Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa
File:                     840bdcf2-a766-3d79-86c0-da70ee77a15e.roa (raw, json)
Hash identifier:          j0uzvLR1+H4u/dZjA55t6Qv2NZMWITOb1KPpxYFbIvM=
Subject key identifier:   08:DD:4F:22:2F:15:D8:30:E2:18:AE:14:8C:19:ED:AB:97:DD:FF:BE
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584DE2B5E827D322F3851A5CF580
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     14618
IP address blocks:        23.173.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e8:27:d3:22:f3:85:1a:5c:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=69125d30-0634-4d1c-81d5-a84be3544853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:e0:d6:05:71:70:74:b2:cd:cd:a0:89:74:
                    80:73:58:50:fb:40:ad:88:85:7f:19:1d:b8:b4:27:
                    48:ff:2c:4f:71:2a:f5:6c:ab:4b:1f:68:4e:9e:25:
                    8a:f9:b9:fb:4a:1e:07:26:9a:71:aa:d2:6a:6b:6b:
                    de:b6:8e:a2:87:4f:1a:d1:af:7c:6e:24:7e:7f:c4:
                    6c:3b:f3:16:49:c0:75:33:72:37:d1:06:99:4d:29:
                    e6:9e:3c:e7:c4:c3:e1:76:3a:2b:05:37:27:b3:96:
                    bc:df:95:b2:d6:30:d5:22:b8:50:ab:d4:e7:41:5f:
                    d1:6d:23:e0:94:3e:f3:dc:59:ab:05:e8:54:a4:76:
                    c0:9f:b2:81:c2:cd:f4:47:98:16:28:a8:06:a1:a3:
                    f7:5a:2d:28:52:63:ec:f2:0b:44:d1:b5:84:2d:38:
                    19:a7:55:c2:74:9f:19:52:b2:6c:50:21:65:e1:3c:
                    c7:47:70:15:21:0b:38:26:c6:61:ce:6a:49:8e:95:
                    b9:af:2b:b1:0f:b5:1c:f9:35:bc:7c:ee:45:d6:8f:
                    e8:b8:bd:9a:3c:30:b2:b0:5f:61:21:24:cd:bd:fd:
                    36:85:39:38:7d:9f:d7:fd:d8:37:95:f5:39:39:d2:
                    bc:09:95:0e:5d:de:41:72:9b:2c:d2:7c:04:31:8d:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DD:4F:22:2F:15:D8:30:E2:18:AE:14:8C:19:ED:AB:97:DD:FF:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:69:16:2b:c9:70:6a:f8:47:9a:ea:dd:a0:a0:35:27:a5:86:
         0d:57:37:89:4d:b2:42:a8:fc:e1:8b:21:3d:7f:09:55:b9:7a:
         b4:76:c2:e7:85:6d:97:59:b3:e2:99:f9:91:77:82:8c:3d:16:
         2d:07:60:97:b1:a6:59:c5:4a:82:93:98:06:14:0b:e5:02:15:
         78:29:a5:7d:41:ac:07:95:9f:d6:44:51:81:a0:e8:b5:31:3b:
         06:42:3d:3d:39:26:19:c8:4b:61:f9:66:ca:58:6a:dd:44:bf:
         96:7e:57:de:35:3d:0e:be:0f:8f:c3:e1:ab:0b:16:84:a4:8d:
         c1:81:0e:17:00:ee:0f:2b:6f:ac:af:99:aa:bb:d9:66:48:6a:
         f7:bf:2c:c6:35:33:e7:ed:eb:01:64:37:48:25:ee:9a:01:21:
         78:a6:23:39:61:4a:fa:98:a9:11:77:d8:9e:77:6c:90:7d:30:
         e3:f0:a8:b6:fd:a2:3f:5a:85:d9:8e:f1:b4:00:d6:ea:b7:a4:
         8c:21:a8:47:3f:33:63:6a:a6:cc:26:b5:e0:26:78:60:a6:f0:
         92:d5:a1:03:3a:e9:d2:92:f4:8a:50:83:8d:ac:f1:b1:7d:30:
         b2:5b:00:49:fa:a4:a1:8e:5b:d9:ee:57:be:97:1f:3d:5a:9b:
         a7:83:03:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:53 2026 by rpki-client