Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa
File:                     ec69835c-0929-34da-8360-1c7309443e7a.roa (raw, json)
Hash identifier:          09usxY/mD2KQRGb9S89hsP8B1ZpFnz4wr6s9pJpLGbA=
Subject key identifier:   D2:B9:D4:04:8B:0B:99:C6:51:91:0E:23:1F:E3:53:18:CD:01:F5:FB
Certificate issuer:       /CN=8a57b69a-d683-4350-83d4-e449c0242b7d
Certificate serial:       010D0C9F4328584DF4DB5CE4A4AA31849EE5EF90
Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     55134
IP address blocks:        23.173.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5c:e4:a4:aa:31:84:9e:e5:ef:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=98c56cde-b59e-4717-95a4-15ac50889a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:58:46:1b:35:52:2b:04:10:df:80:31:0e:
                    03:9b:84:79:73:d4:f2:8b:da:36:41:47:1e:79:1a:
                    05:df:87:59:cd:1a:5e:c0:a0:79:3f:e9:03:4c:a7:
                    04:ce:c9:d6:a7:03:4e:b8:89:c2:c1:32:24:2c:1a:
                    12:fb:0c:8e:f4:2b:79:5f:07:1c:3e:9e:03:42:52:
                    a9:04:0a:b3:b8:60:28:c6:77:09:03:df:14:56:bf:
                    c9:43:53:8e:fa:4d:5d:93:ae:76:57:d6:c6:15:0e:
                    0a:52:6f:3b:10:4d:87:48:55:cc:4f:bf:9a:d9:c0:
                    a4:46:48:1b:ee:e9:4c:0d:8b:a5:01:e0:e0:45:05:
                    e5:a2:4f:c9:70:bf:28:f0:d4:61:87:11:74:51:dc:
                    95:d1:cd:5b:61:ca:85:dc:25:36:7a:0a:6b:1e:d0:
                    dd:51:76:6f:ca:46:ee:5a:eb:c4:a8:6b:d2:a6:c7:
                    50:8f:b9:b5:45:93:b9:dd:06:cd:e0:d9:9c:61:0a:
                    2b:67:5b:8f:5f:f3:99:be:66:f1:a1:a9:db:46:9c:
                    3a:d2:c7:81:cc:8c:54:94:ab:f2:f0:fb:9f:2c:82:
                    5d:07:f7:5b:9d:f3:db:f6:76:3f:6e:43:bd:57:cd:
                    2e:e7:cb:0d:50:d7:52:a2:9b:e3:95:ac:3a:ac:c7:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B9:D4:04:8B:0B:99:C6:51:91:0E:23:1F:E3:53:18:CD:01:F5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:91:97:8c:ae:7e:eb:ce:f5:f4:6e:76:db:a4:f0:a9:d1:60:
         ad:25:be:89:1e:5b:91:99:c1:a4:a6:99:59:5f:c3:ef:07:1f:
         3b:83:3e:57:0a:0a:25:b6:ec:8c:fa:dd:fb:1a:01:7a:91:5c:
         6b:6b:a7:aa:7b:bb:f2:be:10:d6:f3:d0:04:31:5a:c4:ce:fc:
         1f:bb:c7:76:a5:3d:27:62:33:22:55:7d:f3:f1:7f:2f:d0:38:
         f8:d7:ef:9e:64:17:04:c1:06:48:ff:8f:8b:44:08:b1:13:49:
         5a:34:31:d4:04:38:05:ed:a0:ca:df:e0:61:76:dc:6c:12:01:
         37:fc:e7:45:b1:f0:9a:d4:94:10:3f:f5:a0:62:28:18:08:72:
         d9:73:49:a3:fc:89:f1:7a:3b:12:cd:85:ee:5b:36:65:56:23:
         ef:95:e5:22:c1:e6:ac:49:2b:08:c9:ea:57:91:6b:8a:ce:71:
         bc:55:34:db:a0:ff:f5:ff:55:94:32:c2:4b:57:bc:e2:06:77:
         41:48:ae:eb:44:d8:16:96:bc:ff:88:cd:ef:1a:22:53:c2:55:
         ab:4f:73:ee:be:8e:90:ec:9e:dd:98:1d:3d:7c:d9:8a:87:51:
         46:d1:73:1a:64:cb:60:82:a5:68:a9:62:0b:d6:eb:13:f0:cd:
         5e:29:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:27:43 2026 by rpki-client