Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa
File:                     1c469c0a-d4ca-346c-acf1-814ba866a653.roa (raw, json)
Hash identifier:          fsljX05goQM4HVDkZKmcCFX4c7w6zx1mrVFC0PXjRBg=
Subject key identifier:   70:3E:5C:BB:69:9D:9F:E9:35:43:01:BB:99:17:77:A6:F0:D3:20:10
Certificate issuer:       /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Certificate serial:       010D0C9F4328584DF4DB5E295E6C9DAA4B045620
Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     209242
IP address blocks:        23.167.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5e:29:5e:6c:9d:aa:4b:04:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=4b2b43a2-2427-4f8b-abef-0b18123e4b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:79:2c:7c:2d:07:69:6e:d6:41:a2:97:06:d3:
                    5f:5f:f8:7b:72:b6:22:4f:d7:92:dd:62:49:b9:2f:
                    a3:9d:25:ad:91:43:92:cd:18:d5:2d:4d:8a:0e:a9:
                    52:4e:f4:e4:31:dc:91:4b:a6:23:6f:1c:53:df:3a:
                    07:a1:05:45:8a:99:f0:6e:60:db:08:1e:00:0a:e8:
                    94:ba:b6:6f:c5:b3:6a:67:9e:3c:f7:b0:2c:ba:5f:
                    5f:44:15:31:19:4a:63:5d:cd:26:09:b5:0b:15:10:
                    66:a4:80:ad:b8:ea:f1:46:99:58:dc:6c:16:75:49:
                    cb:98:20:7e:1e:d6:c6:cd:0a:bf:32:3b:ef:bf:c9:
                    09:35:0a:54:22:ff:e1:ca:c3:a0:21:69:9b:ca:26:
                    79:f4:4f:66:6a:30:a8:a8:85:e6:29:14:74:a6:22:
                    17:50:17:22:f8:a0:fb:60:86:d4:67:c9:bd:cf:a2:
                    10:10:4e:8c:d4:02:58:68:e5:91:28:e4:ca:f0:dd:
                    c2:ca:45:94:e6:08:65:93:3c:6d:fe:1f:33:95:a8:
                    4f:78:aa:52:da:f7:05:72:39:a3:a8:36:56:92:90:
                    1d:56:52:d2:bf:23:85:b0:ef:87:d9:d0:35:1b:1b:
                    ea:78:85:65:72:8f:b6:94:31:f8:db:cf:b0:9b:43:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3E:5C:BB:69:9D:9F:E9:35:43:01:BB:99:17:77:A6:F0:D3:20:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl

            X509v3 Authority Key Identifier:
                keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:31:e6:22:bc:ac:04:f1:b9:c0:06:dd:18:50:bf:e1:5b:1a:
         13:6e:c9:a8:22:76:b6:12:a3:9b:27:50:51:89:13:82:cb:96:
         8b:bb:46:d1:ed:29:57:4f:fa:c9:7b:8e:b0:e4:95:e2:89:7e:
         d2:c2:60:06:fc:3b:1a:23:06:5b:ff:5a:da:1a:8b:33:0d:4e:
         9d:0d:c7:2a:d8:3d:99:9e:16:29:6d:43:60:8f:9f:8c:85:9e:
         dc:9f:42:da:1f:5f:df:ee:f2:d1:87:9c:20:c5:1a:77:ae:47:
         72:35:f9:b1:a4:81:40:97:56:a0:2d:9b:3e:66:22:95:8f:07:
         b8:f1:54:54:ba:c9:21:47:68:11:d9:07:97:b4:50:ef:17:6c:
         4c:e5:8b:c7:0b:aa:60:fb:f0:2c:97:6e:2e:39:a6:5d:ca:44:
         54:c7:50:b0:4e:ce:68:f1:1e:92:07:63:2c:b2:92:cb:92:e0:
         db:96:19:4a:23:fd:46:03:84:d8:2d:36:09:99:31:77:43:06:
         9e:7b:89:6d:c1:de:e1:e1:9c:d3:da:9f:85:0c:cb:31:1a:d6:
         57:5f:7e:a0:f5:f5:7f:bf:60:2a:33:4f:f5:1c:bc:fe:72:14:
         1f:5d:03:a8:a8:44:0e:d8:fc:1b:fa:d0:d2:d4:d0:22:36:f9:
         7c:d3:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:21:09 2026 by rpki-client