Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/27222ab4-8b8e-30af-ba90-9a13ad26fc67.roa
File:                     27222ab4-8b8e-30af-ba90-9a13ad26fc67.roa (raw, json)
Hash identifier:          doU+jcekz0HS/7Y3aSQBxAe3J+z8XsBq2FIFxam8gA8=
Subject key identifier:   C8:F2:92:45:AF:79:4B:C1:07:14:CC:E9:99:88:95:86:7B:8F:19:CC
Certificate issuer:       /CN=acbc4801-c34f-4a9c-92fc-e1576985a43e
Certificate serial:       010D0C9F4328584D67DFB830E38149AD103CC000
Authority key identifier: C3:A9:D8:8B:93:02:F6:98:B8:3D:6A:60:FC:74:DF:F2:AF:08:B6:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/27222ab4-8b8e-30af-ba90-9a13ad26fc67.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     152179
IP address blocks:        23.141.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/acbc4801-c34f-4a9c-92fc-e1576985a43e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/acbc4801-c34f-4a9c-92fc-e1576985a43e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:b8:30:e3:81:49:ad:10:3c:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbc4801-c34f-4a9c-92fc-e1576985a43e
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=39469203-9f7c-4a61-bbfb-923c93a18ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:9c:80:e4:fb:4f:bf:ca:53:21:e0:7e:b9:
                    e7:eb:13:2a:ca:c3:0b:ab:a1:2a:69:f8:7d:84:93:
                    4f:c9:4f:1d:ac:d2:6d:42:5a:7b:98:b4:3c:90:ae:
                    61:4f:b1:e7:93:ff:67:38:1a:f0:0f:ab:e5:e9:f2:
                    9e:a2:38:df:d9:45:97:08:48:fa:8b:70:36:9f:9c:
                    ba:79:79:a3:44:11:16:1a:03:4b:b9:76:17:c2:01:
                    23:92:b4:ad:37:5e:0d:6b:c4:98:fb:46:9c:ae:6a:
                    5f:63:a0:65:df:43:db:c5:69:46:33:8f:44:50:76:
                    13:f2:e7:23:31:c6:f7:79:36:5d:90:55:1a:3f:b7:
                    bb:54:c2:93:a6:71:fe:67:44:b6:ee:dd:2e:46:0e:
                    b6:d3:11:bb:97:24:95:8f:08:47:4c:bb:36:3e:c5:
                    5b:27:bd:1f:7e:aa:e4:7e:56:7c:fe:97:43:99:00:
                    73:42:87:2b:8c:6b:03:67:47:b5:52:18:f7:dd:d3:
                    0a:5f:11:5e:5c:06:49:ec:52:6e:80:60:6b:17:f4:
                    76:d4:8b:af:03:d5:ad:72:6a:8b:c4:ac:4f:87:38:
                    d2:48:c7:2c:6a:60:67:22:f2:2d:ca:2b:cf:de:9d:
                    fc:3d:f9:e8:ca:7d:d9:9c:a3:7e:85:43:bf:f7:00:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F2:92:45:AF:79:4B:C1:07:14:CC:E9:99:88:95:86:7B:8F:19:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/27222ab4-8b8e-30af-ba90-9a13ad26fc67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e/acbc4801-c34f-4a9c-92fc-e1576985a43e.crl

            X509v3 Authority Key Identifier:
                keyid:C3:A9:D8:8B:93:02:F6:98:B8:3D:6A:60:FC:74:DF:F2:AF:08:B6:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acbc4801-c34f-4a9c-92fc-e1576985a43e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:e3:0e:05:01:7b:c0:ef:a5:e1:46:be:9c:ad:50:e8:5b:
         b6:28:7f:1e:39:1e:74:09:3f:12:b1:7c:7a:ac:1e:d0:46:00:
         6d:96:85:68:ec:c5:41:25:28:b8:dd:4b:20:bc:d4:c3:ac:a8:
         81:0b:c9:fb:e3:2e:cd:d2:34:3c:fc:21:da:f1:99:15:84:1e:
         21:52:dd:00:f7:00:c1:e3:35:25:4f:9d:9b:89:db:31:75:2d:
         e8:5a:42:4c:cc:54:75:76:a5:63:e9:ed:a3:e5:2b:ce:a5:fc:
         ac:a7:f3:3d:2b:64:44:5d:4b:20:a9:9e:ef:a8:46:e9:c3:b1:
         04:c0:3d:d2:a5:3b:e1:06:04:25:aa:c9:33:52:0f:8c:a2:ef:
         fd:cd:5b:17:b0:bc:61:a1:f5:5c:04:ba:f1:52:59:1d:66:1a:
         5d:20:c2:c0:49:06:86:94:4f:9a:bb:05:19:b2:fd:46:f2:2e:
         7a:a4:c9:45:ad:a2:67:0b:b6:27:9a:8a:15:e4:53:45:ba:14:
         7a:34:50:13:26:a9:18:8b:51:6d:99:1a:75:91:94:1c:9e:4e:
         b1:1e:67:ca:58:ab:32:e7:17:91:05:7c:36:09:0c:a2:41:b3:
         48:82:f5:e5:b7:ef:3c:7c:aa:20:56:cf:92:38:0d:6c:88:54:
         e1:5d:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:54 2026 by rpki-client