Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eae73fdc-29a6-31d5-95a5-931b0582904c.roa
File:                     eae73fdc-29a6-31d5-95a5-931b0582904c.roa (raw, json)
Hash identifier:          fodz0ZK1YYafcUAYI5UNJL31l/dEY0p5CzcHfCeMMn8=
Subject key identifier:   0E:58:79:41:D8:1B:3D:41:1D:8D:CA:55:C1:55:04:C6:BC:9C:3D:D2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7E353E1C6D8C7D7AB71A1380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eae73fdc-29a6-31d5-95a5-931b0582904c.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     20001
IP address blocks:        23.157.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3e:1c:6d:8c:7d:7a:b7:1a:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=2e4bcdde-c491-46a6-9a4a-960017d8bfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:8c:2f:50:f1:c1:04:62:6b:b0:1c:c4:1a:
                    e0:71:ed:34:ea:b7:80:35:9a:1c:cd:fb:74:b2:32:
                    17:1c:5e:a7:ed:93:3f:90:bb:62:cf:68:07:ea:94:
                    b6:38:a5:69:c5:03:e5:8a:6f:1f:d4:75:c3:ae:db:
                    db:18:b4:79:32:72:6d:0c:27:02:c0:c5:97:a6:8b:
                    b7:34:78:b3:67:67:bb:ad:4c:82:1e:91:e4:92:b1:
                    63:14:dd:6e:c2:62:96:71:ff:2f:7e:66:f3:54:09:
                    9a:1d:bd:db:7f:33:a7:30:d0:fd:0a:05:15:c1:81:
                    bc:51:0f:e9:b7:77:dd:56:e2:0f:77:e7:10:56:a2:
                    a7:c7:3d:87:d2:e6:5e:d7:e6:98:f5:f3:b1:cf:8d:
                    1c:4f:64:19:11:b9:1c:31:9c:f3:fc:85:c2:c2:5b:
                    03:d1:40:08:b9:03:95:76:85:83:6e:b6:96:a1:7b:
                    93:10:60:a9:10:2a:24:b2:d3:62:f5:8a:46:2d:af:
                    97:94:9d:e0:03:6a:af:28:57:2d:20:9c:d1:92:ab:
                    b9:52:2a:65:58:07:9d:4c:80:7e:b5:22:4b:70:45:
                    0d:77:d6:13:0a:43:ca:d9:d4:c6:bf:90:9c:81:e5:
                    0b:32:91:94:67:dc:27:a8:bb:eb:47:7b:cc:5b:21:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:58:79:41:D8:1B:3D:41:1D:8D:CA:55:C1:55:04:C6:BC:9C:3D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eae73fdc-29a6-31d5-95a5-931b0582904c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4a:f8:ce:cd:ff:69:a9:0c:34:05:a8:9f:0f:d5:f2:e6:48:
         9b:93:90:45:a8:e4:c1:ce:6a:35:24:b7:ea:67:4d:aa:94:8d:
         1f:97:f2:ee:b0:b4:63:1f:37:cb:e2:8a:49:f3:39:2f:37:95:
         98:46:db:a2:68:bd:5e:3b:e6:36:2c:4e:e1:0d:a2:7a:10:6b:
         c2:b8:f3:8a:a3:94:89:a1:3e:fa:fa:ae:05:f7:3e:9a:77:58:
         fe:d5:29:60:83:c1:8e:66:db:90:28:06:10:ee:6f:ed:3d:cf:
         7f:28:6a:02:b9:af:5e:e4:b8:ff:cd:f6:5f:e5:b0:fc:9e:a7:
         4d:08:43:8c:7c:13:12:e4:58:36:b7:a8:a8:66:f8:32:a6:fd:
         32:25:89:e2:34:7e:34:9d:74:1a:85:07:62:b5:51:65:19:7b:
         46:27:2c:4b:35:7f:d9:f8:19:3a:41:ff:d3:8e:9d:28:49:f0:
         8a:ba:16:73:55:af:58:e8:88:ca:71:77:1a:96:5a:63:ae:be:
         97:9c:e5:46:af:a1:1b:4e:29:b0:83:3f:5b:31:88:0d:b2:6c:
         43:9f:af:18:0b:cc:32:e7:15:20:b4:78:d1:57:57:02:1b:87:
         27:e3:4b:05:80:a7:8d:93:6e:08:23:9b:31:2f:02:20:ca:e9:
         28:47:77:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:19 2026 by rpki-client