Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada/d5236653-45af-381e-9d22-6815b2278d44.roa
File:                     d5236653-45af-381e-9d22-6815b2278d44.roa (raw, json)
Hash identifier:          V5kFT7K93ewYrZydW5z58GlsoRcZU5u1jRAZgP01SWQ=
Subject key identifier:   B5:47:70:2A:05:6D:97:51:28:31:48:1E:EE:5E:FF:2C:CA:E0:52:DD
Certificate issuer:       /CN=3356e8e9-4204-4c1a-87d0-ab5304ad7ada
Certificate serial:       010D0C9F4328584E27F23C115000D36DB142A200
Authority key identifier: 63:7F:1A:92:ED:40:1F:4D:43:51:A7:61:5D:AB:CC:C9:DD:E3:C7:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada/d5236653-45af-381e-9d22-6815b2278d44.roa
Signing time:             Sat 13 Jun 2026 08:13:07 +0000
ROA not before:           Sat 13 Jun 2026 08:13:07 +0000
ROA not after:            Fri 11 Sep 2026 08:13:07 +0000
asID:                     1014
IP address blocks:        23.148.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada/3356e8e9-4204-4c1a-87d0-ab5304ad7ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada/3356e8e9-4204-4c1a-87d0-ab5304ad7ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:27:f2:3c:11:50:00:d3:6d:b1:42:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3356e8e9-4204-4c1a-87d0-ab5304ad7ada
        Validity
            Not Before: Jun 13 08:13:07 2026 GMT
            Not After : Sep 11 08:13:07 2026 GMT
        Subject: CN=fcf52548-d16c-409a-b7e3-817d4002c631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:c2:d5:c1:9f:8f:74:0d:89:ae:fa:07:50:
                    27:26:74:e5:10:0d:4d:5c:0f:01:67:df:d7:c0:32:
                    6a:71:52:96:3c:8f:5d:24:89:6d:f4:42:d1:d3:1d:
                    73:9d:3b:5c:f5:f1:fd:9d:f4:3e:17:65:3e:73:f2:
                    40:01:0d:0e:a6:8f:cd:aa:e5:8f:41:33:4e:f4:ef:
                    2a:4a:69:b1:a0:e6:0b:24:5e:6b:f4:25:ec:a9:3e:
                    fc:43:04:81:c6:b7:cf:b5:c0:54:18:af:af:4c:2a:
                    48:88:6d:9b:85:f4:66:2f:63:c0:2a:7b:fd:5a:ee:
                    bf:ba:10:36:1a:0b:cb:ab:46:a4:32:64:46:ff:b4:
                    60:b6:3c:f6:c4:30:03:e0:1d:87:87:34:b9:c1:00:
                    af:76:e6:39:a8:d9:3a:db:7f:01:04:16:8e:8a:a3:
                    55:14:f2:90:0d:c0:05:37:49:ec:00:0e:f3:c1:9a:
                    30:19:72:b9:eb:31:58:fc:f0:5f:b1:11:ba:b3:ed:
                    e1:68:58:7c:58:f3:7a:14:e2:a3:3f:bd:30:a5:2c:
                    2d:87:c1:10:d5:32:5b:dd:54:d6:dd:e9:e4:2e:95:
                    7e:d7:db:3a:42:96:36:53:89:51:81:7c:5c:c4:87:
                    fe:6e:d6:d9:16:07:ea:29:07:88:54:52:ec:a4:8e:
                    58:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:47:70:2A:05:6D:97:51:28:31:48:1E:EE:5E:FF:2C:CA:E0:52:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada/d5236653-45af-381e-9d22-6815b2278d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada/3356e8e9-4204-4c1a-87d0-ab5304ad7ada.crl

            X509v3 Authority Key Identifier:
                keyid:63:7F:1A:92:ED:40:1F:4D:43:51:A7:61:5D:AB:CC:C9:DD:E3:C7:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3356e8e9-4204-4c1a-87d0-ab5304ad7ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:28:15:9f:ce:63:bf:00:2a:ff:40:6c:b0:57:4d:08:54:3c:
         6f:9c:11:23:2a:23:b9:63:9f:b3:da:dc:35:31:20:8e:69:68:
         05:f1:6d:95:f4:b7:f5:05:d8:02:69:0b:ac:75:42:fe:4f:cd:
         32:e3:2f:00:c5:54:b1:ca:ad:7a:b1:63:71:24:6f:3a:d1:1b:
         c7:be:3d:89:0c:d7:4d:c3:31:ab:a1:04:50:5d:64:c6:97:e1:
         8f:b7:98:cc:09:45:e8:51:07:c2:df:50:b1:c7:68:24:03:34:
         23:b7:b4:7f:34:11:39:a8:e9:17:ef:e3:93:dc:0f:6d:cb:79:
         ce:b1:05:3c:97:28:24:b4:31:9f:b8:c2:ab:05:cb:d6:2a:ac:
         87:d7:f0:b4:5b:7a:d4:e5:35:0a:e5:69:19:26:68:7e:9a:50:
         61:c8:ff:3e:8a:80:85:0a:16:c2:12:3d:13:50:c5:d2:b6:79:
         6d:f4:c6:ec:09:b9:f7:63:e0:ae:5b:0b:c7:15:a8:0d:3c:e4:
         e5:ce:91:33:e3:7e:df:d4:17:5d:22:00:d9:d0:c0:f6:ff:e7:
         82:5b:da:a5:45:f7:43:c5:21:89:f5:9f:a4:81:db:40:dd:c6:
         99:a9:56:25:7a:e0:c1:92:2e:f3:29:8b:ba:7d:42:9b:24:51:
         74:ed:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:38:34 2026 by rpki-client