Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/c3bdeb67-3e5a-3344-a860-8c24d0d6dd12.roa
File:                     c3bdeb67-3e5a-3344-a860-8c24d0d6dd12.roa (raw, json)
Hash identifier:          gPX1/qaOCe2CA6PuP4uZJVlWaFwZAXDKfbEeSgqB/Yw=
Subject key identifier:   EB:E4:2E:52:36:39:D3:EE:6B:B7:F2:73:51:7D:43:8D:C1:90:7F:AE
Certificate issuer:       /CN=2e4c886d-0c38-40e5-98a3-021f2eb8f4c9
Certificate serial:       010D0C9F4328584D7CCFD043E2F721CD76CA5400
Authority key identifier: 0E:38:DB:F2:6C:EC:B7:FE:1E:2F:95:11:BC:46:2E:62:84:67:C3:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/c3bdeb67-3e5a-3344-a860-8c24d0d6dd12.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     21752
IP address blocks:        23.141.44.0/24 maxlen: 24
                          2602:f5f6::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d0:43:e2:f7:21:cd:76:ca:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4c886d-0c38-40e5-98a3-021f2eb8f4c9
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=1b0da0a6-e64f-41df-b91f-e0323d37f3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:ef:80:08:95:01:ea:65:60:93:12:c7:5e:
                    ce:a6:48:3f:de:8d:93:24:b3:53:f4:9b:8c:7b:42:
                    3c:80:6a:99:ce:da:29:22:ee:13:01:ca:b7:c2:ba:
                    ad:38:8f:07:c9:e7:69:b8:62:a6:62:fd:c6:d5:26:
                    42:4f:fd:ae:93:73:87:a5:1e:e2:07:60:3f:68:b0:
                    30:6a:48:e3:34:b4:9e:f7:85:44:eb:bf:a4:e9:cf:
                    2c:c4:70:17:78:a7:3a:69:f0:6b:37:ef:20:5c:23:
                    2e:c2:bf:3c:a4:1a:cb:be:f2:52:be:c3:f1:73:52:
                    24:05:7f:a4:0a:4f:0c:96:8a:04:55:21:ce:cf:fd:
                    b9:67:b6:29:1f:47:3f:fb:85:50:80:ee:0b:c2:8d:
                    f3:10:9b:17:9d:63:0c:12:0f:d0:9f:dd:1a:67:e4:
                    88:4c:6f:ea:88:ee:f4:0a:9f:55:25:14:64:98:5c:
                    8f:a4:2e:e9:25:5d:c8:21:b4:75:2d:cb:7e:bf:e4:
                    bc:17:2f:77:9d:f9:ae:b4:d0:4c:28:48:b1:0f:24:
                    ce:97:b2:a3:55:56:07:fc:a7:2f:d8:d3:23:6a:4a:
                    44:4f:84:b4:c7:5a:b9:66:c6:3b:99:09:6b:a3:a6:
                    a3:b4:17:5a:0f:90:e1:18:2a:6d:f1:ec:b3:c2:52:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E4:2E:52:36:39:D3:EE:6B:B7:F2:73:51:7D:43:8D:C1:90:7F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/c3bdeb67-3e5a-3344-a860-8c24d0d6dd12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:38:DB:F2:6C:EC:B7:FE:1E:2F:95:11:BC:46:2E:62:84:67:C3:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4c886d-0c38-40e5-98a3-021f2eb8f4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.44.0/24
                IPv6:
                  2602:f5f6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:f1:fc:ab:ec:12:f8:fc:30:ea:29:ce:a3:33:99:cc:0a:
         53:e7:07:1e:44:c2:f3:24:36:da:a8:b5:67:99:54:59:6d:51:
         70:f2:db:9b:8d:2f:35:fc:12:e2:35:d6:4a:bc:2f:77:40:0e:
         ed:58:ec:95:96:b5:ee:8e:b3:23:bb:41:ba:32:30:c5:6f:5b:
         f0:21:77:ab:61:a2:0b:8d:a7:0b:56:00:5a:0f:29:91:1a:4f:
         b3:39:ce:cc:9e:6e:ee:02:9c:d7:c7:02:4e:4b:1a:b4:f8:85:
         62:cc:b2:da:8a:32:bb:bb:92:5d:e9:52:95:6b:af:4a:d5:38:
         e2:cc:ab:ba:5a:08:66:73:5f:0f:1b:a1:99:f1:76:34:15:57:
         d5:06:e7:50:89:aa:4d:2e:00:e1:a5:95:99:50:1a:36:11:20:
         4a:f3:06:d8:e8:be:5d:b3:69:cc:c8:61:d8:25:65:4a:e3:f6:
         4b:2a:2b:cd:f1:b3:3d:06:9f:b1:f3:71:df:fd:f1:a9:4b:27:
         97:c3:17:a1:c4:2b:21:2c:e2:a9:1b:fc:d1:b1:0f:51:41:77:
         c7:b3:88:3a:f9:dc:20:aa:52:02:54:11:f7:45:2f:56:e6:26:
         c9:28:b5:6a:80:96:65:10:4c:58:d5:f9:5b:16:03:3e:30:26:
         2e:ec:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:59:34 2026 by rpki-client