Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa
File:                     b5490758-29c6-3dee-8f6b-3a687067e265.roa (raw, json)
Hash identifier:          uvbuKEj4qDqHtRz0kb7skEN13YYawl3z9ZPQd2vrZbs=
Subject key identifier:   B6:F0:93:1A:65:4C:5F:47:B4:02:5B:16:36:53:DD:E7:DA:6E:9A:CE
Certificate issuer:       /CN=5a050d35-445a-48e3-baa6-4d4bdc3fa308
Certificate serial:       010D0C9F4328584E253F1F45DF0C98FD8B592D00
Authority key identifier: EF:49:AA:6A:1A:20:F4:AA:DD:A0:BF:67:27:F9:10:63:23:D8:9C:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     152179
IP address blocks:        23.137.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:1f:45:df:0c:98:fd:8b:59:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a050d35-445a-48e3-baa6-4d4bdc3fa308
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=27f543a9-2739-4d9f-87f7-deb17685430e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:42:43:1e:db:d9:14:7a:5e:f9:c8:b5:7e:
                    b3:b9:60:7f:6b:b2:1d:ea:47:09:cd:c5:15:16:06:
                    cf:db:cb:47:64:6b:91:a7:fb:dc:7e:e7:c6:b1:9a:
                    f9:b5:e3:60:93:e7:af:0b:0b:1b:db:3e:2b:9b:ae:
                    10:da:0f:a7:40:5e:56:03:51:7e:ab:f1:cc:99:8c:
                    95:96:c7:3d:00:97:83:3a:51:92:fd:ee:db:fb:62:
                    9f:89:7f:92:3b:02:d0:2e:39:7b:82:e3:c6:8d:1a:
                    c1:ff:d3:b6:16:67:a5:c3:ad:1f:25:25:5a:57:33:
                    db:8c:69:b3:67:10:2e:5e:32:ad:a6:90:45:68:90:
                    23:ae:ba:3c:08:81:b1:bf:f1:7d:78:11:0b:b4:d9:
                    1b:ff:98:f5:a9:e3:36:f8:f5:f1:8e:91:7f:d0:ce:
                    10:86:b8:bd:8c:77:ec:74:76:08:30:ef:b1:3b:12:
                    8d:8b:f7:2e:af:39:1f:cf:84:9d:e3:78:d5:23:0b:
                    cf:81:22:33:a0:90:a2:87:0f:34:0b:3b:2c:a1:cc:
                    95:c1:4d:92:df:c6:62:e8:fa:d5:25:7a:ae:63:4f:
                    1d:b4:91:88:46:d3:00:7e:3a:33:d0:6f:87:53:8c:
                    fd:5f:95:f1:8a:c0:ba:f0:8e:e6:fe:31:a8:d3:f1:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:93:1A:65:4C:5F:47:B4:02:5B:16:36:53:DD:E7:DA:6E:9A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/b5490758-29c6-3dee-8f6b-3a687067e265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308/5a050d35-445a-48e3-baa6-4d4bdc3fa308.crl

            X509v3 Authority Key Identifier:
                keyid:EF:49:AA:6A:1A:20:F4:AA:DD:A0:BF:67:27:F9:10:63:23:D8:9C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a050d35-445a-48e3-baa6-4d4bdc3fa308.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:71:ae:d6:30:0c:20:7c:df:90:ed:34:8b:e4:45:32:17:69:
         fb:0d:7e:e2:7d:fc:c9:70:a7:e0:55:1a:d4:b2:29:28:95:4d:
         c0:71:d9:11:bf:d6:58:dd:41:7f:74:af:49:05:e1:88:77:46:
         53:16:b0:82:c4:fa:31:54:1c:ae:62:0c:f1:f6:38:a3:68:f0:
         ff:15:75:72:ae:eb:fd:ec:4f:3d:c0:0e:7b:d7:21:91:d3:f0:
         70:71:f9:45:69:c2:bf:23:70:5b:53:f4:e1:f8:bd:f9:50:86:
         68:6c:97:8d:b5:f9:b7:37:35:9f:9a:ed:02:94:20:62:b2:c6:
         51:c7:3b:c1:52:19:18:fe:45:e5:cd:9c:0e:34:43:93:ef:a5:
         3b:a3:75:ca:fe:cf:b8:b1:db:08:97:a1:91:69:50:c7:07:ba:
         f7:43:c3:cd:58:26:d1:bf:fe:6f:7f:a9:31:79:4a:fc:ab:12:
         54:04:3d:04:ca:fb:a9:f5:e3:48:7a:c9:b6:de:a2:a9:37:1a:
         d1:cb:48:cf:c4:12:f3:2a:5a:68:65:1d:e3:95:82:b5:ca:e3:
         1a:4e:12:03:9e:06:9f:3d:b8:3c:00:0b:fc:5f:36:36:9c:62:
         eb:9c:7e:e9:4b:fd:94:10:07:10:4e:49:42:eb:03:6c:42:33:
         67:a9:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:54 2026 by rpki-client