Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/8abb96a8-de31-34ed-b13e-28ac4aa65a36.roa
File:                     8abb96a8-de31-34ed-b13e-28ac4aa65a36.roa (raw, json)
Hash identifier:          IUz2H/ALI3eTw6wo97WFz1tF9zWDRff2YzOBLbJJpYE=
Subject key identifier:   CD:44:5D:05:25:16:60:7D:69:F4:E3:8E:39:01:96:ED:52:96:14:04
Certificate issuer:       /CN=91000ef3-10d1-4abb-a94c-cee7cd803bca
Certificate serial:       010D0C9F4328584D8C1F41ED4A38F73ED38E7860
Authority key identifier: AF:83:74:5B:EC:C2:EE:55:29:AD:79:A1:87:36:A4:AF:9C:E3:5A:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/8abb96a8-de31-34ed-b13e-28ac4aa65a36.roa
Signing time:             Sat 18 Apr 2026 12:37:43 +0000
ROA not before:           Sat 18 Apr 2026 12:37:43 +0000
ROA not after:            Fri 17 Jul 2026 12:37:43 +0000
asID:                     152179
IP address blocks:        23.146.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/91000ef3-10d1-4abb-a94c-cee7cd803bca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/91000ef3-10d1-4abb-a94c-cee7cd803bca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:1f:41:ed:4a:38:f7:3e:d3:8e:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91000ef3-10d1-4abb-a94c-cee7cd803bca
        Validity
            Not Before: Apr 18 12:37:43 2026 GMT
            Not After : Jul 17 12:37:43 2026 GMT
        Subject: CN=ed68abe9-8a21-4119-b654-472eb49290a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:13:28:78:e5:f3:13:2a:eb:c8:17:12:ed:
                    bd:f6:5b:1f:20:0d:ae:11:72:7b:ce:04:84:38:11:
                    d2:29:16:41:cf:37:a9:66:1e:70:93:eb:cf:05:4a:
                    ea:2d:3a:77:93:1a:87:78:28:0d:cc:49:9f:b5:8d:
                    95:e9:25:f6:36:72:80:d1:b0:ea:d9:d2:e1:4c:25:
                    46:13:3c:8a:b0:81:60:3c:ec:77:c1:b8:e7:f0:0f:
                    13:ea:12:c3:f0:4c:1f:29:72:09:b1:c8:f6:b2:7a:
                    d0:27:7c:9e:74:1f:70:92:bb:6b:54:a3:be:da:0d:
                    97:3b:2a:d6:b0:c0:bc:c0:b6:35:64:b6:f2:4f:e3:
                    80:d9:c0:d2:12:9d:2d:8b:89:0e:6d:1f:70:7f:bd:
                    90:f5:57:9f:36:b9:93:2a:21:b6:c5:c7:48:04:95:
                    f6:4e:3f:3c:10:cd:8d:e7:88:ec:35:af:22:a7:79:
                    b8:69:75:8a:5f:1c:23:0a:de:b4:e8:bd:64:10:22:
                    e9:b7:05:33:7b:9b:44:7d:37:65:cd:ed:a4:d0:12:
                    b5:13:6b:88:34:43:45:20:49:c2:1a:e7:3d:d3:a5:
                    fb:3c:d0:c9:a2:85:66:7c:b2:41:3b:39:f4:69:7a:
                    17:ae:2f:d9:1e:0d:a9:3e:6f:81:dd:be:b5:27:ad:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:44:5D:05:25:16:60:7D:69:F4:E3:8E:39:01:96:ED:52:96:14:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/8abb96a8-de31-34ed-b13e-28ac4aa65a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca/91000ef3-10d1-4abb-a94c-cee7cd803bca.crl

            X509v3 Authority Key Identifier:
                keyid:AF:83:74:5B:EC:C2:EE:55:29:AD:79:A1:87:36:A4:AF:9C:E3:5A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/91000ef3-10d1-4abb-a94c-cee7cd803bca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7c:d3:18:90:0f:7b:e5:ab:4f:75:d2:97:5f:64:74:14:be:
         89:b9:ff:d5:bb:f6:ba:35:88:73:1c:58:91:30:96:93:1b:4a:
         02:b5:0c:6a:06:dc:80:7f:45:d6:b1:0c:81:73:e2:11:9d:c6:
         69:f5:5e:73:bd:fd:eb:b6:4a:4b:c2:b2:cd:f1:82:b2:97:b9:
         54:27:39:d7:f1:dd:eb:dc:19:a4:37:87:10:91:e2:c3:75:76:
         3b:b8:77:c4:3b:12:8a:55:0b:bd:cb:1c:dc:ce:4f:d3:2a:d4:
         e1:d4:77:17:e1:e7:7c:ae:40:92:83:76:18:7d:ec:04:a1:1e:
         c3:5a:9e:b5:bb:5a:30:3f:57:9d:74:7b:e4:42:08:bc:d0:7f:
         90:cc:af:9b:1f:5e:e7:85:cc:03:f5:44:86:71:17:d8:36:47:
         a5:43:07:9c:0f:f3:59:c2:c2:53:0b:f0:e2:be:f1:ee:db:ab:
         49:ac:37:37:d1:35:f5:eb:a5:79:0e:72:5f:cf:c0:70:38:39:
         a8:7b:ef:8c:e1:0c:f2:1f:1a:d5:f6:0b:ca:c1:0a:7f:89:c5:
         8c:f3:7f:64:4c:73:d6:5c:c8:ed:d7:12:b0:fb:80:04:25:1b:
         53:cb:a8:1b:f9:aa:d1:dd:c9:34:f9:ef:d8:1e:98:61:91:bf:
         d5:cb:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:20 2026 by rpki-client