b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:59 2026 by rpki-client