Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/b857fd5a-5185-3e49-b5f7-ca152e420a13.roa
File:                     b857fd5a-5185-3e49-b5f7-ca152e420a13.roa (raw, json)
Hash identifier:          75EBtm/agkJL/O4HrzDqWlhyn8wc6KM4rxvPftNjvAs=
Subject key identifier:   C6:AD:E5:5B:FC:20:EC:5D:2C:AA:62:75:DC:FC:A7:67:80:24:B6:9D
Certificate issuer:       /CN=a4738e65-dd12-4c12-b10b-7a16621165e0
Certificate serial:       010D0C9F4328584D852FD9E3517CA81B31E92880
Authority key identifier: DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/b857fd5a-5185-3e49-b5f7-ca152e420a13.roa
Signing time:             Thu 16 Apr 2026 01:00:23 +0000
ROA not before:           Thu 16 Apr 2026 01:00:23 +0000
ROA not after:            Wed 15 Jul 2026 01:00:23 +0000
asID:                     214483
IP address blocks:        23.146.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:85:2f:d9:e3:51:7c:a8:1b:31:e9:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4738e65-dd12-4c12-b10b-7a16621165e0
        Validity
            Not Before: Apr 16 01:00:23 2026 GMT
            Not After : Jul 15 01:00:23 2026 GMT
        Subject: CN=91a5e2b0-7c9a-4aaf-91e6-cea403a09d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:f6:d9:fb:4d:15:64:63:26:85:a8:80:15:
                    a3:b6:cb:e7:10:ee:75:54:38:e3:19:43:6f:0f:00:
                    06:e5:aa:3d:9e:43:4d:81:03:22:2b:dc:fe:80:17:
                    e9:58:a9:48:72:05:ee:ba:26:1a:aa:51:f8:26:bb:
                    ce:f3:54:ee:f9:4e:1b:4f:7b:0a:6d:b0:e3:49:0a:
                    92:34:2c:5f:04:a6:e5:bd:e2:75:fd:26:27:9b:4d:
                    39:cb:a0:aa:d8:36:2c:76:53:f2:e6:5d:19:df:2b:
                    5c:18:9f:e6:e3:90:07:82:e9:0a:0e:fc:23:ca:1b:
                    bb:fd:e0:ff:64:1f:6a:0f:7a:db:de:4f:a0:86:27:
                    85:39:27:37:e3:18:9f:84:88:e8:8c:7f:0f:0e:e1:
                    5e:bd:59:b2:ad:74:63:99:7d:2e:b4:8d:24:0c:9b:
                    d8:4e:b8:3c:dc:ba:df:f2:5f:3a:52:7f:f2:b0:35:
                    bd:37:cc:2e:09:a4:19:d2:34:84:8f:04:77:1e:38:
                    2c:6d:30:cb:47:24:b4:78:a2:ce:40:99:c5:bd:ec:
                    d1:b8:75:e2:00:8c:f5:d8:0f:cd:93:8a:3c:40:a3:
                    ee:11:35:97:b4:8d:48:f3:44:27:ea:8c:c3:99:e0:
                    79:be:b1:9f:64:ba:33:5d:f1:d6:85:50:35:12:47:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AD:E5:5B:FC:20:EC:5D:2C:AA:62:75:DC:FC:A7:67:80:24:B6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/b857fd5a-5185-3e49-b5f7-ca152e420a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0/a4738e65-dd12-4c12-b10b-7a16621165e0.crl

            X509v3 Authority Key Identifier:
                keyid:DD:D4:30:A7:71:FC:6D:D7:8F:83:5F:80:E1:0F:94:67:CE:F1:26:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4738e65-dd12-4c12-b10b-7a16621165e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:25:a9:92:ab:b0:f7:b2:b2:9d:b1:fd:29:50:c2:a1:2f:
         9c:b4:d9:dc:e2:39:79:e0:d1:5c:97:41:7f:47:ba:33:29:fa:
         42:90:d6:ff:89:af:3d:47:e4:47:ad:86:cc:d3:f2:07:5c:3f:
         8f:bb:ac:24:21:08:93:4f:7a:de:23:24:f3:f4:79:99:14:06:
         96:2a:f1:84:a2:d7:d9:ba:14:d0:15:b2:22:17:01:ad:7f:4f:
         67:38:de:1b:b5:12:0b:88:bb:60:9a:9c:f3:32:79:82:45:04:
         34:ca:da:50:fa:a4:a0:66:0b:ce:0f:88:d3:5d:7b:be:23:fe:
         0b:f0:2b:a5:90:0f:97:4f:c5:04:fe:28:5b:f9:71:06:f8:f2:
         c9:6b:10:a3:00:14:e2:a6:80:c0:15:13:6c:ed:4a:95:bd:91:
         36:e4:d4:a0:21:93:c8:e9:5f:14:88:8f:b0:35:02:3a:76:c4:
         5b:bf:4c:45:fc:a9:40:6b:16:78:80:92:03:2b:f4:33:3b:9c:
         6e:4e:09:41:6a:9b:23:4c:35:aa:96:e8:9e:b9:8a:ef:4f:bc:
         c9:dc:3f:6c:32:5b:5b:2b:d2:ae:14:47:04:89:be:3e:ef:77:
         c3:5a:d0:31:85:50:ae:65:d8:09:fb:3d:6f:bf:46:b9:19:62:
         9b:3b:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:38 2026 by rpki-client