Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/ba7b120d-31f5-3fd7-9759-bb56f042f88c.roa
File:                     ba7b120d-31f5-3fd7-9759-bb56f042f88c.roa (raw, json)
Hash identifier:          4Tpn+RF/XWWDRo4ehVBEkhXMG0ZXf/oINFBjTANjNmw=
Subject key identifier:   21:A4:33:35:1F:D9:A1:A8:65:8E:4B:9D:34:72:14:CC:33:A6:CD:54
Certificate issuer:       /CN=53f88802-f72c-435e-8525-75ea583e4ccd
Certificate serial:       010D0C9F4328584D7CCFE10474E3F0A5B349E180
Authority key identifier: 77:63:47:88:C5:8A:6B:ED:5F:84:8C:07:53:AB:B5:98:96:D6:B3:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/ba7b120d-31f5-3fd7-9759-bb56f042f88c.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     8095
IP address blocks:        23.180.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/53f88802-f72c-435e-8525-75ea583e4ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/53f88802-f72c-435e-8525-75ea583e4ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e1:04:74:e3:f0:a5:b3:49:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f88802-f72c-435e-8525-75ea583e4ccd
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=d58e5bfb-8a49-42fb-87bc-7f8270807ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:cb:80:de:2a:a7:31:db:01:9b:c8:9b:19:
                    66:d1:9c:31:be:50:6f:ee:4d:bd:ec:89:ad:9c:fa:
                    b8:82:42:72:3b:a8:39:13:82:31:3a:e0:85:37:40:
                    54:10:3c:6a:22:96:57:ba:65:f1:4f:43:34:79:2d:
                    0b:2e:b8:86:55:e2:6f:76:a2:0c:97:aa:6b:b3:29:
                    cd:5f:19:dd:a2:29:4a:93:46:84:6a:ec:08:3e:06:
                    a9:5e:52:c6:41:6f:b7:c4:47:80:d8:2e:44:26:f0:
                    fe:86:cc:ab:80:f3:77:5b:e1:8e:22:2d:fa:2a:3e:
                    ba:04:64:a2:29:f1:8f:18:89:ae:8e:c9:c6:f2:e4:
                    c6:ef:fc:38:6c:8d:34:40:af:54:f7:a8:4c:a5:7b:
                    50:91:71:c0:9f:9b:52:2e:de:a5:d4:d9:66:0b:ae:
                    82:f5:f3:08:3b:e9:06:19:1b:8e:b7:68:7b:b9:fd:
                    14:45:ca:d6:dd:f1:75:ea:d6:12:44:d3:90:80:da:
                    78:1e:66:28:1b:da:44:aa:c0:09:a4:99:84:44:6a:
                    40:d6:5d:f2:66:11:ae:95:e5:d5:a6:d0:70:83:b7:
                    9e:dc:39:77:57:ac:87:27:34:31:da:18:e5:53:13:
                    59:07:3e:d5:af:4b:5d:a8:07:38:d3:29:2a:e8:25:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A4:33:35:1F:D9:A1:A8:65:8E:4B:9D:34:72:14:CC:33:A6:CD:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/ba7b120d-31f5-3fd7-9759-bb56f042f88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd/53f88802-f72c-435e-8525-75ea583e4ccd.crl

            X509v3 Authority Key Identifier:
                keyid:77:63:47:88:C5:8A:6B:ED:5F:84:8C:07:53:AB:B5:98:96:D6:B3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/53f88802-f72c-435e-8525-75ea583e4ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:f7:33:a9:41:95:1b:65:58:fc:fa:47:8c:4c:94:1e:4a:
         29:78:7f:2d:1c:69:ed:c3:e5:39:bf:77:17:6d:e1:32:46:57:
         89:f5:a4:61:d6:9a:bb:7c:c5:d1:4e:6a:0d:ac:7a:07:82:69:
         c6:03:5d:64:88:3c:49:5e:bd:bf:5d:1f:a6:04:fb:c9:48:8c:
         49:c5:ba:61:73:c7:c3:da:7f:11:5a:26:a2:67:58:6d:e6:29:
         e6:0d:0c:25:39:b3:f7:71:10:9f:27:3a:b3:99:38:68:00:e2:
         9e:7f:27:5a:0f:f9:17:02:cb:72:b0:b5:82:d7:f3:e5:53:65:
         9c:ea:f1:40:1e:ee:ce:83:6f:c3:94:61:30:71:6e:9c:ca:c5:
         60:e9:a4:48:d5:16:3f:ab:d9:ea:ec:6f:73:94:4c:cc:d2:88:
         5e:25:30:52:d3:b8:65:f6:d6:01:8c:ff:3f:be:6b:b0:77:9e:
         e7:24:63:79:b8:c6:2c:b8:b9:6d:59:a6:78:fd:df:19:b3:fd:
         fa:6c:e4:c0:bb:a5:c7:5d:04:22:29:9c:98:bf:40:4b:f7:cb:
         67:f7:f8:18:72:18:59:1a:35:29:f9:53:b2:97:7a:06:d1:a8:
         e2:ab:e9:67:d0:e1:0d:37:ee:dc:e1:cc:49:7a:7c:f9:39:57:
         d1:7e:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:25 2026 by rpki-client