Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa
File:                     7ddfb354-b597-37d0-bfdb-628be097f8f5.roa (raw, json)
Hash identifier:          4SR+1WE4uX6rcLZmLYcyFFTCZR1okKrNNFkvCubF7nM=
Subject key identifier:   C5:75:1E:43:52:7A:14:BE:DD:BD:FA:4D:A8:4D:43:63:68:B8:E1:87
Certificate issuer:       /CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
Certificate serial:       010D0C9F4328584D7A0525209C9BF53270A15920
Authority key identifier: 05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     400148
IP address blocks:        23.190.16.0/24 maxlen: 24
                          2602:fc0f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:25:20:9c:9b:f5:32:70:a1:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=d0cc9fdf-cd22-41c7-b143-81a3a188685e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:47:d1:ee:5f:7b:71:5b:0e:25:b3:70:28:
                    41:94:de:7a:4e:e6:65:46:6e:f7:7d:4b:fb:af:14:
                    a1:e3:11:0f:85:56:a6:b9:d4:89:79:d8:55:0c:93:
                    f8:b5:f1:fd:c9:f1:9d:60:8e:b2:ad:be:7d:7b:9e:
                    c2:90:7b:c1:31:9c:8d:f0:64:8f:25:38:83:a6:49:
                    c1:2f:64:f4:48:f4:68:db:72:85:f5:47:ac:3d:6e:
                    aa:b7:8c:ff:c4:57:bc:05:0b:1f:26:a0:79:13:ee:
                    72:17:9f:b0:a6:28:91:77:9a:87:62:69:7e:73:db:
                    4f:31:a1:47:3b:df:6b:91:fc:06:4b:24:43:ba:95:
                    dc:b8:54:97:dd:e9:f0:fd:8c:30:b6:c9:a4:df:36:
                    56:b8:5c:e1:f6:26:6d:9b:4e:eb:28:b5:75:87:35:
                    7d:b1:4d:e8:60:aa:a1:9b:ba:79:55:71:41:13:6e:
                    7a:12:aa:15:46:db:d4:4f:1a:ac:c1:a7:c6:3d:f0:
                    d8:ef:9e:54:4c:e3:0e:8c:a6:15:a6:97:67:96:d5:
                    1b:db:db:46:b3:c9:2a:63:d7:a6:4c:d5:48:b9:4c:
                    e2:0b:a7:d8:15:85:49:8b:02:89:16:fb:c9:56:b7:
                    ab:3d:5f:1c:e6:cc:08:c6:c8:b8:f0:f7:2c:21:7f:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:75:1E:43:52:7A:14:BE:DD:BD:FA:4D:A8:4D:43:63:68:B8:E1:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.16.0/24
                IPv6:
                  2602:fc0f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:01:37:c2:be:4e:a4:45:67:2a:aa:3e:9f:c2:00:fa:b5:01:
         06:17:38:c9:f7:2c:b9:3c:c3:6e:54:46:07:4e:70:75:38:ca:
         89:ed:a6:95:ff:72:63:1f:e4:b7:f6:cc:29:08:b6:76:98:59:
         b6:05:70:2d:51:bb:4c:43:f4:ce:b2:83:ea:a8:a2:14:b4:b8:
         97:5a:c7:bb:86:76:0a:3a:82:58:5d:9b:80:03:ad:78:33:ea:
         77:90:01:0a:a0:36:05:2e:68:34:02:bc:22:d5:1f:da:50:87:
         4f:0b:8d:6a:1a:72:9c:66:84:f0:d8:0d:24:14:06:7a:59:e1:
         80:8b:16:70:78:d6:2a:75:ac:43:1d:4d:be:9d:bd:72:85:d7:
         fc:5b:a5:72:1b:46:ed:f8:f2:7c:28:b5:e4:66:42:68:a7:12:
         0f:a6:2b:d6:eb:23:16:59:15:43:d2:18:58:5d:1a:53:ad:90:
         4e:4f:5e:24:ae:cd:0f:66:7c:6a:91:30:d0:12:81:fd:71:0f:
         24:91:fa:61:3e:06:60:b8:ac:e8:28:19:92:9e:7a:95:f8:ba:
         9b:42:78:7b:29:13:ca:77:79:b1:01:94:f1:c0:ee:fc:c5:82:
         68:90:8f:c1:c1:9d:78:3b:6a:c2:fb:36:91:99:1c:3a:08:6e:
         56:97:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:01:50 2026 by rpki-client