Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a/3761f453-ab87-391b-bec9-3bb0bcd91ddf.roa
File:                     3761f453-ab87-391b-bec9-3bb0bcd91ddf.roa (raw, json)
Hash identifier:          zMuOaKl2yywqb7bsLGmwdHNAjnQ1FPbIkbaxOPFptpI=
Subject key identifier:   28:3B:66:D4:07:A7:CF:2C:2F:1A:AA:C8:63:B3:0C:C9:1F:2D:36:71
Certificate issuer:       /CN=d7900c12-e99a-441b-b8ad-28063ce05d9a
Certificate serial:       010D0C9F4328584D8195163BAE05FD717AA39C80
Authority key identifier: B5:73:6F:3C:09:21:73:C8:54:75:8D:B0:98:64:24:EF:32:DA:E5:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a/3761f453-ab87-391b-bec9-3bb0bcd91ddf.roa
Signing time:             Tue 14 Apr 2026 18:01:15 +0000
ROA not before:           Tue 14 Apr 2026 18:01:15 +0000
ROA not after:            Mon 13 Jul 2026 18:01:15 +0000
asID:                     402393
IP address blocks:        23.156.124.0/24 maxlen: 24
                          2602:f3fb::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a/d7900c12-e99a-441b-b8ad-28063ce05d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a/d7900c12-e99a-441b-b8ad-28063ce05d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:95:16:3b:ae:05:fd:71:7a:a3:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7900c12-e99a-441b-b8ad-28063ce05d9a
        Validity
            Not Before: Apr 14 18:01:15 2026 GMT
            Not After : Jul 13 18:01:15 2026 GMT
        Subject: CN=3d10cf8f-6880-4e70-b94e-62b7e4714821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2e:52:a9:c0:f4:74:5b:42:5e:b1:98:60:be:
                    b5:62:78:ce:97:40:53:5f:6b:8f:98:71:c1:5b:4d:
                    c0:02:7d:d7:b4:d2:7b:69:f1:38:2a:42:4c:3c:0e:
                    b1:dc:47:da:f5:fb:3d:c9:85:05:db:81:06:24:ae:
                    d3:69:37:f4:ca:b2:4d:07:4a:d2:c4:c7:8c:47:83:
                    6c:d8:67:ad:bb:c8:f2:1d:ff:75:52:93:77:10:e6:
                    3b:cc:b1:07:57:52:96:f7:18:60:7b:c7:d6:93:14:
                    49:81:f8:61:6a:6d:8c:7c:8b:01:f5:37:61:b3:93:
                    68:36:34:b3:dc:43:4b:1d:cd:eb:72:9c:36:e5:2d:
                    fe:84:ff:7d:e6:25:21:c7:d2:8a:bb:2f:8b:68:79:
                    a5:a8:52:e5:2a:91:77:46:96:db:1c:16:66:6b:1e:
                    6d:37:6b:ad:e9:48:fc:d6:6b:96:1a:45:dc:3c:ad:
                    14:e2:ff:60:95:d9:08:49:11:02:2c:54:b6:b1:07:
                    26:e1:0f:60:f4:f1:42:43:9d:1a:99:11:2f:59:0a:
                    19:59:73:77:f9:38:ac:06:a6:e3:c7:c7:75:cb:7f:
                    6f:3a:de:f6:63:4e:0a:00:20:c2:d2:42:84:d9:47:
                    56:c9:5d:46:8a:b8:53:d8:f1:02:0d:3e:6f:8d:8a:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3B:66:D4:07:A7:CF:2C:2F:1A:AA:C8:63:B3:0C:C9:1F:2D:36:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a/3761f453-ab87-391b-bec9-3bb0bcd91ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a/d7900c12-e99a-441b-b8ad-28063ce05d9a.crl

            X509v3 Authority Key Identifier:
                keyid:B5:73:6F:3C:09:21:73:C8:54:75:8D:B0:98:64:24:EF:32:DA:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d7900c12-e99a-441b-b8ad-28063ce05d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.124.0/24
                IPv6:
                  2602:f3fb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:35:b7:1a:10:3e:3a:92:84:ca:4d:0e:47:1e:2d:c4:b7:
         e5:95:d7:e5:0e:0c:a6:c7:1e:f1:aa:b1:bf:1d:ec:98:37:6e:
         2a:2e:8b:aa:74:da:c7:d6:f0:21:9d:48:ba:85:97:fe:7a:3e:
         aa:49:47:08:76:5a:ef:60:c9:46:e4:67:2e:e7:4b:2a:4e:e5:
         68:19:de:7d:8c:d2:16:53:5a:f3:f7:ce:b2:11:f9:45:1c:12:
         59:6c:c7:f4:e9:0c:95:f0:ce:00:0a:45:fa:f7:c6:b5:e3:04:
         d7:25:77:e6:ec:e1:6b:d4:28:75:f6:bd:1b:69:86:de:1d:0e:
         f9:90:0d:ad:60:66:92:f9:b1:5b:12:67:8d:ad:d1:db:43:34:
         4d:e1:a5:ce:99:37:e1:3a:3c:7c:10:78:ae:97:25:e5:6d:dd:
         64:f9:61:8a:f2:1a:fc:6f:5e:7c:de:c1:99:d2:d8:09:43:b3:
         27:9a:a8:24:da:52:9a:1d:05:b7:85:ba:1f:ce:79:95:6e:eb:
         80:81:31:e6:f4:fd:df:e9:8f:f9:bb:04:a4:dc:7e:4e:16:7d:
         35:70:b0:e2:7d:85:f3:48:2d:ee:de:73:2b:08:90:84:fe:7a:
         f3:f4:a7:d2:91:74:2c:d3:76:18:df:58:38:55:4b:82:5e:54:
         2f:73:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:08 2026 by rpki-client