Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa
File:                     72d14a3e-4507-384c-81f7-c208190816cf.roa (raw, json)
Hash identifier:          JtlptybuYz2pdmqZdna5K7CSEGNPJtT6WPvRSZuRJVU=
Subject key identifier:   7B:2C:F6:84:AE:B2:5D:54:21:27:5C:6B:07:C7:64:03:CB:A2:C7:5F
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584D7CCFD9B0364CF9F48D521980
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     63023
IP address blocks:        23.174.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d9:b0:36:4c:f9:f4:8d:52:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=4d063b5c-8f9d-4556-b18f-1581c240ad62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:d3:45:26:80:9d:e9:7a:ee:39:50:6b:5c:
                    91:7a:23:f2:9a:a8:a9:88:b5:9f:97:bc:d0:6c:07:
                    b2:a8:a3:9f:8f:8d:84:5f:a3:1c:00:a7:41:53:2f:
                    96:a8:d4:c8:1e:9b:48:dd:46:9a:c1:c2:30:f8:6b:
                    93:60:93:7b:d4:f3:74:dd:9f:4d:1f:0a:96:c8:9a:
                    79:8a:e3:f5:d5:7e:c5:33:f7:a7:ea:96:a2:09:0c:
                    c3:6a:c6:2d:af:bd:9c:cc:d8:2d:f3:6f:7c:d7:86:
                    00:39:84:4f:9d:32:7d:57:12:b4:5a:b6:f0:24:8b:
                    b9:4c:e0:aa:f5:bb:ef:64:ae:d7:87:b7:e1:87:82:
                    12:af:48:e4:34:11:0d:c3:ec:02:7b:5a:02:90:0c:
                    b6:f0:a1:76:90:54:e2:2b:9f:69:49:fa:b4:25:83:
                    d7:9b:db:f6:19:72:e3:01:3d:8b:ba:7b:40:18:37:
                    c2:8c:dd:ad:4d:37:85:d4:b2:13:73:92:78:34:1a:
                    2e:1f:b8:96:25:f0:44:8b:4a:e5:29:2b:ac:ef:da:
                    79:b0:d2:b4:d2:12:f5:a2:f0:7a:fc:b7:e8:1d:32:
                    2c:c8:95:ae:eb:d9:86:7f:bd:83:60:3f:ba:ba:96:
                    ea:42:99:6f:63:c6:bc:7f:52:16:81:4c:01:8b:b3:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2C:F6:84:AE:B2:5D:54:21:27:5C:6B:07:C7:64:03:CB:A2:C7:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:2c:73:88:e2:b0:1c:07:f0:d7:fc:16:91:94:b7:31:8a:1f:
         6c:dc:0d:f6:31:c8:08:c5:36:60:b0:75:34:be:a4:8c:c5:d6:
         29:3c:56:2f:9c:55:af:f4:f9:00:a4:dc:06:28:ce:c9:9f:27:
         39:de:fb:9b:22:25:ed:f5:0f:7b:a8:8e:b4:62:ce:2a:7e:07:
         bc:87:ea:45:4f:a2:6f:f1:a7:cb:38:68:77:15:6e:28:c3:8f:
         09:7f:91:e7:90:0d:c7:8c:56:d5:a9:58:01:13:d6:0b:8e:08:
         2c:e8:dd:35:e7:34:b4:ce:f9:c1:b3:49:3b:9d:a3:02:32:18:
         6e:61:8b:04:be:06:8a:25:bb:99:27:90:92:37:56:84:bd:f8:
         6a:4d:ea:d6:01:60:d8:f0:72:e5:86:64:bb:6b:f2:7f:f9:65:
         5b:bf:c8:95:fd:98:de:30:73:4f:f7:b9:45:12:3f:62:c5:c9:
         78:8d:30:b9:6e:20:79:6e:97:7d:81:40:84:64:e9:66:cf:16:
         86:28:10:2d:d3:d1:3d:36:39:c9:60:8e:d5:d7:96:18:dc:9a:
         49:cf:8a:a7:3a:b3:07:84:41:d2:1d:70:e8:d7:15:31:85:31:
         3d:53:69:a5:7f:e0:8b:d7:72:f0:b3:d5:fa:34:17:a9:a0:a1:
         37:30:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:26 2026 by rpki-client