Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa
File:                     41b495a1-3627-3667-af41-d2072d5d9889.roa (raw, json)
Hash identifier:          GDf6+rfpGbnFF3t4c6FjJH0liPQIgPDjB56ugIC9qwQ=
Subject key identifier:   26:96:BD:45:05:E2:89:E7:8E:C7:D8:D2:E6:79:5E:5E:1A:D3:5D:7A
Certificate issuer:       /CN=38ec4694-a70f-4329-b713-f4da59e49973
Certificate serial:       010D0C9F4328584D869544D642158C70953DB340
Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        23.247.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:44:d6:42:15:8c:70:95:3d:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=764d436c-c590-4076-852a-c1bad52fa56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:7f:d8:fa:af:37:6c:55:96:1f:9d:ac:9c:
                    d1:57:0b:6c:dd:d7:1b:d5:30:fd:4b:95:fa:c2:14:
                    f1:c5:e5:7d:50:29:17:ea:17:8b:f9:2b:6e:90:a7:
                    d6:a1:03:5a:74:55:49:a2:aa:62:e2:a1:98:d0:d0:
                    82:8c:1d:59:ed:64:57:92:c0:f8:03:bb:a8:8d:dc:
                    64:16:0c:13:f3:f7:39:44:73:e1:f2:b1:b5:cb:87:
                    ac:63:d7:52:3e:06:2e:6d:b0:4a:82:7c:02:49:c8:
                    65:17:b1:35:2e:94:ae:15:be:42:9b:65:1a:d6:35:
                    50:a0:3a:47:28:b9:d1:8a:38:14:34:1c:f4:4e:16:
                    41:29:d0:e1:f8:2f:ab:b1:1d:47:26:3e:2d:7e:de:
                    b1:94:24:bb:44:c3:79:f0:f9:93:c3:b1:a9:3d:43:
                    4b:b6:bf:58:c0:45:a2:4a:b9:1b:8f:b0:f7:7e:43:
                    aa:82:c4:f3:79:9e:07:da:40:49:e9:b0:28:2d:47:
                    26:31:f4:cb:01:e9:05:62:e3:a6:b9:95:45:c6:cf:
                    f9:56:cd:5b:f5:e6:73:45:fa:3e:16:de:79:b8:78:
                    5b:64:77:34:2b:a6:ce:33:e7:4b:f5:0b:15:57:32:
                    b4:9d:1d:be:3e:97:ae:93:a1:08:48:e9:88:78:5c:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:BD:45:05:E2:89:E7:8E:C7:D8:D2:E6:79:5E:5E:1A:D3:5D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl

            X509v3 Authority Key Identifier:
                keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e1:bc:12:04:4f:d2:ab:a9:e7:ba:5f:c7:3b:18:dc:a6:0e:
         28:cb:89:9e:de:8a:82:ba:a6:e3:08:89:24:e5:cd:2b:21:7f:
         86:b2:51:bd:32:55:ae:64:59:78:99:79:87:37:e0:de:0c:f2:
         78:94:ab:1d:7d:79:f9:73:f5:b0:c3:72:56:99:18:4e:c9:ce:
         b8:c1:7d:3e:10:96:c3:c6:d5:fa:62:eb:5f:35:29:50:28:4c:
         dc:e0:fe:d6:4e:8c:2b:c4:d0:23:9f:83:aa:54:37:e5:53:c4:
         ec:f3:39:dd:5e:8f:88:9c:96:f8:a0:40:17:ac:e2:50:88:30:
         76:aa:75:66:5b:3b:fe:fb:41:3c:03:f2:60:e3:a9:35:7c:25:
         aa:78:78:0f:27:01:26:f0:6c:7a:da:01:bf:9a:35:d0:92:13:
         4d:64:28:8f:29:4d:e3:c5:01:7b:a2:bf:5a:cf:3a:8b:64:21:
         a6:0a:47:e4:bf:a5:58:3d:c0:9b:b2:5b:a6:71:1c:89:cc:bf:
         48:1e:44:c4:0f:eb:b7:f2:01:f5:d8:e8:a0:59:72:68:46:ec:
         36:79:12:23:dd:da:7a:6f:a9:54:d4:4e:8c:47:31:e7:d0:64:
         8b:15:dc:4c:54:48:65:ad:02:d3:e1:fd:95:02:71:a4:70:8d:
         9a:9b:de:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:50 2026 by rpki-client