Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa
File:                     4bff34b6-57f0-332c-8398-4fb31b240aa0.roa (raw, json)
Hash identifier:          pvYavFc0Q1IP/hFezUHIxx4jftRlJx4HzJTVvVsYxk0=
Subject key identifier:   44:6A:43:95:29:46:A7:18:2E:52:C7:A8:C0:E8:B8:08:27:2D:9A:42
Certificate issuer:       /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
Certificate serial:       010D0C9F4328584E1B79922E82865D34B1FF1C00
Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     401339
IP address blocks:        23.188.72.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:92:2e:82:86:5d:34:b1:ff:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=2c14e0fc-a022-4208-91b2-b4a930d10fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:b5:5f:f1:77:eb:4c:86:c6:c9:a5:ad:b2:
                    47:e0:05:cc:1f:c5:2f:c9:bf:f6:7a:c0:61:f1:30:
                    bf:44:69:f3:ff:a7:42:8c:71:ab:01:1f:4c:7f:57:
                    45:e8:8f:b8:e9:b1:08:90:e8:76:5f:55:b9:27:a1:
                    4c:0f:02:59:47:6d:31:04:84:60:c2:19:4e:f1:40:
                    02:a6:7e:54:8b:64:9a:c8:92:f1:ea:5d:64:14:6a:
                    6d:83:d5:1b:00:43:71:60:3a:e7:1e:dc:c7:2d:6b:
                    f6:e6:fa:82:46:7d:45:ef:be:7a:82:3a:63:65:c7:
                    16:d8:63:e7:2e:bf:4a:5d:bf:95:4a:55:e2:91:9b:
                    67:ea:4a:d1:86:ef:4c:8b:b3:8f:d9:c0:f6:92:b0:
                    7b:a4:76:43:31:36:70:92:74:fe:cd:ef:56:cf:da:
                    1a:9b:fc:24:a3:88:90:53:78:61:43:ef:18:11:ac:
                    19:c7:28:9a:61:b4:42:83:23:61:45:a1:fa:d0:13:
                    3a:49:2a:95:31:21:f3:20:ae:3d:85:5e:52:30:22:
                    ea:18:0d:38:95:f1:c6:d5:c5:95:0a:64:59:80:1c:
                    f0:1b:5f:74:85:b6:2f:23:7f:66:b7:83:82:83:5a:
                    c8:11:c4:dd:ad:bc:1a:fb:36:b7:e2:9d:a6:48:de:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6A:43:95:29:46:A7:18:2E:52:C7:A8:C0:E8:B8:08:27:2D:9A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl

            X509v3 Authority Key Identifier:
                keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:96:e6:7c:85:3f:4d:c8:35:8e:72:18:e7:92:c6:4d:42:2f:
         d1:0d:31:6c:15:77:d2:13:81:96:92:e0:c8:c5:20:7f:a1:60:
         93:87:78:c8:f4:66:2c:81:69:47:4c:2b:4a:17:cd:65:6b:c8:
         a9:90:00:57:81:3f:93:1d:67:0f:83:f2:f5:c4:b3:b7:5f:78:
         d6:6a:ba:98:45:af:27:86:9e:86:89:b1:77:e3:e0:1d:42:63:
         c9:f0:40:1c:64:5b:9c:76:a2:a6:1f:27:18:04:c3:cb:a2:2f:
         4c:3c:c8:78:55:c9:c0:ee:c3:16:c0:13:7c:0f:d3:bf:06:07:
         3a:31:1e:f2:ee:55:c9:29:1d:df:44:96:e7:7f:e1:cd:e2:e0:
         8a:2f:52:4d:8d:e1:de:0f:7f:45:2d:b3:fb:8b:20:19:57:23:
         81:09:8c:12:10:52:3e:c1:4d:73:28:36:32:ac:af:8d:3d:c7:
         3c:ce:71:2d:a9:0c:ea:cd:9f:80:a7:00:4a:de:06:72:c7:f7:
         9a:1b:43:83:9c:a2:f0:df:ab:65:62:ba:f7:29:4b:16:75:5e:
         86:1b:29:15:1f:22:9d:a4:f3:d8:0e:04:c7:04:dd:35:e8:56:
         33:cd:c5:64:08:5b:d0:42:71:26:ef:50:7b:d2:04:09:ae:12:
         b8:c4:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:24:43 2026 by rpki-client