Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/6b18a0fc-6b3d-3b65-b823-ae1f8331ff24.roa
File:                     6b18a0fc-6b3d-3b65-b823-ae1f8331ff24.roa (raw, json)
Hash identifier:          gX3OeQSVHEUacyzjVcEvufaIJyDD3v3mJGFI7CT2NL4=
Subject key identifier:   7A:D7:F6:CC:BC:16:F5:24:93:9D:37:4F:4D:B0:77:54:1A:56:6B:75
Certificate issuer:       /CN=a9586916-68f6-41f9-8be8-415f39b3aff8
Certificate serial:       010D0C9F4328584D7B6A9D8C6A4F91BA3074D340
Authority key identifier: 5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/6b18a0fc-6b3d-3b65-b823-ae1f8331ff24.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     26187
IP address blocks:        23.151.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:9d:8c:6a:4f:91:ba:30:74:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9586916-68f6-41f9-8be8-415f39b3aff8
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=5eeee378-78f1-4d4c-adb1-68001e5eeade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:df:1a:9a:82:ba:1d:d2:46:52:78:a7:63:
                    08:22:f0:f7:dc:ad:cd:b6:ac:10:18:ed:fa:f1:77:
                    db:91:9a:b1:39:4f:74:98:fc:8d:1e:98:64:b2:94:
                    20:03:4b:2b:2c:42:12:90:02:64:c3:19:d7:c9:d5:
                    95:61:5c:c3:7b:d7:10:6a:fc:5c:1b:39:3e:b4:56:
                    1f:20:c3:da:90:19:06:e7:51:fc:68:1c:9b:e9:6c:
                    e5:78:b2:65:53:76:9c:8b:eb:1b:7b:d0:a0:b3:71:
                    bf:8a:d4:d2:08:d7:e6:8b:af:d5:f0:e6:f0:0d:a1:
                    d0:bf:10:fe:90:2a:54:4b:33:f4:c6:80:6a:06:3e:
                    12:b5:07:16:52:41:8c:0a:2f:53:7d:43:e1:e0:92:
                    fb:30:9e:9c:42:96:a7:4c:6b:5e:31:5a:0b:98:8a:
                    32:25:40:bd:76:25:e1:93:77:7d:de:dc:30:8c:36:
                    fd:73:7e:07:75:5b:b9:a1:00:46:15:6c:5f:21:54:
                    ca:18:d5:18:18:06:f0:e3:4e:c9:c6:90:66:89:ae:
                    80:59:65:d4:ea:40:6b:1c:04:3c:e5:d6:89:7f:d8:
                    37:db:45:76:df:f4:ff:d9:e4:8b:c4:de:d1:d4:98:
                    e7:91:6f:00:c3:84:4e:69:16:58:05:c0:eb:df:db:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:F6:CC:BC:16:F5:24:93:9D:37:4F:4D:B0:77:54:1A:56:6B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/6b18a0fc-6b3d-3b65-b823-ae1f8331ff24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl

            X509v3 Authority Key Identifier:
                keyid:5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b1:77:a8:ad:f2:46:d9:fc:df:84:86:96:71:67:55:04:75:
         33:da:b8:0b:f7:e6:5a:8b:35:23:88:15:c3:a6:04:57:64:b6:
         4f:bd:40:26:15:59:73:a9:7f:81:f6:54:a7:55:3e:16:4b:a5:
         f6:a1:cb:fa:14:af:bc:53:bc:bb:c8:fa:1d:01:5c:ed:c2:6c:
         87:1e:4b:13:73:74:44:52:ac:ec:ec:c9:85:4c:bb:c8:0d:2e:
         d2:27:90:76:e7:ed:07:ce:a8:12:f9:10:86:e4:04:b7:17:46:
         66:86:ca:52:03:fc:da:56:ed:a7:c3:42:c7:5e:5f:c8:ec:cf:
         a4:3e:67:01:0d:f4:24:10:7e:45:c7:7f:7b:c2:46:cf:25:bb:
         46:74:a2:5f:2d:bb:b9:8f:9a:d4:47:4b:30:ae:88:15:fa:fd:
         16:a2:d0:ca:dc:b1:32:32:ec:ab:e4:e0:e1:e5:8f:8d:cc:1d:
         62:e6:69:ae:f7:e1:40:2c:5f:38:a4:2e:ff:ce:8f:5a:79:84:
         42:99:c9:58:7e:93:fe:69:16:82:c0:55:a0:0c:8a:48:67:75:
         1f:77:47:6d:a3:78:48:12:fe:aa:c7:ea:4e:6d:79:c2:42:6f:
         6e:81:c9:e5:1f:bd:fc:29:9e:d5:02:6e:14:55:33:c3:5a:38:
         36:3b:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:48 2026 by rpki-client