Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/66d0cfec-dc3e-3b78-b11d-e7a82ed9a8b1.roa
File:                     66d0cfec-dc3e-3b78-b11d-e7a82ed9a8b1.roa (raw, json)
Hash identifier:          N/LAfmwJFbW0z/A6AAw1X6X9ds1FlfY6JEoQ1ClpNwA=
Subject key identifier:   E3:0A:02:F6:F7:C9:61:45:6B:19:3B:31:51:B4:EF:AF:58:3A:32:47
Certificate issuer:       /CN=ee7373c2-046b-47a5-8bb0-bb4c865d818e
Certificate serial:       010D0C9F4328584DFBD5D0A80D7665489FB79480
Authority key identifier: 17:1A:6C:C1:47:02:92:5F:1E:3F:E5:EF:C8:12:3A:42:97:A3:7C:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/66d0cfec-dc3e-3b78-b11d-e7a82ed9a8b1.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     401658
IP address blocks:        23.138.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:d0:a8:0d:76:65:48:9f:b7:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7373c2-046b-47a5-8bb0-bb4c865d818e
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=1157cdb0-514b-47c9-902d-69e1b5965133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:f7:e8:82:bf:fa:49:1a:0e:fb:a8:2b:41:
                    41:ab:ea:f8:fe:69:73:cf:5b:e0:53:66:e6:dc:39:
                    b7:d2:49:f1:db:c6:c4:1d:c6:6a:9c:e1:cc:bd:48:
                    6d:1d:fa:db:72:91:24:9d:70:65:53:64:05:63:dc:
                    73:bc:2e:c6:d3:7a:c9:8f:e3:55:b3:af:3c:64:d7:
                    1c:e4:17:18:c0:80:e4:e2:21:35:0d:b1:d1:22:6e:
                    41:47:bf:88:48:d1:8b:f5:72:d1:11:df:42:b0:05:
                    b5:cf:ac:fc:01:66:96:7d:c5:a8:0d:78:5a:2b:59:
                    6b:71:9d:e8:fb:2c:f1:cc:5c:23:a4:4e:cc:39:83:
                    65:65:67:81:c2:e9:fd:dd:64:ee:ad:12:69:05:f7:
                    33:a5:5e:1c:8a:6b:83:13:58:3a:eb:df:1f:de:9a:
                    b3:01:45:d2:91:6d:e1:3f:ab:f8:db:e3:4d:c7:ed:
                    80:32:70:ed:05:dc:01:65:c7:89:c3:58:e5:2a:f3:
                    11:18:9e:4d:d7:2d:f4:d6:e7:52:0a:ea:98:c9:23:
                    f3:15:7e:63:27:1f:19:84:2a:9b:73:37:e6:a2:b2:
                    c5:98:da:e5:dc:80:dc:12:cc:aa:95:62:4b:36:d3:
                    43:80:14:51:78:75:d4:90:13:36:bc:71:90:2f:fd:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0A:02:F6:F7:C9:61:45:6B:19:3B:31:51:B4:EF:AF:58:3A:32:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/66d0cfec-dc3e-3b78-b11d-e7a82ed9a8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.crl

            X509v3 Authority Key Identifier:
                keyid:17:1A:6C:C1:47:02:92:5F:1E:3F:E5:EF:C8:12:3A:42:97:A3:7C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:5c:d7:ff:6c:07:10:b9:b5:6b:35:e3:f6:70:33:66:bf:
         00:3b:aa:0c:43:09:0f:0f:09:57:88:4c:10:e5:96:c5:19:3e:
         32:92:fb:2e:ef:ee:97:d6:b9:03:f8:7a:d0:90:3c:9c:6d:7a:
         d1:9f:d4:92:27:d7:16:27:3c:de:45:47:97:fe:19:22:2d:06:
         e3:1a:b2:2a:e7:fd:a1:70:6e:a3:21:28:3d:98:a0:3e:dc:c2:
         55:e2:e9:1f:9e:b3:ff:bf:bb:76:05:b6:ea:64:82:03:fc:4d:
         68:b6:8b:01:30:5a:6f:4a:e0:c6:bd:2e:3b:6a:6a:b9:4f:6a:
         fe:49:04:93:5e:c1:fb:a5:89:4d:9d:07:1e:8b:19:b0:c5:4a:
         05:e3:b4:1f:92:cc:17:c9:e8:a8:7b:a6:c4:cc:41:f0:d2:2a:
         59:1a:04:02:d6:36:a2:6f:c6:ac:5c:91:db:b0:60:a9:cc:2f:
         14:ea:5d:12:b3:f8:9a:18:07:23:89:3f:d2:d8:16:17:20:0c:
         fd:ff:a5:28:99:82:25:0c:0c:7a:d4:83:3d:ff:ca:ee:c8:0a:
         e7:55:88:66:16:09:f7:b7:96:86:1e:f8:76:8f:24:66:33:a5:
         9e:5c:4f:82:19:59:19:b9:a1:5e:b8:10:ce:2a:37:09:60:bc:
         4e:a0:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:32 2026 by rpki-client