Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa
File:                     5c8612b7-ca90-3cff-8325-583b4fae37e4.roa (raw, json)
Hash identifier:          ellw7msCUV3Z634FUSY8uRlwW70pnkWP1q7JqDUtoLc=
Subject key identifier:   C5:F3:5F:4F:37:69:9C:DD:D0:C2:DD:B2:54:83:7D:BD:20:F3:B8:9E
Certificate issuer:       /CN=a08a8360-966b-4e4f-9006-479f72f36651
Certificate serial:       010D0C9F4328584E0C1ED26F4FAA28F2F05B6480
Authority key identifier: 3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     400642
IP address blocks:        23.151.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d2:6f:4f:aa:28:f2:f0:5b:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08a8360-966b-4e4f-9006-479f72f36651
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=655ec353-66a6-43da-8332-e1ded5e4c49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:e9:f7:7c:06:0c:af:e4:5d:16:c5:e1:2b:
                    c3:ff:64:0b:81:a8:a5:ca:a9:d4:ce:ee:30:5c:32:
                    bd:1b:90:c1:70:3e:99:6f:3f:49:f2:f5:77:e0:49:
                    f4:79:e2:ba:b8:04:2c:83:02:25:9f:88:9e:40:39:
                    d7:35:7a:63:ff:56:00:28:0f:e9:69:e2:a0:d5:3d:
                    8c:46:68:d6:ee:17:b5:3d:3c:c9:8f:24:4e:04:87:
                    87:8c:ed:c2:e8:9d:27:d3:87:05:6a:7a:3c:cd:7e:
                    f1:da:af:05:e0:46:c2:fa:bd:9c:3f:1e:a1:5e:5b:
                    8d:24:cc:b1:78:cc:9b:51:8b:66:4b:0a:21:f8:38:
                    43:e9:63:9f:46:43:c6:c1:c7:03:c1:8b:a2:96:8f:
                    2d:89:71:bd:92:23:dd:f5:9c:cf:65:1f:b0:9d:4c:
                    59:e8:cb:92:92:20:ad:0e:4c:29:13:af:9f:b6:b9:
                    bc:8e:c0:40:00:69:09:3e:52:fe:8c:e3:e1:3b:1a:
                    a2:18:3a:3b:84:bb:a5:bf:bc:7c:9c:09:62:7b:ce:
                    cc:a4:10:22:d9:50:88:a6:cc:d9:f0:5c:e2:b5:bb:
                    60:74:ac:e2:fe:4c:e3:44:13:6f:7d:90:45:86:cb:
                    d4:d7:ec:69:67:60:e8:01:36:ef:f0:25:0d:53:d2:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:5F:4F:37:69:9C:DD:D0:C2:DD:B2:54:83:7D:BD:20:F3:B8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl

            X509v3 Authority Key Identifier:
                keyid:3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e7:8d:cd:d9:76:f2:31:1f:28:f1:07:a2:2b:1c:c8:78:1d:
         00:41:ce:1a:eb:24:bc:a7:fc:5c:ca:d1:cf:6d:7e:71:76:8e:
         24:27:22:18:fb:03:5e:91:e7:2b:02:8a:41:03:5c:af:72:6f:
         a1:3a:9c:e9:14:fc:4c:d8:65:6f:5c:cc:8b:85:46:17:39:f4:
         cb:46:03:ec:c4:49:a4:ff:b4:36:32:09:f1:8d:ce:bb:f3:c0:
         d2:73:a1:58:48:ff:e1:3a:97:5b:cc:2a:07:a3:72:e2:86:ac:
         ef:84:d7:63:65:91:ce:ea:12:63:49:f2:ce:70:80:70:b0:43:
         f2:45:b6:68:eb:68:b7:e8:e7:b7:a6:68:cf:39:21:c3:2e:13:
         84:a5:e2:07:7a:5b:fc:c0:39:39:40:85:3b:55:e0:7e:68:66:
         61:33:14:82:36:b6:a5:19:83:d5:f8:3b:57:8e:90:45:c9:2e:
         8c:e2:62:de:01:47:a6:30:f2:16:9c:7a:e2:64:fc:d2:99:8a:
         61:bf:11:75:8f:ce:8a:a5:07:74:6e:8c:fc:05:54:50:01:df:
         6f:2f:4b:ba:5d:7f:c2:3c:0b:27:ac:7b:91:cb:8f:74:27:fd:
         e1:be:9e:49:e3:14:c4:85:b1:80:cc:51:dc:3a:2e:13:5d:79:
         3b:fc:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:14 2026 by rpki-client