Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa
File:                     39af8921-60ee-3a49-9b43-975f800d7921.roa (raw, json)
Hash identifier:          XzADoU6JZtdR3ydMfDeEz9GCovO0Smr3PJDAz3eEs20=
Subject key identifier:   F3:11:34:A7:D4:94:B2:45:03:A8:E0:39:7B:23:FC:30:15:65:63:74
Certificate issuer:       /CN=f070d399-4921-4247-a612-64e6e53f9f2b
Certificate serial:       010D0C9F4328584DF0AB3E73E9EE169FE5B9A980
Authority key identifier: 61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     401274
IP address blocks:        23.186.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:3e:73:e9:ee:16:9f:e5:b9:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f070d399-4921-4247-a612-64e6e53f9f2b
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=5383c136-7630-439c-85c3-1e33070f8e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:f0:a9:de:c9:18:e6:e2:7b:3e:cf:36:d6:
                    b5:84:9b:3e:87:a1:8d:ed:b1:36:48:ef:bc:8e:51:
                    e4:cf:40:72:51:b8:ad:88:4a:f4:e8:eb:e5:0a:ef:
                    34:ba:7e:66:66:96:e3:b5:46:63:0a:d0:6d:2b:fa:
                    46:ca:d5:8d:9a:8e:c1:26:35:72:d8:28:e6:74:10:
                    44:66:27:13:7b:4f:2a:e8:ac:08:4e:dc:27:28:3a:
                    b9:55:b6:70:9b:d0:a7:61:74:d5:f6:9e:a3:ab:e6:
                    60:8c:19:44:b4:5b:d8:1e:38:10:fc:39:e4:02:57:
                    c8:f7:47:23:8f:c9:ec:4d:59:f5:b2:d3:a8:1e:0f:
                    30:76:dc:19:49:11:a8:d1:0a:a8:28:3b:d9:04:99:
                    3d:03:ae:7a:43:9d:60:2e:a0:ea:a9:a7:67:99:89:
                    08:89:8b:dd:24:04:8d:54:b1:48:d8:1d:16:30:4c:
                    d5:80:0d:47:99:38:5a:ea:68:ba:24:d2:a3:11:bc:
                    e7:49:ac:0d:08:43:23:64:56:9d:78:8b:42:5b:92:
                    74:74:80:3d:b0:59:cf:68:2b:a7:93:d6:06:57:56:
                    bb:14:6b:fa:30:fe:4e:ba:e4:29:24:30:a2:7d:da:
                    ba:d0:48:1d:3a:4e:ab:18:67:ba:c9:1c:91:37:78:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:11:34:A7:D4:94:B2:45:03:A8:E0:39:7B:23:FC:30:15:65:63:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl

            X509v3 Authority Key Identifier:
                keyid:61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:63:a8:c6:a5:ab:60:f7:20:b8:66:8b:49:55:6d:70:c3:
         f1:62:c6:30:d1:d4:7a:02:63:c9:38:26:9c:a6:ab:b7:3a:4b:
         c7:58:71:85:44:f6:35:a5:fc:34:ea:75:c6:af:91:e6:74:65:
         c3:99:fb:50:58:0b:fe:3d:f6:bf:3a:3b:4d:1f:b0:21:4e:ac:
         2d:3e:e3:e7:a6:91:1c:be:9f:eb:93:34:b5:22:45:e4:da:67:
         8f:86:1c:58:e8:1c:15:c0:9b:72:6d:15:75:94:07:58:6f:14:
         ad:ea:56:9c:fe:67:46:7d:fc:81:6c:61:0f:dc:77:1b:46:3e:
         18:fe:a7:28:72:fd:3c:41:c4:33:6f:9e:df:d2:64:37:d0:a3:
         c9:79:7c:1c:ed:71:fa:57:8d:fd:b3:67:fe:cb:4e:d6:80:e8:
         65:90:ff:a6:25:1c:2a:6b:df:37:f4:e4:de:88:f1:8d:59:b8:
         a3:0b:7f:47:44:54:5c:6b:78:72:5a:32:b4:22:9d:87:20:64:
         9c:fd:86:f7:c7:2e:da:4e:d2:35:00:8b:10:ed:28:51:63:4c:
         71:f3:45:e6:10:77:56:36:45:a2:47:97:cb:c3:25:fa:c0:e0:
         ba:3b:f3:41:23:e0:c3:ff:74:f5:ba:ef:46:7e:73:31:4b:2b:
         75:07:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:15 2026 by rpki-client