Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa
File:                     3f1804e2-95de-35be-88e3-5feefeb68750.roa (raw, json)
Hash identifier:          RFJb0QO2YQ276u4zdUzUe7Nkv3CRqWaNOQ/FEOWEeDk=
Subject key identifier:   ED:88:47:6F:9E:07:BD:CF:BA:AF:E2:48:B5:81:1C:79:A6:95:34:E0
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584D6AAA7EF7A71CF135F5211880
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     138195
IP address blocks:        23.235.164.0/24 maxlen: 32
                          23.248.246.0/24 maxlen: 32
                          103.199.103.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7e:f7:a7:1c:f1:35:f5:21:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=f067746e-b205-4390-9ead-4d9a1328dc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:fb:ff:f2:b6:2c:fc:2a:7e:47:9e:a6:9c:
                    00:5a:95:50:9f:69:4f:db:8a:08:1d:f6:d8:3e:c5:
                    50:5f:d0:2b:86:0f:e5:eb:87:6c:43:a6:77:8d:1b:
                    9a:23:15:ea:df:0f:04:3a:83:86:d3:cc:dc:9c:f1:
                    b3:3e:ee:be:a1:bb:a7:2c:97:c2:06:18:d3:3b:be:
                    6a:fc:67:9c:08:f8:0e:a3:1f:46:cf:c1:c2:0e:e4:
                    9e:55:71:cf:dc:9f:ba:3d:f8:99:99:29:a1:e0:8d:
                    e1:31:45:0e:f3:77:73:e1:b8:07:2d:4c:bb:98:13:
                    ba:75:7b:53:7d:02:d9:7d:4f:f8:bc:29:ef:8b:e3:
                    0b:61:40:1d:05:2c:49:cb:e3:ab:60:e4:02:62:30:
                    47:ee:a6:1b:f9:d1:34:c3:95:8e:ec:f1:74:53:fb:
                    09:37:d1:ae:73:77:50:0e:93:78:92:96:e6:e3:11:
                    be:1d:3c:0a:70:cd:ca:38:c9:1a:47:d0:27:25:36:
                    fd:4c:6e:7c:94:58:d2:c4:c4:c3:4a:41:aa:2a:95:
                    1d:49:65:58:58:e9:06:3e:1c:6d:e9:e6:f8:81:31:
                    c4:9e:d3:18:ae:41:05:88:52:6a:9b:50:e3:f9:d0:
                    14:13:7f:08:73:ad:7a:55:fe:1e:8e:6e:0d:47:f1:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:88:47:6F:9E:07:BD:CF:BA:AF:E2:48:B5:81:1C:79:A6:95:34:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/3f1804e2-95de-35be-88e3-5feefeb68750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.164.0/24
                  23.248.246.0/24
                  103.199.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:57:34:83:36:29:42:62:d5:de:65:67:14:9e:21:e4:d9:16:
         95:47:da:2a:9a:8c:88:2f:dc:c7:28:06:e5:e0:15:04:90:6d:
         21:20:24:9c:1e:d5:68:6a:c7:f6:0e:3e:c2:df:16:51:3a:d5:
         45:3e:4f:88:1c:30:88:0b:cd:f2:82:ff:70:b2:80:e1:ae:15:
         ba:b4:75:d9:f3:fd:a0:d0:f3:78:a0:ae:64:ab:d2:e6:ff:97:
         37:cf:2f:58:36:5f:9e:4c:8b:db:55:7d:b0:5e:1a:09:ed:14:
         8b:88:fb:1b:41:74:79:7c:d8:a7:a2:93:90:98:da:82:5b:bb:
         43:3a:c1:32:4c:07:79:2a:42:dc:3b:3e:cd:2a:d4:29:2f:c4:
         ee:bd:66:aa:6d:cd:db:a9:83:83:1d:4c:7d:f9:c7:8b:15:00:
         ee:fa:d6:84:ef:a5:01:82:33:03:9a:25:fd:c4:7e:e9:49:c9:
         02:69:38:fd:91:d7:bc:99:ad:aa:8d:43:ae:cf:b5:15:cc:c2:
         ad:30:e5:c5:f8:b8:76:38:82:c2:75:60:84:e0:f4:4b:8b:49:
         4a:aa:1f:ce:0a:21:cb:54:91:4c:7c:2f:63:d0:c9:d8:60:51:
         1e:4f:87:fe:90:85:72:69:af:f8:18:39:63:cf:ac:ce:d3:94:
         34:af:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:35:04 2026 by rpki-client