Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/30f4dd58-ab33-3c46-9b9f-97614a2ed619.roa
File:                     30f4dd58-ab33-3c46-9b9f-97614a2ed619.roa (raw, json)
Hash identifier:          DL01mGnEP5Hvf4fD2Djz9zuyeEXW++QomhngfHCqjqQ=
Subject key identifier:   FA:8F:FB:FF:EA:6F:FB:65:04:9B:1E:EA:D0:4D:13:2C:50:12:46:12
Certificate issuer:       /CN=288ee328-9ed3-44ed-907d-3fcb48d9e58a
Certificate serial:       010D0C9F4328584E2073E7E006159D20CE440380
Authority key identifier: DE:72:DC:AD:5D:53:59:3A:80:0E:5C:7B:BC:E6:AF:26:33:91:92:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/30f4dd58-ab33-3c46-9b9f-97614a2ed619.roa
Signing time:             Wed 10 Jun 2026 15:47:55 +0000
ROA not before:           Wed 10 Jun 2026 15:47:55 +0000
ROA not after:            Tue 08 Sep 2026 15:47:55 +0000
asID:                     402216
IP address blocks:        23.156.180.0/24 maxlen: 24
                          2602:f3f4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/288ee328-9ed3-44ed-907d-3fcb48d9e58a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/288ee328-9ed3-44ed-907d-3fcb48d9e58a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:20:73:e7:e0:06:15:9d:20:ce:44:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=288ee328-9ed3-44ed-907d-3fcb48d9e58a
        Validity
            Not Before: Jun 10 15:47:55 2026 GMT
            Not After : Sep  8 15:47:55 2026 GMT
        Subject: CN=4d00a229-a5da-4e95-b157-4e2cd233282e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:90:66:6d:60:02:9d:1c:33:fa:fb:59:0e:
                    20:3a:91:fa:10:ac:ba:1b:2f:69:db:99:7b:37:48:
                    d0:ad:e4:9d:cd:a3:58:81:03:7a:24:ed:29:26:23:
                    4b:bd:23:eb:c2:a9:67:41:f9:68:72:3f:bf:4c:2a:
                    3e:6d:fa:23:ab:e3:4c:b0:a0:92:17:7f:33:92:69:
                    19:85:04:37:87:6e:f7:83:c1:11:04:b8:01:fc:12:
                    7e:8d:2c:4e:b4:4f:cb:d4:7a:9f:59:8b:a9:9f:c9:
                    aa:00:1c:ef:93:39:01:c5:be:8c:93:d1:a8:26:7f:
                    59:5f:0f:31:d6:34:ce:03:f5:45:4a:be:bb:42:69:
                    ea:c8:5e:26:86:91:ae:85:6f:ad:f9:97:54:30:c7:
                    14:0b:97:0c:2d:00:49:90:a3:92:04:ba:30:6a:58:
                    47:1e:7a:13:94:62:1b:15:a2:40:af:95:66:61:0c:
                    61:2e:cc:f3:33:71:50:ee:7c:9b:bc:eb:82:dd:6d:
                    26:9e:dc:ba:0b:e6:a5:3b:d1:f3:d8:d8:9b:7a:e1:
                    16:90:4d:1a:ff:50:82:f8:5d:9c:dd:bf:e3:95:fd:
                    2d:20:90:e4:48:10:f0:a5:d3:90:de:28:5a:69:a1:
                    0a:fa:ad:cd:94:0b:56:60:e0:8c:19:2d:e4:0c:e8:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:FB:FF:EA:6F:FB:65:04:9B:1E:EA:D0:4D:13:2C:50:12:46:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/30f4dd58-ab33-3c46-9b9f-97614a2ed619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a/288ee328-9ed3-44ed-907d-3fcb48d9e58a.crl

            X509v3 Authority Key Identifier:
                keyid:DE:72:DC:AD:5D:53:59:3A:80:0E:5C:7B:BC:E6:AF:26:33:91:92:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/288ee328-9ed3-44ed-907d-3fcb48d9e58a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.180.0/24
                IPv6:
                  2602:f3f4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:67:56:ed:c0:47:fc:df:89:5a:29:f6:08:86:b7:a7:32:c7:
         4f:56:2f:ef:48:a4:75:d3:37:31:82:cc:dc:88:f3:8d:1a:e6:
         cb:9e:db:72:d4:5e:96:f4:f1:bb:82:6d:46:60:e0:f0:88:7d:
         79:97:ea:d1:e6:06:42:75:2e:67:4d:df:4c:e6:f2:71:f2:99:
         67:aa:b8:4e:32:f2:6a:cc:cc:5b:2e:d7:5a:b7:d9:00:6e:fc:
         f9:6a:7e:1d:c7:a8:22:8b:6d:d2:32:a3:43:29:db:84:ff:17:
         03:47:ba:96:ab:c4:30:d1:33:23:8c:a7:a9:c2:a2:d3:a5:6c:
         ef:83:f6:73:6b:a5:d6:d2:ed:1b:d9:ae:20:8a:a9:e7:f7:70:
         03:e9:23:c6:ea:f0:27:1e:52:9f:e0:33:2b:8c:44:92:ad:71:
         b7:a3:35:6e:70:d3:63:5e:bf:38:b7:4d:07:2a:8e:f2:46:ee:
         9f:d7:25:c6:eb:6b:60:87:dd:bd:03:b0:f5:b9:03:bf:d8:97:
         73:16:d3:1b:e8:cb:44:57:f7:19:29:1d:bb:4b:0f:7e:8f:97:
         6a:64:3c:1c:d6:e0:5d:b1:b1:f1:ae:18:e4:20:e4:4e:1a:de:
         ae:58:6b:a1:db:40:26:a5:e8:d9:90:50:dd:2c:d3:26:f2:fb:
         91:fe:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:44 2026 by rpki-client