Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/021fd352-b120-37cf-a79b-223606371da5.roa
File:                     021fd352-b120-37cf-a79b-223606371da5.roa (raw, json)
Hash identifier:          mVZ99ROSN5AUDLml931T7H6R2D1BvJlCdDyCLENJpsE=
Subject key identifier:   67:5A:2C:62:58:8F:72:B9:C2:85:8E:DC:21:A6:30:F1:2E:80:5F:D5
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584D6AAAB147F973192B3F5DFD80
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/021fd352-b120-37cf-a79b-223606371da5.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     154321
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:b1:47:f9:73:19:2b:3f:5d:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=b2d7dcce-ef60-4d84-9395-4250478d7775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:7b:f0:fb:3e:9f:89:6b:45:50:58:3c:34:
                    41:c6:d8:87:fb:76:1d:22:c1:b9:8a:81:7b:1a:1a:
                    31:a2:24:c5:62:17:e3:52:60:08:17:8f:e2:c6:4e:
                    64:38:16:75:96:39:11:c8:0b:38:fa:d0:21:01:8f:
                    68:47:e1:45:c6:6f:23:06:1f:65:fd:a8:ea:f3:42:
                    5e:70:93:fb:5d:6d:07:5b:47:7f:f0:5b:27:b3:4a:
                    a9:0b:7b:51:46:4a:8b:7f:79:94:53:5c:1f:45:7d:
                    48:54:89:ca:f2:89:49:e9:af:66:91:54:ca:84:ea:
                    01:18:da:28:78:25:32:77:b6:3a:e5:93:9e:10:04:
                    d1:8a:a6:31:a9:f8:54:03:24:28:44:c9:79:d7:1e:
                    c7:dc:4c:d3:2f:06:b5:fd:25:18:6e:16:6e:1b:6b:
                    95:47:cb:80:40:14:3b:38:3b:49:65:8d:f1:09:6e:
                    6e:86:02:50:7a:44:a6:29:9d:2f:71:c4:18:61:28:
                    d2:53:37:33:a9:32:2a:14:30:06:ef:a4:ad:8c:87:
                    20:0a:f2:79:79:dd:f1:a0:de:e8:6b:b1:14:6a:3a:
                    91:00:54:12:07:59:a2:6d:54:a3:51:4f:52:cd:fb:
                    6c:1a:c7:24:18:be:11:1e:96:bb:52:e8:21:b9:a7:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5A:2C:62:58:8F:72:B9:C2:85:8E:DC:21:A6:30:F1:2E:80:5F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/021fd352-b120-37cf-a79b-223606371da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:16:ad:19:b1:23:a1:9e:2a:41:58:9f:21:34:83:c7:87:
         d7:ec:c7:8b:1f:c1:fb:5c:ad:37:b7:13:ad:4c:f4:04:72:7f:
         31:42:83:c5:41:a5:74:7f:9b:a9:5f:21:b7:ba:b0:b0:0b:ad:
         52:0e:7b:55:59:d1:bd:83:88:30:d2:ec:6c:82:c2:7b:b2:7e:
         0b:e2:c0:78:ce:c1:ac:c6:c7:89:cf:3d:07:88:41:a6:1a:7f:
         d8:9c:e5:87:de:44:10:dd:c1:bd:00:b9:56:32:e4:7a:fa:f2:
         6d:ea:46:eb:80:29:a4:b9:6b:d3:32:44:92:b1:3f:b4:cc:fb:
         05:14:80:ab:62:cf:4f:22:63:f8:47:7a:df:45:1c:59:7c:d1:
         77:58:19:ba:3c:c8:87:b5:4e:9a:3a:d4:38:df:8f:3c:79:e7:
         6c:2a:eb:64:24:5b:1a:37:54:a2:08:0e:af:75:d8:3e:ea:d2:
         de:a1:e8:e1:11:11:d4:df:eb:e4:5b:b5:db:a4:0b:f9:2f:2f:
         b5:d7:b5:ec:b2:91:93:36:74:49:9d:6e:6d:9c:9d:99:fa:43:
         e1:e2:11:b3:f2:f7:ce:e0:61:d7:c6:eb:86:18:81:e0:3b:d1:
         f6:3d:d4:27:00:41:09:d3:ac:26:d6:2f:6a:17:34:c6:8f:13:
         42:d0:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:00 2026 by rpki-client