Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa
File:                     e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa (raw, json)
Hash identifier:          /lpg55GSXkWqp3d/MngawBbyvIp6ybK8vAPUWfPOp84=
Subject key identifier:   A6:A0:00:11:A8:2A:83:A4:49:59:B9:DF:FD:6C:1B:85:F5:16:62:72
Certificate issuer:       /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b
Certificate serial:       010D0C9F4328584E04361082AFD8DFA69E9685A0
Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     8095
IP address blocks:        23.154.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:10:82:af:d8:df:a6:9e:96:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=8aa622c5-64a6-4363-82d7-8a620183c6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e5:12:bb:a5:73:95:e2:98:f0:47:b1:19:e1:
                    30:fa:f3:18:ac:cf:01:91:e7:d9:bc:c4:35:3c:9f:
                    9a:e1:d7:4b:c6:30:e4:6e:23:97:2f:4f:3e:e7:58:
                    2a:3e:1e:40:e2:25:41:25:17:b1:37:08:21:ce:03:
                    e5:5f:8f:b8:56:85:0d:9d:fa:e9:63:59:41:ee:cf:
                    6b:f2:37:0f:f8:4f:fa:56:e1:e7:48:84:96:e5:51:
                    5a:aa:ee:4e:3b:66:7e:8f:50:f1:ab:06:5a:36:e7:
                    2d:28:52:40:37:a4:58:87:f1:27:31:67:d2:5f:9e:
                    75:5b:67:91:a1:15:32:53:d5:1a:da:0b:e1:69:86:
                    d4:da:51:1a:51:0d:76:c2:7f:3f:51:f5:d6:aa:2c:
                    84:ff:fa:09:a4:1e:5c:c3:6f:c1:36:b3:f6:75:c5:
                    63:57:c9:53:3d:e9:74:38:f1:ac:18:a6:81:65:13:
                    03:f4:94:93:5c:6a:98:4a:bb:77:10:9d:6c:f4:bf:
                    db:95:61:ef:2e:60:39:e9:82:cc:51:1c:1b:0e:6b:
                    7e:59:d8:ce:9f:e9:6f:01:67:77:7f:83:10:3b:6d:
                    49:de:c2:3b:47:48:d5:e2:b4:fd:20:bd:1d:4a:95:
                    b4:e0:82:21:c8:87:a4:8d:0b:c1:04:88:51:40:99:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A0:00:11:A8:2A:83:A4:49:59:B9:DF:FD:6C:1B:85:F5:16:62:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl

            X509v3 Authority Key Identifier:
                keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:83:4a:44:3f:30:49:de:03:7a:da:43:19:12:ad:4e:2e:
         c0:b9:34:44:c9:55:e6:20:a2:30:ae:64:30:63:3e:4f:18:0c:
         3e:23:17:2c:6c:38:56:2d:b2:ce:d1:45:c2:c8:55:e7:73:85:
         db:88:a7:c4:c7:73:85:0b:66:be:88:9d:50:db:0c:a7:72:d1:
         05:b8:37:8e:b2:42:9c:23:4e:71:8a:ad:39:d8:d9:2a:a3:53:
         46:f2:80:ee:a9:f6:66:0b:d8:86:30:12:e0:89:0a:07:63:55:
         05:ce:9c:e4:c8:a1:fc:d3:50:2f:ad:8b:96:f4:23:23:a5:ac:
         63:7b:1f:5a:36:be:68:fd:f8:25:59:2b:3f:01:b7:10:fa:0a:
         04:0d:44:ad:8f:4f:d4:42:9b:95:71:e1:61:4a:f5:23:03:f9:
         0b:57:fd:96:7f:fe:80:56:ae:b1:90:c2:a9:de:37:53:78:cc:
         24:15:41:c1:44:68:76:f0:c5:6c:48:5c:57:d4:d4:72:34:bf:
         df:2d:ac:cf:54:8f:97:d4:a1:6e:e2:a3:9f:cf:f3:fe:df:81:
         e8:69:2e:94:82:5e:ed:3f:77:9f:c7:33:5b:3c:64:13:c4:34:
         5e:79:95:8d:0a:fc:d7:34:b2:4d:8c:38:47:56:bf:40:29:f8:
         0e:7b:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:28:23 2026 by rpki-client