Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/de98ea99-3002-3914-8bd0-34eeb4b3d75c.roa
File:                     de98ea99-3002-3914-8bd0-34eeb4b3d75c.roa (raw, json)
Hash identifier:          O/hTNsbjVgMB0KBtKDTf6dLs1W+3GnQABMNLFPChceA=
Subject key identifier:   F8:82:07:19:1C:59:95:1B:AA:01:2F:C7:42:0C:FF:57:D1:23:54:80
Certificate issuer:       /CN=2ca5e7d8-de7d-48b8-9cb1-491065714227
Certificate serial:       010D0C9F4328584D869580E9B36CC0AD252E3400
Authority key identifier: 26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/de98ea99-3002-3914-8bd0-34eeb4b3d75c.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     26187
IP address blocks:        23.144.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:80:e9:b3:6c:c0:ad:25:2e:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca5e7d8-de7d-48b8-9cb1-491065714227
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=5a2ac3c4-df50-4d86-a169-603c3dea6dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:3a:e5:57:3f:c7:8b:85:39:84:24:39:7a:
                    6f:fc:81:b9:1b:d3:7a:1a:a9:ee:e9:c5:5e:56:bb:
                    f2:8b:b9:2d:0a:d3:a4:51:cd:45:d8:0c:3f:5a:88:
                    62:42:f3:04:a0:d7:7d:77:b4:6c:db:1d:47:31:e5:
                    31:b8:54:a6:62:19:8e:2a:86:5d:55:79:fd:cd:a3:
                    09:cc:d9:a6:01:46:df:c9:ee:0d:c3:f2:4a:51:09:
                    73:96:27:d6:2f:80:b2:fd:76:e1:8c:f0:c2:27:eb:
                    da:b7:01:26:ad:8f:70:5f:6f:71:29:fa:bc:df:38:
                    ec:36:7f:d7:63:01:c8:9b:56:3d:d7:ff:22:27:57:
                    57:ae:af:e5:75:e4:cc:fd:a5:c2:34:3b:ba:26:b7:
                    d7:04:5c:78:74:7c:63:1f:79:a5:82:f3:6b:30:c4:
                    5d:d1:47:a7:5d:0f:59:e4:27:fb:9c:fb:aa:8b:3c:
                    47:f8:ad:5a:e8:49:47:d2:84:6f:51:79:e3:47:a8:
                    67:c0:ab:bf:db:c9:86:b3:dd:f5:12:ae:ca:37:45:
                    ea:83:c1:17:a3:59:1e:7a:3d:89:df:3f:e8:7a:bb:
                    3d:d6:1e:27:4a:dd:5d:f7:f1:c4:de:8e:95:fb:9d:
                    3f:20:1b:da:26:2e:53:22:60:cc:41:45:03:a9:25:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:82:07:19:1C:59:95:1B:AA:01:2F:C7:42:0C:FF:57:D1:23:54:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/de98ea99-3002-3914-8bd0-34eeb4b3d75c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl

            X509v3 Authority Key Identifier:
                keyid:26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:3a:1f:10:39:c4:31:72:08:3d:13:5c:9c:80:20:8f:f9:a4:
         29:52:55:e4:a2:f3:de:03:bf:23:67:70:9b:e0:05:74:ac:b2:
         ee:f9:58:4e:93:72:09:5d:63:13:e4:55:9b:51:3b:c6:49:ef:
         a2:e3:57:91:40:a0:06:b0:f5:4d:c4:56:98:98:52:7b:a4:15:
         70:fb:f8:fc:d9:30:0e:e8:c5:04:71:10:7d:d6:ee:4c:da:4a:
         c5:13:20:ab:d7:1d:8f:74:97:73:db:7f:80:0f:41:42:ba:f5:
         35:c6:7c:41:b6:79:b5:3c:e5:78:f0:c2:e9:97:1d:b9:df:8c:
         ca:25:93:22:00:7b:50:69:e3:86:28:b3:2f:6a:0e:b7:64:4f:
         25:5d:49:b6:c1:fe:4a:64:1e:e8:85:6b:88:3e:f9:f2:e6:ab:
         28:5d:02:09:be:c6:91:b0:14:c6:c9:8a:7b:04:48:71:2f:07:
         5b:ba:bd:b2:4a:88:b5:91:9a:a9:1f:4c:13:26:39:cf:01:59:
         9f:4a:b6:f3:de:e5:ae:0b:f3:f6:84:75:4b:f0:0e:92:78:be:
         9f:47:67:59:14:71:bc:11:6a:b9:e4:30:ce:0f:7e:34:6b:36:
         f9:94:8a:40:7f:37:38:1a:1a:9d:1c:76:81:48:dd:0c:e2:98:
         ad:c9:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:45 2026 by rpki-client