Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa
File:                     d893a598-2191-39e4-ab6f-df13d27172ac.roa (raw, json)
Hash identifier:          kJFx9bbWtDNceXOqO4tWEcSum5EJy1CT+Py5QnKIZXI=
Subject key identifier:   44:7B:33:9A:0D:2F:CD:8F:CA:1F:6E:17:24:4A:84:43:D7:29:86:D2
Certificate issuer:       /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c
Certificate serial:       010D0C9F4328584DE150774CFC40D5675B5CC200
Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     399029
IP address blocks:        23.144.216.0/24 maxlen: 24
                          2607:dc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:77:4c:fc:40:d5:67:5b:5c:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=c8437c05-1137-42aa-9f94-15d8e20f8a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:0c:5b:e5:e0:c7:12:4c:f5:d2:86:56:36:
                    c3:2b:fc:0b:40:95:4a:6c:14:b8:fa:66:2f:8f:b0:
                    19:5d:75:5b:c9:5e:fa:aa:47:b8:57:4c:20:3e:67:
                    97:e8:95:37:ed:d9:84:4b:5e:32:d5:27:c4:f2:b4:
                    10:0c:68:3b:4b:49:7a:37:0a:ce:b0:be:b8:35:1e:
                    7f:c7:a6:af:7e:91:21:89:59:7b:29:c7:f0:ee:a7:
                    2d:48:db:c5:7d:20:d7:21:45:4a:94:c8:84:1a:c6:
                    81:46:c0:a0:95:b1:7c:b0:5e:fa:70:0a:f2:6f:96:
                    89:b0:bc:86:83:f5:c2:53:bf:3c:65:09:8a:97:f8:
                    3e:2c:23:2c:9c:cb:4b:aa:8d:cc:14:60:da:11:ef:
                    90:ca:3c:9d:85:85:5f:b7:5d:11:6a:c7:8a:33:e0:
                    b7:3f:47:61:7e:fa:7c:cb:5f:49:3b:df:f8:fd:12:
                    5d:22:eb:58:35:64:bb:c4:1f:09:82:cd:e8:12:50:
                    de:a9:cd:f7:fe:7a:37:04:92:d8:d4:0e:36:01:ed:
                    ca:c0:8a:9f:02:a8:af:dc:7a:f4:33:fa:69:0e:cd:
                    40:54:89:5d:de:69:59:43:6b:3f:e1:fc:4f:38:08:
                    98:d9:8b:8c:a4:f6:72:0f:d8:c4:f9:29:20:37:94:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:33:9A:0D:2F:CD:8F:CA:1F:6E:17:24:4A:84:43:D7:29:86:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl

            X509v3 Authority Key Identifier:
                keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.216.0/24
                IPv6:
                  2607:dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:9f:f3:11:bf:e3:ef:33:4c:2f:23:ac:eb:37:77:60:f3:
         ca:08:67:66:f4:15:b7:50:b6:c6:e3:d7:08:23:2a:2d:9c:d4:
         08:62:0f:bf:d5:9a:51:a0:49:3e:57:93:d2:7d:c2:d2:3b:1f:
         7a:5f:c8:03:95:a6:03:f3:ce:19:f8:68:a9:c2:0c:75:48:50:
         32:6a:db:3b:74:f3:c1:3e:ff:29:5f:fc:fb:a8:78:9e:63:5f:
         f3:c6:65:42:3e:a0:57:69:7f:15:12:fa:08:48:b1:b7:a7:23:
         1f:4e:2d:58:9e:4d:9a:2b:50:40:61:de:ef:f2:05:2c:78:f7:
         76:b3:e1:43:d8:47:ef:7d:ca:ea:c8:2a:e8:6a:e9:ae:67:10:
         29:9d:71:05:77:d2:99:58:6f:aa:26:50:c3:1a:91:d4:e9:cd:
         e3:c8:bb:28:3f:c2:b3:4b:08:85:52:df:21:74:63:c4:99:e2:
         49:f5:88:f7:e6:88:d4:90:d1:0f:6b:bf:bd:0a:e7:f8:66:c0:
         fd:1d:e6:e6:f2:97:7f:2e:86:20:06:3f:29:c2:fe:1d:64:d5:
         35:d4:16:92:65:9d:92:ed:11:ac:db:b1:88:74:0d:98:fe:dc:
         c8:35:51:b2:17:17:a4:f3:76:25:73:04:bb:98:90:11:dc:fb:
         bf:8b:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:19:05 2026 by rpki-client