Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14315416-9323-3bef-8b71-42e8e8892b61.roa
File:                     14315416-9323-3bef-8b71-42e8e8892b61.roa (raw, json)
Hash identifier:          dwEe4+pSOjlKaQ26fzPn0PoZQtFqEkjHo/HbhWYBhsY=
Subject key identifier:   B9:89:32:4D:06:9A:E2:50:20:2A:B0:3F:CD:42:F6:5C:C9:7A:BF:BB
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F4328584E2109629C563B574409544900
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14315416-9323-3bef-8b71-42e8e8892b61.roa
Signing time:             Wed 10 Jun 2026 20:49:06 +0000
ROA not before:           Wed 10 Jun 2026 20:49:06 +0000
ROA not after:            Tue 08 Sep 2026 20:49:06 +0000
asID:                     39335
IP address blocks:        23.142.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:09:62:9c:56:3b:57:44:09:54:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: Jun 10 20:49:06 2026 GMT
            Not After : Sep  8 20:49:06 2026 GMT
        Subject: CN=179d2491-c745-4314-80c3-5fd447e8b5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:cd:aa:a1:7f:b4:56:28:9e:4d:e3:f0:29:
                    c2:38:95:6b:d4:98:8b:86:5c:b2:1e:dc:d1:01:a9:
                    0c:79:da:ef:04:19:ca:86:77:46:fd:92:27:a9:44:
                    bd:ec:35:21:79:72:9f:8b:22:95:29:fb:77:b2:59:
                    3e:43:1a:1f:36:73:4b:56:b9:0c:5b:1d:eb:c1:b5:
                    e9:29:51:d7:ec:2a:b1:c7:f5:34:d4:e8:ef:ae:16:
                    58:0b:08:af:ec:78:ed:62:df:be:b2:34:0b:97:8f:
                    4f:7b:f8:57:19:d8:82:39:bd:3f:c9:09:b3:f6:14:
                    80:fb:a4:26:51:d7:9b:a9:39:47:28:5a:86:c7:bc:
                    79:f8:26:a2:23:ae:fc:13:68:34:3c:1e:7c:a3:d5:
                    7a:35:37:1c:46:86:54:11:63:d3:2d:2c:28:f7:13:
                    8f:2b:9b:71:ba:4d:0e:e3:a0:ec:55:af:e3:b4:92:
                    4d:c5:71:8a:93:1c:d6:c8:bd:c1:ef:72:d5:bb:8b:
                    2b:9a:da:5e:45:19:3f:31:36:b7:96:9b:9a:a2:6e:
                    8f:98:c1:50:6c:7e:9a:07:af:7b:1e:9f:07:82:32:
                    f1:46:3e:27:95:66:88:5e:07:d4:d7:5c:74:dc:84:
                    4a:28:70:74:dd:3a:4b:b1:fb:0d:8d:d9:c0:c5:a5:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:89:32:4D:06:9A:E2:50:20:2A:B0:3F:CD:42:F6:5C:C9:7A:BF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14315416-9323-3bef-8b71-42e8e8892b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c8:a4:0a:51:d0:df:a6:c9:f0:06:87:7f:d0:f9:a6:e2:e5:
         3d:ba:45:70:cf:35:f5:66:4e:ac:2e:18:79:0c:26:da:96:25:
         26:95:4a:86:7a:10:d4:33:7f:d9:10:f8:c9:75:29:23:6f:10:
         e3:6d:63:7f:56:69:52:da:35:d2:e4:24:8a:e6:84:29:e4:f0:
         1c:a1:47:56:2f:45:06:5a:55:f0:d3:a4:bb:10:eb:28:74:f2:
         4c:50:3e:fb:08:c8:77:52:e7:6a:aa:21:bf:c1:08:2b:2d:f1:
         92:ae:00:2d:0b:2d:69:50:2d:cf:b0:9b:ed:79:a0:ad:fc:05:
         72:fb:c5:99:59:d0:81:4a:61:f0:11:30:c7:01:8d:8d:44:a2:
         0c:d9:fd:7e:8f:f7:bb:bc:e0:62:29:cc:5a:94:34:1e:37:83:
         c2:d9:38:75:61:c4:dd:2c:1b:ea:d2:53:36:1e:71:e5:86:ba:
         13:9c:8c:e3:9f:c9:6d:6e:83:46:6c:23:86:52:87:d8:78:9c:
         03:a3:0a:c4:a0:0b:81:8f:ff:43:13:c2:45:db:40:47:12:c2:
         1a:1c:f8:de:57:21:26:15:74:ce:0b:84:f7:89:1b:63:98:b1:
         8c:c9:e4:d7:ac:ff:cc:84:32:7b:53:3f:ac:9f:ef:91:db:0b:
         54:b4:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:44:05 2026 by rpki-client