Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa
File:                     668cf81e-26f7-3cfb-8188-230b6296a5c7.roa (raw, json)
Hash identifier:          jMC8eMMzZaQYhbIaJOwaAJsFr8S02m5sC7waAHzSaR0=
Subject key identifier:   D8:C1:43:8E:D7:DF:65:C5:A6:5C:AD:D1:30:3D:7A:3E:61:DB:33:2F
Certificate issuer:       /CN=7834df4e-1d40-4a3e-b949-220f86329057
Certificate serial:       010D0C9F4328584E23D995647BAD64795527A600
Authority key identifier: F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     402102
IP address blocks:        23.151.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:95:64:7b:ad:64:79:55:27:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7834df4e-1d40-4a3e-b949-220f86329057
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=f4df20f0-b369-4ab8-8309-784d03e62e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:fc:07:a0:aa:bd:24:d3:ff:e8:a5:81:87:
                    99:62:f4:05:d3:f9:c1:91:46:af:09:c7:89:3b:20:
                    25:46:86:3a:f8:ca:c0:ca:a3:43:fc:0c:9c:b0:66:
                    26:24:6a:47:4e:7b:f5:7d:36:91:36:12:a4:97:cc:
                    84:dd:9b:3d:75:31:ed:03:c4:5c:55:f6:c8:13:9a:
                    11:10:95:6d:1a:59:11:9b:da:b2:6a:2b:09:ed:a0:
                    ef:7f:65:a7:aa:88:b3:c6:e3:79:53:33:f9:69:2f:
                    5d:97:f5:59:ea:cb:7f:85:e4:e4:e8:23:1a:b2:87:
                    9d:cd:84:c2:c0:23:77:e3:e2:da:63:54:38:b7:c8:
                    f6:09:9b:b6:46:4c:56:16:8f:36:cf:f7:44:74:10:
                    28:f6:70:29:b5:60:a4:0f:91:3b:a5:7f:84:af:89:
                    40:7f:a5:3a:c0:b6:2c:a2:69:50:11:26:c9:9a:4e:
                    ec:a8:96:4a:c4:a8:ae:35:9f:49:62:75:17:b3:c5:
                    e8:14:13:d6:e9:ef:fe:c0:9f:e2:6d:a9:e4:10:fa:
                    2e:7b:6e:8d:a8:99:97:c9:fa:2f:54:94:71:61:02:
                    5d:41:97:35:c8:07:bb:cf:89:7b:ab:20:7b:ff:00:
                    15:20:4b:90:4f:cc:a3:4a:a6:e9:81:6e:22:9c:96:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C1:43:8E:D7:DF:65:C5:A6:5C:AD:D1:30:3D:7A:3E:61:DB:33:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/668cf81e-26f7-3cfb-8188-230b6296a5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ac:ba:98:92:6c:0b:11:27:23:cf:f0:cf:80:f0:d2:76:69:
         cf:b3:55:b3:09:75:16:60:4b:06:23:81:72:4c:ed:f4:fe:8a:
         db:dd:a1:33:4c:39:2a:72:7e:f2:d0:0a:0d:0e:13:f6:86:f2:
         1a:35:b2:00:59:3b:f1:c3:83:65:12:dd:fe:b3:0b:59:75:b9:
         26:fb:dd:02:60:7e:e0:94:df:15:db:72:ae:3b:d3:8d:b4:79:
         32:e8:3f:b5:7b:72:04:cc:b9:d3:d4:c0:74:85:22:96:f6:5b:
         06:4a:7c:4d:e1:ab:85:94:13:ee:57:7e:a4:fe:9f:53:76:78:
         c7:f6:8d:78:fb:00:8e:07:de:ce:bb:f5:1d:28:1e:bf:3a:b2:
         2f:00:3c:79:5b:ea:5a:83:65:0a:a3:8f:4e:fe:f9:12:c1:61:
         7d:45:7c:d6:e7:03:8e:f3:22:1a:51:80:d4:fd:1e:94:f1:66:
         18:18:c0:26:69:ef:05:7d:f4:b2:fa:28:34:11:9d:4d:f4:23:
         ca:c7:a2:72:9e:63:66:89:b7:6f:3c:81:52:85:c9:6a:62:33:
         c1:c4:3d:79:c9:fb:70:3b:28:6c:76:e6:ed:24:0a:73:6a:e4:
         9b:b8:51:33:ad:b4:1b:55:ae:1d:d4:3d:ff:8c:91:e7:0c:8f:
         26:28:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:43 2026 by rpki-client