Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/57b08375-edfa-3ca6-816f-7c71735f8648.roa
File:                     57b08375-edfa-3ca6-816f-7c71735f8648.roa (raw, json)
Hash identifier:          k5FwQpPl6DMx7/gfbMw9Q/N9m05beJRdBfkKImxnPaI=
Subject key identifier:   6E:4B:53:19:4F:37:45:46:12:00:3B:48:B6:09:B2:CC:FA:6E:B4:30
Certificate issuer:       /CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2
Certificate serial:       010D0C9F4328584CCE1A25F8C68B41859F246A00
Authority key identifier: 3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/57b08375-edfa-3ca6-816f-7c71735f8648.roa
Signing time:             Mon 09 Feb 2026 11:03:51 +0000
ROA not before:           Mon 09 Feb 2026 11:03:51 +0000
ROA not after:            Sun 10 May 2026 10:03:51 +0000
asID:                     152179
IP address blocks:        23.152.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:1a:25:f8:c6:8b:41:85:9f:24:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df1d88c-4b1d-4a8a-8319-5d784e995be2
        Validity
            Not Before: Feb  9 11:03:51 2026 GMT
            Not After : May 10 10:03:51 2026 GMT
        Subject: CN=fcf18732-9b51-4d87-8f3b-f2df8dc65108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:06:da:ec:9d:73:74:12:36:78:29:86:b0:
                    38:2d:0e:87:5d:40:ad:1f:f8:4c:d9:bc:6c:7d:11:
                    94:05:2b:b8:ed:8b:2e:da:89:f8:ed:27:a7:c1:75:
                    ff:da:a5:dc:3a:7f:30:12:82:41:cd:0e:21:56:bf:
                    7c:a0:4a:be:74:f6:bd:43:34:cf:9d:ed:8f:ca:ed:
                    5e:40:45:6b:14:24:49:39:dd:2c:5f:40:43:b1:55:
                    08:bb:60:5c:49:2c:58:05:cf:bd:a1:0f:07:14:2f:
                    5c:5c:2d:43:da:fa:8a:09:4e:3d:bb:00:4a:28:2e:
                    88:17:70:05:ee:3f:ff:4c:e9:7a:48:3d:33:69:3c:
                    7b:f7:eb:68:86:df:0d:10:a8:b2:e1:f5:af:75:41:
                    a9:25:02:fd:98:d1:fe:77:ac:79:6e:20:52:74:e0:
                    19:40:9f:63:15:3d:a2:d6:b7:03:6e:b7:d2:02:ac:
                    93:3e:74:5c:78:1c:c8:e8:ac:b6:ec:4b:03:93:d9:
                    fe:c8:13:2c:03:25:11:e1:bd:3d:6a:49:0e:13:64:
                    05:19:12:17:35:42:12:85:f2:7e:c0:a6:0e:62:5d:
                    7b:d1:22:e3:47:64:fe:3a:c6:7f:49:cf:12:c5:36:
                    8f:ff:60:6c:2a:19:20:58:47:fe:3a:70:0b:19:1a:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:53:19:4F:37:45:46:12:00:3B:48:B6:09:B2:CC:FA:6E:B4:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/57b08375-edfa-3ca6-816f-7c71735f8648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2/1df1d88c-4b1d-4a8a-8319-5d784e995be2.crl

            X509v3 Authority Key Identifier:
                keyid:3B:8A:3C:69:D1:E2:A3:9B:09:9B:67:76:AF:BE:58:17:2C:DB:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1df1d88c-4b1d-4a8a-8319-5d784e995be2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:49:83:a0:91:53:d1:0f:4e:6b:0e:93:a5:a8:70:d9:21:
         1e:eb:15:96:37:ce:a6:51:48:8f:d0:12:66:8c:3e:5b:bc:4f:
         8c:1d:71:04:d5:9d:44:bd:8e:83:a2:e2:72:76:be:18:69:b6:
         bc:5f:38:65:3f:58:97:da:e6:e1:33:49:eb:e2:a0:44:e7:28:
         da:25:4e:47:da:bb:80:00:87:8c:97:d2:b0:f6:42:ce:d6:79:
         10:aa:da:ee:a5:1c:a7:4b:f0:43:b8:dc:40:c1:a5:a3:c6:73:
         97:07:74:b0:8c:d6:b4:c0:14:7b:9f:36:e4:86:24:ea:f0:3f:
         2c:29:98:ad:23:50:38:09:2d:6e:c6:ca:92:5b:c4:80:55:7d:
         86:f9:c2:67:21:a4:78:5b:4c:7c:bd:0a:38:28:b5:22:29:ad:
         f2:3b:b9:38:4a:71:64:ff:e2:8b:94:fe:0d:72:86:b8:7e:04:
         01:31:1d:7b:d0:27:0c:c9:d7:0a:27:68:25:4b:33:1f:50:78:
         5b:e4:0e:81:8e:00:5f:af:82:a7:06:ef:8f:01:49:f9:fa:cc:
         a3:ab:30:ab:94:5b:95:ca:19:aa:e0:fd:cd:cc:f1:d1:5b:18:
         9e:3d:0e:4f:bc:f4:1c:d2:f4:8e:d6:27:9f:18:83:6b:50:21:
         cc:52:50:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:06 2026 by rpki-client